# LittleShop Hostinger VPS Deployment Guide

## 📋 **Pre-Deployment Checklist**

### Server Requirements
- [x] Hostinger VPS (srv1002428.hstgr.cloud)
- [x] .NET 9.0 Runtime installed
- [x] Nginx configured with SSL
- [x] PostgreSQL or SQLite database
- [x] SilverPAY accessible at http://31.97.57.205:8001

### Configuration Items Needed
- [ ] Generate production JWT secret key (minimum 32 characters)
- [ ] Obtain SilverPAY production API key
- [ ] Set up SilverPAY webhook secret
- [ ] Generate new VAPID keys for push notifications
- [ ] Configure domain names and SSL certificates

## 🚀 **Deployment Steps**

### 1. Build and Publish
```bash
cd /mnt/c/Production/Source/LittleShop/LittleShop
dotnet publish -c Release -r linux-x64 --self-contained false -o ./publish
```

### 2. Upload to VPS
```bash
# Create deployment package
tar -czf littleshop-deploy.tar.gz -C LittleShop/publish .

# Upload via SCP (port 2255)
scp -P 2255 littleshop-deploy.tar.gz root@srv1002428.hstgr.cloud:/tmp/
```

### 3. Configure on VPS
```bash
# SSH into server
ssh -p 2255 root@srv1002428.hstgr.cloud

# Extract application
mkdir -p /opt/littleshop
cd /opt/littleshop
tar -xzf /tmp/littleshop-deploy.tar.gz

# Set permissions
chmod +x LittleShop
chown -R www-data:www-data /opt/littleshop
```

### 4. Create Systemd Service
Create `/etc/systemd/system/littleshop.service` with environment variables configured.

### 5. Configure Nginx
```bash
# Copy nginx config
cp nginx_littleshop.conf /etc/nginx/sites-available/littleshop
ln -s /etc/nginx/sites-available/littleshop /etc/nginx/sites-enabled/

# Test and reload nginx
nginx -t
systemctl reload nginx
```

### 6. Start Service
```bash
systemctl daemon-reload
systemctl enable littleshop
systemctl start littleshop
systemctl status littleshop
```

## 🔐 **Security Configuration**

### Environment Variables (Production)
```bash
# Critical - Must be changed for production!
JWT_SECRET_KEY="[GENERATE-NEW-64-CHAR-KEY]"
SILVERPAY_API_KEY="[GET-FROM-SILVERPAY]"
SILVERPAY_WEBHOOK_SECRET="[GENERATE-SECURE-SECRET]"

# Generate VAPID keys
npx web-push generate-vapid-keys
```

### Firewall Rules
```bash
# Allow necessary ports
ufw allow 22/tcp       # SSH
ufw allow 2255/tcp     # Custom SSH
ufw allow 80/tcp       # HTTP
ufw allow 443/tcp      # HTTPS
ufw allow 8080/tcp     # Application (internal only)
ufw enable
```

## 📊 **Monitoring & Maintenance**

### View Logs
```bash
# Service logs
journalctl -u littleshop -f

# Application logs
tail -f /opt/littleshop/logs/littleshop-*.log

# Nginx logs
tail -f /var/log/nginx/littleshop_*.log
```

### Health Checks
```bash
# Local health check
curl http://localhost:8080/api/test/database

# Public health check
curl https://littleshop.silverlabs.uk/health
```

### Run E2E Tests
```bash
cd /opt/littleshop
./test_e2e_comprehensive.sh
```

## 🔄 **Update Procedure**

1. Build new version locally
2. Upload new deployment package
3. Stop service: `systemctl stop littleshop`
4. Backup database: `cp littleshop-production.db littleshop-production.db.backup`
5. Extract new version
6. Start service: `systemctl start littleshop`
7. Run E2E tests to verify

## 🚨 **Troubleshooting**

### Service Won't Start
```bash
# Check service status
systemctl status littleshop -l

# Check for port conflicts
netstat -tlnp | grep 8080

# Verify permissions
ls -la /opt/littleshop/
```

### Database Issues
```bash
# Check database file
ls -la /opt/littleshop/*.db

# Test database connectivity
sqlite3 /opt/littleshop/littleshop-production.db ".tables"
```

### Authentication Failures
- Verify JWT_SECRET_KEY is set correctly
- Check token expiration settings
- Ensure system time is synchronized: `timedatectl status`

## 📞 **Support Contacts**

- **Hostinger VPS**: srv1002428.hstgr.cloud
- **SSH Port**: 2255
- **Application URL**: https://littleshop.silverlabs.uk
- **SilverPAY Gateway**: http://31.97.57.205:8001

## ✅ **Post-Deployment Verification**

Run this checklist after deployment:

- [ ] Application responds at https://littleshop.silverlabs.uk
- [ ] Admin panel accessible at /Admin
- [ ] API documentation at /swagger
- [ ] Categories and products load
- [ ] Order creation works
- [ ] SilverPAY payment integration functional
- [ ] Push notifications configured
- [ ] E2E tests pass (>60% success rate)

## 📈 **Current Test Results**

- **Success Rate**: 63%
- **Passed**: 12 tests
- **Failed**: 7 tests (mostly auth-related)
- **Core Functionality**: ✅ Working

## 🔧 **Known Issues & Solutions**

1. **JWT Token Validation (403 errors)**
   - Ensure JWT_SECRET_KEY matches in all environments
   - Verify token includes proper role claims

2. **Admin Panel Authentication**
   - Cookie authentication requires HTTPS in production
   - Set proper CORS headers if accessing from different domain

3. **Push Notifications**
   - VAPID keys must be generated specifically for production domain
   - Subject must be valid mailto: or https: URL

## 📝 **Notes**

- BTCPay has been completely removed - using SilverPAY exclusively
- Mobile-optimized UI implemented with Blazor components
- Database health check endpoint available at `/api/test/database`
- Comprehensive E2E test suite included for validation