backend/scripts/websites-agent

Websites deploy / provision agent (runs on websites VM: /opt/websites-agent)

Endpoints (X-Deploy-Token):

POST /deploy { slug, wait?: true } — git pull + build + pm2 restart

wait=true (API default): sync, returns success/failed

wait=false: fire-and-forget 202 accepted

GET /deploy-status?slug=… — last deploy status JSON for slug

POST /provision { slug, host, gitRepoUrl } — clone + nginx + ecosystem + allowlist (no certbot)

POST /ssl { host, slug? } — certbot for apex + www (nginx must exist)

POST /park { host, canonicalHost } — nginx 301 apex+www → https://canonical

POST /unpark { host } — remove parked nginx site

GET /health

Scripts on the VM (same folder):

patch-nginx-seo.sh — add /sitemap.xml + /robots.txt API proxies to an existing nginx site

patch-nginx-pay.sh — add /meshkee/payments/{zarinpal|mellat}/callback API proxies

Env (.env): PORT, DEPLOY_TOKEN, ALLOWED_SLUGS

Note: provision.sh intentionally skips certbot. SSL is issued via POST /ssl so

Edit/Add Domain does not hang when www DNS is wrong.

deploy.sh checks out origin/HEAD (falls back to main, then master).

If the site builds with Next output: 'standalone', deploy copies static/public

into .next/standalone, points PM2 at server.js, and removes full node_modules.