feat(infra): add Dokploy LXC 103 and new IIS web domains

- Add LXC 103 Dokploy infrastructure (v0.28.2) with Traefik
- Deploy pdf-qr-app and qr-generator via Dokploy from GitHub
- Configure IIS VM 201: roa-qr and *.roa.romfast.ro wildcard sites
- Add SSL certificates (Let's Encrypt + wildcard DNS challenge)
- Fix Docker Swarm VIP DNS issue with dnsrr endpoint mode
- Document architecture: IIS → Traefik → Dokploy containers

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Claude Agent
2026-03-03 15:44:53 +00:00
parent ae325d33b6
commit fcf1e06c66
8 changed files with 770 additions and 6 deletions

View File

@@ -60,8 +60,11 @@ ssh root@10.0.20.201 "qm config 201 | grep -E 'efidisk|virtio'"
- roa.romfast.ro
- dokploy.romfast.ro
- gitea.romfast.ro
- roa-qr.romfast.ro ← **NOU** (proxy → LXC 103 Traefik → pdf-qr-app)
- *.roa.romfast.ro ← **NOU** wildcard (proxy → LXC 103 Traefik → Dokploy apps)
**Documentație:** Vezi `vm201-certificat-letsencrypt-iis.md`
**Arhitectură Dokploy:** Vezi `vm201-dokploy-infrastructure.md`
#### 3. Monitorizare UPS
- **WinNUT Client** - Monitorizare vizuală status UPS în timp real
@@ -99,6 +102,8 @@ ssh root@10.0.20.201 "qm config 201 | grep -E 'efidisk|virtio'"
- Default Web Site (roa.romfast.ro)
- Dokploy (dokploy.romfast.ro)
- Gitea (gitea.romfast.ro)
- roa-qr (roa-qr.romfast.ro) → proxy LXC 103 Traefik
- roa-apps (*.roa.romfast.ro) → proxy wildcard LXC 103 Traefik
**Configurare SSL:** Vezi `vm201-certificat-letsencrypt-iis.md`
@@ -339,12 +344,18 @@ ssh root@10.0.20.201 "qm delsnapshot 201 pre-update-snapshot"
### Documentație VM 201 Specifică
- **SSL Certificates IIS:** `docs/vm201-certificat-letsencrypt-iis.md`
- **Arhitectură Dokploy + Domenii:** `docs/vm201-dokploy-infrastructure.md`
- **Troubleshooting Incident 2025-10-08:** `docs/vm201-troubleshooting-backup-nfs.md`
- **Troubleshooting Pană Curent 2026-01-11:** `docs/vm201-troubleshooting-pana-curent-2026-01-11.md`
### Scripturi VM 201
- **Verificare certificate (Windows):** `scripts/check-ssl-certificates.ps1`
- **Monitorizare certificate (Proxmox):** `scripts/monitor-ssl-certificates.sh`
- **Setup site-uri IIS noi (Dokploy):** `scripts/setup-new-iis-sites.ps1`
### Configurații IIS
- **web.config roa-qr.romfast.ro:** `iis-configs/roa-qr.web.config`
- **web.config *.roa.romfast.ro:** `iis-configs/roa-apps-wildcard.web.config`
### Documentație Infrastructură Generală
- **Proxmox Cluster General:** `../cluster/README.md`
@@ -376,6 +387,7 @@ ssh root@10.0.20.201 "qm delsnapshot 201 pre-update-snapshot"
- Dokploy: 10.0.20.167:3000
- Gitea: 10.0.20.165:3000
- Portainer: 10.0.20.170:9443
- LXC 103 Traefik (*.roa.romfast.ro, roa-qr): 10.0.20.167:443
### High Availability și Replicare
@@ -446,6 +458,6 @@ qm migrate 201 pvemini --online
---
**Ultima actualizare:** 2026-01-11
**Ultima actualizare:** 2026-03-02
**Autor:** Marius Mutu
**Proiect:** ROMFASTSQL - VM 201 Documentation