backend/scripts/websites-agent

Websites deploy / provision agent (runs on websites VM: /opt/websites-agent)

Endpoints (X-Deploy-Token):

POST /deploy { slug, wait?: true } — git pull + build + pm2 restart

wait=true (API default): sync, returns success/failed

wait=false: fire-and-forget 202 accepted

GET /deploy-status?slug=… — last deploy status JSON for slug

POST /provision { slug, host, gitRepoUrl } — clone + nginx + ecosystem + allowlist (no certbot)

POST /ssl { host, slug? } — certbot for apex + www (nginx must exist)

POST /park { host, canonicalHost } — nginx 301 apex+www → https://canonical

POST /unpark { host } — remove parked nginx site

GET /health

Scripts on the VM (same folder):

patch-nginx-seo.sh — add /sitemap.xml + /robots.txt API proxies to an existing nginx site

patch-nginx-pay.sh — add /meshkee/payments/{zarinpal|mellat}/callback API proxies

patch-nginx-torob.sh — add /torob_api/v3/products API proxy (store-module tenants)

Env (.env): PORT, DEPLOY_TOKEN, ALLOWED_SLUGS

Note: provision.sh intentionally skips certbot. SSL is issued via POST /ssl so

Edit/Add Domain does not hang when www DNS is wrong.

deploy.sh checks out origin/HEAD (falls back to main, then master).

If the site builds with Next output: 'standalone', deploy copies static/public

into .next/standalone, points PM2 at server.js, and removes full node_modules.

Vinext apps (vinext in package.json / vinext start) have no .next production

build — deploy runs vinext start against dist/ instead of next start.

A build that produces neither standalone, .next/BUILD_ID, nor Vinext dist/

is marked failed (avoids nginx 502 from a crash-looping next start).

REQUIRED for all Meshkee Next storefronts: next.config must include

output: "standalone"

Without it, PM2 runs next start + full node_modules (~150–500MB RSS each) and

the shared websites VM OOMs. Target ~80–120MB RSS per site via standalone.

Paste for website-building agents:

"Always set output: 'standalone' in next.config. Deploy expects .next/standalone

and deletes node_modules. Never ship next start / full node_modules runtime."