proj: switch to secure connection

deploy.sh

@@ -9,3 +9,7 @@
 # [DOMAIN]/[OWNER]/[IMAGE_NAME]:[TAG]
 docker build -t git.nerdyssey.de/exodus/burg-stett-king-arth-web:latest .
 docker push git.nerdyssey.de/exodus/burg-stett-king-arth-web:latest
+
+# 
+# docker compose pull
+# docker compose up -d

doc/config/gitea.docker-compose.yml

@@ -0,0 +1,46 @@
+version: '3.8'
+
+services:
+  gitea-server:
+    image: gitea/gitea:latest
+    container_name: gitea
+    restart: unless-stopped
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+      # Database connection
+      - GITEA__database__DB_TYPE=postgres
+      - GITEA__database__HOST=gitea-db:5432
+      - GITEA__database__NAME=gitea
+      - GITEA__database__USER=gitea
+      - GITEA__database__PASSWD=###SomePassword###
+      # Web / Domain settings
+      - GITEA__server__DOMAIN=git.nerdyssey.de
+      - GITEA__server__ROOT_URL=https://git.nerdyssey.de/
+      - GITEA__server__SSH_DOMAIN=git.nerdyssey.de
+      - GITEA__server__SSH_PORT=2222
+      # Security
+      - GITEA__service__DISABLE_REGISTRATION=true
+      - GITEA__service__REQUIRE_SIGNIN_VIEW=false
+    volumes:
+      - ./data:/data
+    ports:
+      - "2222:22" # This allows Git over SSH
+    depends_on:
+      - gitea-db
+
+  gitea-db:
+    image: postgres:15-alpine
+    container_name: gitea-db
+    restart: unless-stopped
+    environment:
+      - POSTGRES_USER=gitea
+      - POSTGRES_PASSWORD=###SomePassword###
+      - POSTGRES_DB=gitea
+    volumes:
+      - ./postgres:/var/lib/postgresql/data
+
+networks:
+  default:
+    name: proxy_net
+    external: true

doc/config/mosquitto.docker-compose.yml

@@ -0,0 +1,18 @@
+services:
+  mosquitto:
+    image: eclipse-mosquitto:latest
+    container_name: mosquitto
+    restart: unless-stopped
+    # Power are managed via private subnet "proxy_net"
+    # ports:
+    #  - "1883:1883"
+    #  - "9001:9001"
+    volumes:
+      - ./config:/mosquitto/config
+      - ./data:/mosquitto/data
+      - ./log:/mosquitto/log
+
+networks:
+  default:
+    name: proxy_net
+    external: true

doc/config/nginx.docker-compose.yml

@@ -0,0 +1,20 @@
+version: '3.8'
+
+services:
+  nginx-proxy-manager:
+    image: 'jc21/nginx-proxy-manager:latest'
+    container_name: nginx-proxy-manager
+    restart: unless-stopped
+    ports:
+      - '80:80'      # Public HTTP Port (Required for Certbot challenges)
+      - '443:443'    # Public HTTPS Port
+      - '81:81'      # Admin Web Dashboard
+      - '8883:8883'    # Added for Secure MQTT (MQTTS)
+    volumes:
+      - ./data:/data
+      - ./letsencrypt:/etc/letsencrypt
+
+networks:
+  default:
+    name: proxy_net
+    external: true

docker-compose.yml

@@ -0,0 +1,17 @@
+version: '3.8'
+
+services:
+  exodus-burg-stett-king-arth-web:
+    image: git.nerdyssey.de/exodus/burg-stett-king-arth-web:latest
+    container_name: exodus-burg-stett-king-arth-web
+    restart: unless-stopped
+    # ports:
+    #   - "80:80"
+    #   - "443:443"
+    # environment:
+    #   - VITE_APP_ENV=production
+
+networks:
+  default:
+    name: proxy_net
+    external: true

src/router/index.ts

@@ -5,6 +5,8 @@ import Players from '../views/Players.vue'
 import Start from '../views/Start.vue'
 import Text from '../views/Text.vue'
 
+const routeBase: string = "nerdyssey.de/exodus/king-arthur"
+
 const routes: any[] = [
   {
     path: '/',

src/services/mqtt.ts

@@ -1,9 +1,9 @@
 import mqtt from 'mqtt'
 
-const mqttBrokerHost = '91.99.29.8'
+const mqttBrokerHost = 'mqtt.nerdyssey.de'
-const mqttBrokerPort = 9001
+const mqttBrokerPort = 443 // 9001 if not secure
 const mqttBrokerPath = '/mqtt'
-const mqttUseTls = false
+const mqttUseTls = true
 const mqttTopicRoot = 'outdoor/king-arthur/sword/'
 const mqttMessage = 'start-hit'
 
@@ -13,6 +13,7 @@ function getClient(): mqtt.MqttClient {
   const protocol = mqttUseTls ? 'wss' : 'ws'
   const brokerUrl = `${protocol}://${mqttBrokerHost}:${mqttBrokerPort}${mqttBrokerPath}`
   const tempClient = mqtt.connect(brokerUrl)
+  console.log(`MQTT Connection string ${brokerUrl}`)
   return tempClient
 }