256 lines
5.9 KiB
Markdown
256 lines
5.9 KiB
Markdown
# Caseware — Ilia Dobkin portfolio site
|
|
|
|
Static one-page site for CaseWare / CaseView consulting work. No build step — plain HTML and CSS.
|
|
|
|
| File | Purpose |
|
|
|-------------|----------------------------------|
|
|
| `index.html`| Page content and structure |
|
|
| `styles.css`| Layout, typography, theme |
|
|
|
|
**Live site:** https://caseware.levkin.ca
|
|
**Booking:** https://cal.levkin.ca/ilia/consult
|
|
|
|
---
|
|
|
|
## Local development
|
|
|
|
```bash
|
|
cd caseware
|
|
python3 -m http.server 8765
|
|
# Open http://localhost:8765
|
|
```
|
|
|
|
Or open `index.html` directly in a browser (some features work best over HTTP).
|
|
|
|
---
|
|
|
|
## Git repository
|
|
|
|
| Item | Value |
|
|
|---------|--------|
|
|
| Remote | `gitea@10.0.30.169:ilia/caseware.git` |
|
|
| Branch | `main` |
|
|
|
|
### Push changes (from your Mac)
|
|
|
|
```bash
|
|
cd /path/to/caseware
|
|
git add -A
|
|
git commit -m "Describe your change"
|
|
git push
|
|
```
|
|
|
|
---
|
|
|
|
## Production deployment
|
|
|
|
Traffic flow:
|
|
|
|
```
|
|
Internet → Caddy (caseware.levkin.ca) → LXC 215 (nginx :80) → /var/www/caseware
|
|
```
|
|
|
|
| Component | Details |
|
|
|-----------|---------|
|
|
| Proxmox host | `PVENAS` |
|
|
| Container ID | `215` |
|
|
| Hostname | `caseware` |
|
|
| IP | `10.0.10.105` (DHCP on `vmbr0`) |
|
|
| Gateway | `10.0.10.1` |
|
|
| Web root | `/var/www/caseware` |
|
|
| Web server | nginx |
|
|
|
|
### Caddy (on separate server)
|
|
|
|
```caddy
|
|
caseware.levkin.ca {
|
|
reverse_proxy 10.0.10.105:80
|
|
}
|
|
```
|
|
|
|
Reload after edits: `systemctl reload caddy`
|
|
|
|
### Create LXC 215 (reference — already done)
|
|
|
|
```bash
|
|
pct create 215 local:vztmpl/debian-12-standard_12.12-1_amd64.tar.zst \
|
|
--hostname caseware \
|
|
--memory 512 \
|
|
--swap 256 \
|
|
--cores 1 \
|
|
--rootfs local-lvm:4 \
|
|
--net0 name=eth0,bridge=vmbr0,ip=dhcp \
|
|
--unprivileged 1 \
|
|
--onboot 1 \
|
|
--start 1
|
|
|
|
pct exec 215 -- hostname -I # note the IP (10.0.10.105)
|
|
```
|
|
|
|
### Shell access to the container
|
|
|
|
No default root password. From Proxmox:
|
|
|
|
```bash
|
|
pct enter 215
|
|
```
|
|
|
|
---
|
|
|
|
## First-time setup inside CT 215
|
|
|
|
```bash
|
|
apt update && apt install -y git nginx openssh-client
|
|
|
|
# SSH key for Gitea (add public key in Gitea → Settings → SSH Keys)
|
|
ssh-keygen -t ed25519 -N "" -f /root/.ssh/id_ed25519
|
|
cat /root/.ssh/id_ed25519.pub
|
|
ssh -o StrictHostKeyChecking=accept-new -T gitea@10.0.30.169
|
|
|
|
mkdir -p /var/www/caseware
|
|
git clone gitea@10.0.30.169:ilia/caseware.git /var/www/caseware
|
|
chown -R root:root /var/www/caseware
|
|
chmod 755 /var/www/caseware
|
|
chmod 644 /var/www/caseware/index.html /var/www/caseware/styles.css
|
|
```
|
|
|
|
### nginx site config
|
|
|
|
```bash
|
|
cat > /etc/nginx/sites-available/caseware <<'EOF'
|
|
server {
|
|
listen 80 default_server;
|
|
listen [::]:80 default_server;
|
|
server_name _;
|
|
root /var/www/caseware;
|
|
index index.html;
|
|
|
|
location / {
|
|
try_files $uri $uri/ =404;
|
|
}
|
|
}
|
|
EOF
|
|
|
|
ln -sf /etc/nginx/sites-available/caseware /etc/nginx/sites-enabled/caseware
|
|
rm -f /etc/nginx/sites-enabled/default
|
|
nginx -t && systemctl enable --now nginx
|
|
```
|
|
|
|
---
|
|
|
|
## Deploy updates (pull on server)
|
|
|
|
From Proxmox:
|
|
|
|
```bash
|
|
pct exec 215 -- bash -c 'cd /var/www/caseware && git pull'
|
|
```
|
|
|
|
Or inside the container:
|
|
|
|
```bash
|
|
pct enter 215
|
|
cd /var/www/caseware && git pull
|
|
exit
|
|
```
|
|
|
|
Hard-refresh the browser (Cmd+Shift+R) after deploy.
|
|
|
|
---
|
|
|
|
## Troubleshooting (issues we hit)
|
|
|
|
### 1. `git clone` asks for password / “not a git repository”
|
|
|
|
**Cause:** Container had no SSH key registered in Gitea.
|
|
|
|
**Fix:**
|
|
|
|
1. Generate key inside 215: `ssh-keygen -t ed25519 -N "" -f /root/.ssh/id_ed25519`
|
|
2. Add `cat /root/.ssh/id_ed25519.pub` to Gitea (user `ilia`) → SSH Keys
|
|
3. Test: `ssh -T gitea@10.0.30.169` — should say “Hi there, ilia!” with no password
|
|
4. Clone: `git clone gitea@10.0.30.169:ilia/caseware.git /var/www/caseware`
|
|
|
|
Do **not** rely on cloning on the Proxmox host unless you prefer that workflow — clone inside 215 with its own key (named e.g. `caseware` in Gitea).
|
|
|
|
---
|
|
|
|
### 2. `fatal: detected dubious ownership in repository`
|
|
|
|
**Cause:** `chown -R www-data:www-data /var/www/caseware` made the repo owned by `www-data` while `git pull` runs as `root`.
|
|
|
|
**Fix (recommended):** Repo owned by root; nginx only needs read access:
|
|
|
|
```bash
|
|
chown -R root:root /var/www/caseware
|
|
chmod 755 /var/www/caseware
|
|
chmod 644 /var/www/caseware/index.html /var/www/caseware/styles.css
|
|
```
|
|
|
|
**Alternative:** `git config --global --add safe.directory /var/www/caseware`
|
|
|
|
---
|
|
|
|
### 3. “Welcome to nginx!” instead of the site
|
|
|
|
**Cause:** Default site still enabled; root pointed at `/var/www/html`.
|
|
|
|
**Fix:** Enable `caseware` site config (see above), remove `sites-enabled/default`, `nginx -t && systemctl reload nginx`.
|
|
|
|
Verify: `curl -s http://127.0.0.1/ | head -5` should show `<!doctype html>` and “Ilia Dobkin”.
|
|
|
|
---
|
|
|
|
### 4. Wrong network assumptions
|
|
|
|
Lab LAN uses **`10.0.10.0/24`** (gateway `10.0.10.1` on `vmbr0`), not `10.0.30.x`.
|
|
Gitea lives at **`10.0.30.169`** — different subnet; routing must allow 215 → Gitea.
|
|
|
|
Container IP from DHCP: `pct exec 215 -- hostname -I` → currently **10.0.10.105**.
|
|
|
|
---
|
|
|
|
### 5. LinkedIn link 404
|
|
|
|
These URLs do **not** work:
|
|
|
|
- `https://www.linkedin.com/in/idobkin/`
|
|
- `https://www.linkedin.com/in/iliadobkin/`
|
|
|
|
Working profile in site:
|
|
|
|
- `https://www.linkedin.com/in/ilia-dobkin-8263343/`
|
|
|
|
---
|
|
|
|
### 6. No root password on LXC
|
|
|
|
Expected. Use `pct enter 215` from Proxmox. Set `passwd root` only if you need SSH from other machines.
|
|
|
|
---
|
|
|
|
### 7. `curl` not found inside container
|
|
|
|
Install optionally: `apt install -y curl`
|
|
Or test from Proxmox host: `curl -I http://10.0.10.105/`
|
|
|
|
---
|
|
|
|
## Quick reference
|
|
|
|
| Task | Command |
|
|
|------|---------|
|
|
| Enter container | `pct enter 215` |
|
|
| Container IP | `pct exec 215 -- hostname -I` |
|
|
| Pull latest | `pct exec 215 -- bash -c 'cd /var/www/caseware && git pull'` |
|
|
| Test site | `curl -I http://10.0.10.105/` |
|
|
| nginx reload | `pct exec 215 -- systemctl reload nginx` |
|
|
|
|
---
|
|
|
|
## Optional improvements (not done yet)
|
|
|
|
- `og:image` for LinkedIn/Slack link previews
|
|
- Mobile nav for small screens
|
|
- DHCP reservation for 215 so `10.0.10.105` stays stable (or set static IP in Proxmox)
|