feat(infra): add Dokploy LXC 103 and new IIS web domains

- Add LXC 103 Dokploy infrastructure (v0.28.2) with Traefik
- Deploy pdf-qr-app and qr-generator via Dokploy from GitHub
- Configure IIS VM 201: roa-qr and *.roa.romfast.ro wildcard sites
- Add SSL certificates (Let's Encrypt + wildcard DNS challenge)
- Fix Docker Swarm VIP DNS issue with dnsrr endpoint mode
- Document architecture: IIS → Traefik → Dokploy containers

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

proxmox/lxc103-dokploy/docs/pdf-qr-app.md

@@ -0,0 +1,87 @@
+# pdf-qr-app — Migrare pe Dokploy LXC 103
+
+## Descriere
+
+Aplicație pentru generare PDF cu coduri QR, migrată de pe VM 201 IIS
+pe Dokploy/LXC 103 ca serviciu Docker containerizat.
+
+- **Domeniu:** `roa-qr.romfast.ro`
+- **Server:** LXC 103 (10.0.20.167)
+- **Deployment:** Dokploy → Docker Compose
+
+---
+
+## Deploy în Dokploy UI
+
+### 1. Creare Service
+
+1. Deschide https://dokploy.romfast.ro
+2. **Services** → **Create Service** → **Docker Compose**
+3. Name: `pdf-qr-app`
+4. Server: **LXC 103 (local)**
+
+### 2. Docker Compose
+
+Completează cu docker-compose.yml al app-ului:
+
+```yaml
+version: "3.8"
+services:
+  pdf-qr-app:
+    image: <image-pdf-qr>
+    restart: unless-stopped
+    environment:
+      - NODE_ENV=production
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.pdf-qr.rule=Host(`roa-qr.romfast.ro`)"
+      - "traefik.http.routers.pdf-qr.tls=true"
+      - "traefik.http.services.pdf-qr.loadbalancer.server.port=3000"
+```
+
+### 3. Domain Configuration
+
+În Dokploy, secțiunea **Domains**:
+- Domain: `roa-qr.romfast.ro`
+- HTTPS: enabled
+- Certificate: managed by Traefik
+
+### 4. Deploy
+
+Click **Deploy** → monitorizează logs
+
+---
+
+## Verificare Post-Deploy
+
+```bash
+# Din LAN (direct Traefik)
+curl -I https://10.0.20.167/ -H "Host: roa-qr.romfast.ro"
+
+# Public (prin IIS proxy)
+curl -I https://roa-qr.romfast.ro/
+```
+
+---
+
+## DNS Necesar
+
+```
+roa-qr.romfast.ro    A    188.26.14.103
+```
+
+---
+
+## SSL Certificate (Win-ACME pe VM 201)
+
+```powershell
+cd C:\Tools\win-acme
+
+# Găsește Site ID pentru roa-qr
+Import-Module WebAdministration
+Get-Website | Select-Object ID, Name
+
+# Generează certificat
+.\wacs.exe --source iis --siteid <ID_roa-qr> --accepttos --emailaddress admin@romfast.ro
+iisreset
+```