Usuario (Web/Mobile)
        │
        │ HTTPS
        ▼
  Cloudflare (CDN + WAF + SSL)
        │
        │ HTTP (puerto 80)
        ▼
    Nginx (Reverse Proxy)
        │
        ├─────────────────────────────────┐
        │                                 │
        ▼                                 ▼
   Frontend SPA                      FastAPI Backend
   /dist (estático)                  Puerto 8000/8001

# Archivo de configuración
/etc/nginx/sites-available/lacajita
/etc/nginx/sites-enabled/lacajita -> ../sites-available/lacajita

# Validar configuración
nginx -t

# Recargar
systemctl reload nginx

# Reiniciar
systemctl restart nginx

# Ver logs
tail -f /var/log/nginx/error.log
tail -f /var/log/nginx/access.log

server {
    listen 80;
    server_name caja.segrd.com;
    
    # Frontend SPA
    root /opt/adm-caja-unified/fastapi-playlists/Lacajita/Adm-Caj/dist;
    location / {
        try_files $uri $uri/ /index.html;
    }
    
    # API Backend (quita /api)
    location /api/ {
        rewrite ^/api/(.*)$ /$1 break;
        proxy_pass http://127.0.0.1:8001;
    }
    
    # Imágenes estáticas
    location /img/ {
        alias /opt/adm-caja-unified/fastapi-playlists/img/;
        expires 30d;
    }
}

# Estado
systemctl status lacajita-api

# Reiniciar
systemctl restart lacajita-api

# Ver logs
journalctl -u lacajita-api -f

# Estado
systemctl status lacajita-mobile

# Reiniciar
systemctl restart lacajita-mobile

# Ver logs
journalctl -u lacajita-mobile -f

# /etc/systemd/system/lacajita-api.service
[Unit]
Description=La Cajita TV API
After=network.target postgresql.service

[Service]
Type=simple
User=www-data
WorkingDirectory=/opt/adm-caja-unified/fastapi-playlists/Lacajita
ExecStart=/opt/adm-caja-unified/fastapi-playlists/Lacajita/venv/bin/uvicorn Api:app --host 127.0.0.1 --port 8001
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target

cd /opt/adm-caja-unified/fastapi-playlists/Lacajita/Adm-Caj

# Build
npm run build

# Resultado en /dist
ls -la dist/

# Script existente
/opt/adm-caja-unified/fastapi-playlists/Lacajita/deploy/build-and-deploy.sh

# O manual:
cd /opt/adm-caja-unified/fastapi-playlists/Lacajita/Adm-Caj
npm run build
systemctl reload nginx

caja.segrd.com → Cloudflare Proxy → 24.199.80.16 (origen)

# Certificados existentes
ls /etc/letsencrypt/live/b5f8a23e7d06c2de5ef515ae93e16016.sajet.us/

# Renovar
certbot renew

# Nuevo certificado
certbot --nginx -d dominio.com

version: '3.8'
services:
  api:
    build: ./api
    ports:
      - "8001:8001"
    environment:
      - DATABASE_URL=postgresql://...
    depends_on:
      - db
      - redis
  
  db:
    image: postgres:15
    environment:
      POSTGRES_DB: lacajita_db
      POSTGRES_USER: lacajita_app
      POSTGRES_PASSWORD: ${DB_PASSWORD}
    volumes:
      - postgres_data:/var/lib/postgresql/data
  
  redis:
    image: redis:7
    ports:
      - "6379:6379"

volumes:
  postgres_data:

# Iniciar servicios
docker-compose up -d

# Ver logs
docker-compose logs -f api

# Rebuild
docker-compose build --no-cache api
docker-compose up -d

# Frontend
curl -s -o /dev/null -w "%{http_code}" https://caja.segrd.com/

# API Admin
curl -s https://caja.segrd.com/api/health

# API Mobile
curl -s http://127.0.0.1:8000/health

# Nginx
systemctl status nginx

# PostgreSQL
pg_isready -h localhost -U lacajita_app

# Puertos
ss -tlnp | grep -E "(80|8000|8001)"

# Verificar backend corriendo
ps aux | grep uvicorn

# Verificar puertos
ss -tlnp | grep 8001

# Ver logs nginx
tail -50 /var/log/nginx/error.log

# Reiniciar servicios
systemctl restart lacajita-api
systemctl restart nginx

# Verificar build existe
ls -la /opt/adm-caja-unified/fastapi-playlists/Lacajita/Adm-Caj/dist/

# Rebuild
cd /opt/adm-caja-unified/fastapi-playlists/Lacajita/Adm-Caj
npm run build

# Verificar nginx config
nginx -t
systemctl reload nginx

# Ver logs
journalctl -u lacajita-api -n 100

# Reiniciar
systemctl restart lacajita-api

# Verificar base de datos
pg_isready -h localhost