FoodPilot

1. Install Nginx

sudo apt update
sudo apt install -y nginx
sudo systemctl enable nginx
sudo systemctl start nginx

2. Admin Panel virtual host — /etc/nginx/sites-available/admin.yourdomain.com

server {
    listen 80;
    server_name admin.yourdomain.com www.admin.yourdomain.com;
    root /var/www/foodpilot-admin/public;
    index index.php;

    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-Content-Type-Options "nosniff";

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.3-fpm.sock;
    }

    location ~ /\.ht { deny all; }
}

3. Next.js frontend virtual host — /etc/nginx/sites-available/yourdomain.com

server {
    listen 80;
    server_name yourdomain.com www.yourdomain.com;

    location / {
        proxy_pass http://localhost:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
}

4. Enable sites & reload

sudo ln -s /etc/nginx/sites-available/admin.yourdomain.com /etc/nginx/sites-enabled/
sudo ln -s /etc/nginx/sites-available/yourdomain.com /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx

1. Install MySQL 8

sudo apt install -y mysql-server
sudo systemctl enable mysql
sudo mysql_secure_installation

2. Create database & user

sudo mysql -u root -p

CREATE DATABASE foodpilot CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'fpuser'@'localhost' IDENTIFIED BY 'StrongPassword!';
GRANT ALL PRIVILEGES ON foodpilot.* TO 'fpuser'@'localhost';
FLUSH PRIVILEGES;
EXIT;

3. Update Laravel .env

DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=foodpilot
DB_USERNAME=fpuser
DB_PASSWORD=StrongPassword!

1. Install PM2 globally

sudo npm install -g pm2

2. Start Next.js app

cd /var/www/foodpilot-client
pm2 start npm --name "foodpilot-client" -- start
pm2 save

3. Enable startup on reboot

pm2 startup
# Run the command PM2 outputs, then:
pm2 save

Useful PM2 commands

pm2 list                          # show all processes
pm2 logs foodpilot-client      # tail logs
pm2 restart foodpilot-client   # restart
pm2 stop foodpilot-client      # stop

1. Install Certbot

sudo apt install -y certbot python3-certbot-nginx

2. Obtain certificates

# Main domain (Next.js client)
sudo certbot --nginx -d yourdomain.com -d www.yourdomain.com

# Admin panel
sudo certbot --nginx -d admin.yourdomain.com -d www.admin.yourdomain.com

3. Certbot patches Nginx automatically. Verify HTTPS works:

sudo nginx -t && sudo systemctl reload nginx
curl -I https://yourdomain.com
curl -I https://admin.yourdomain.com

4. Auto-renewal (already set up by Certbot, verify with):

sudo certbot renew --dry-run