# Clone or download docker-compose.published.yml
curl -O https://raw.githubusercontent.com/node-drop/nodedrop/main/docker-compose.published.yml

# Create .env file
cat > .env << EOF
JWT_SECRET=$(openssl rand -base64 32)
POSTGRES_PASSWORD=$(openssl rand -base64 16)
REDIS_PASSWORD=$(openssl rand -base64 16)
EOF

# Start services
docker-compose -f docker-compose.published.yml up -d

# Install Docker
curl -fsSL https://get.docker.com | sh

# Install Docker Compose
sudo apt install docker-compose-plugin

# Create directory
mkdir -p /opt/nodedrop
cd /opt/nodedrop

# Download compose file
curl -O https://raw.githubusercontent.com/node-drop/nodedrop/main/docker-compose.published.yml

# Configure environment
cp .env.example .env
nano .env  # Edit with your values

# Start
docker compose up -d

server {
    listen 80;
    server_name nodedrop.example.com;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name nodedrop.example.com;

    ssl_certificate /etc/letsencrypt/live/nodedrop.example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/nodedrop.example.com/privkey.pem;

    location / {
        proxy_pass http://127.0.0.1:5678;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

labels:
  - "traefik.enable=true"
  - "traefik.http.routers.nodedrop.rule=Host(`nodedrop.example.com`)"
  - "traefik.http.routers.nodedrop.tls.certresolver=letsencrypt"