Production Deployment

your-domain.com {
    reverse_proxy localhost:8080
    
    # Automatic HTTPS
    tls {
        protocols tls1.2 tls1.3
    }
    
    # Security headers
    header {
        X-Content-Type-Options nosniff
        X-Frame-Options DENY
        X-XSS-Protection "1; mode=block"
    }
}

server {
    listen 443 ssl http2;
    server_name your-domain.com;
    
    ssl_certificate /path/to/cert.pem;
    ssl_certificate_key /path/to/key.pem;
    
    location / {
        proxy_pass http://localhost:8080;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

# Install cloudflared
brew install cloudflared  # macOS
# or
wget https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64

# Create tunnel
cloudflared tunnel create allternit-runtime

# Configure and run
cloudflared tunnel route dns <tunnel-id> runtime.your-domain.com
cloudflared tunnel run <tunnel-id>

# Basic health
curl https://your-domain.com/health

# Detailed status (authenticated)
curl -H "Authorization: Bearer $API_KEY" \
  https://your-domain.com/status

metrics:
  enabled: true
  path: /metrics
  port: 9090

logging:
  forward:
    - type: loki
      url: https://logs.example.com
      labels:
        service: allternit-runtime

#!/bin/bash
# /opt/allternit/backup.sh

BACKUP_DIR="/backups/allternit"
DATE=$(date +%Y%m%d_%H%M%S)
DB_PATH="/var/lib/allternit/data.sqlite"

# Create backup
sqlite3 $DB_PATH ".backup '$BACKUP_DIR/backup_$DATE.sqlite'"

# Keep only last 7 days
find $BACKUP_DIR -name "backup_*.sqlite" -mtime +7 -delete

0 2 * * * /opt/allternit/backup.sh