`viewer/DEPLOY.md`

22 lines
# buildingpermits.agentabrams.com — deploy

PUBLIC viewer of LA building permits (public data), served off Mac2 via Cloudflare Tunnel.

## Topology
buildingpermits.agentabrams.com  -> Cloudflare (proxied CNAME -> <tunnel>.cfargotunnel.com)
  -> cloudflared tunnel `buildingpermits` (id f267f183-a221-467f-905a-449698bff870)
  -> http://127.0.0.1:9873  (pm2 `buildingpermits-viewer`, VIEWER_NO_AUTH=1, reads local realestate DB)

## pm2 processes (Mac2)
- `buildingpermits-viewer`  -> viewer/run-public.sh (node server.js, port 9873, no auth = public)
- `buildingpermits-tunnel`  -> cloudflared tunnel run buildingpermits (config ~/.cloudflared/buildingpermits.yml)
Both pm2-saved. Internal auth copy still runs on 9814 (admin/DW2024!).

## Change the app
Edit viewer/ then `pm2 restart buildingpermits-viewer`. Tunnel needs no restart.

## Notes
- CNAME lives in the agentabrams.com CF zone (id 0121a01d). Proxied (orange) is required.
- One extra CNAME under the DW zone was auto-created by cloudflared route dns (cert only auths
  the DW zone); it is inert and Steve can prune it later.