littleshop/HOSTINGER_DEPLOYMENT_GUIDE.md

LittleShop Hostinger VPS Deployment Guide

📋 Pre-Deployment Checklist

Server Requirements

• Hostinger VPS (srv1002428.hstgr.cloud)
• .NET 9.0 Runtime installed
• Nginx configured with SSL
• PostgreSQL or SQLite database
• SilverPAY accessible at http://31.97.57.205:8001

Configuration Items Needed

• Generate production JWT secret key (minimum 32 characters)
• Obtain SilverPAY production API key
• Set up SilverPAY webhook secret
• Generate new VAPID keys for push notifications
• Configure domain names and SSL certificates

🚀 Deployment Steps

1. Build and Publish

cd /mnt/c/Production/Source/LittleShop/LittleShop
dotnet publish -c Release -r linux-x64 --self-contained false -o ./publish

2. Upload to VPS

# Create deployment package
tar -czf littleshop-deploy.tar.gz -C LittleShop/publish .

# Upload via SCP (port 2255)
scp -P 2255 littleshop-deploy.tar.gz root@srv1002428.hstgr.cloud:/tmp/

3. Configure on VPS

# SSH into server
ssh -p 2255 root@srv1002428.hstgr.cloud

# Extract application
mkdir -p /opt/littleshop
cd /opt/littleshop
tar -xzf /tmp/littleshop-deploy.tar.gz

# Set permissions
chmod +x LittleShop
chown -R www-data:www-data /opt/littleshop

4. Create Systemd Service

Create /etc/systemd/system/littleshop.service with environment variables configured.

5. Configure Nginx

# Copy nginx config
cp nginx_littleshop.conf /etc/nginx/sites-available/littleshop
ln -s /etc/nginx/sites-available/littleshop /etc/nginx/sites-enabled/

# Test and reload nginx
nginx -t
systemctl reload nginx

6. Start Service

systemctl daemon-reload
systemctl enable littleshop
systemctl start littleshop
systemctl status littleshop

🔐 Security Configuration

Environment Variables (Production)

# Critical - Must be changed for production!
JWT_SECRET_KEY="[GENERATE-NEW-64-CHAR-KEY]"
SILVERPAY_API_KEY="[GET-FROM-SILVERPAY]"
SILVERPAY_WEBHOOK_SECRET="[GENERATE-SECURE-SECRET]"

# Generate VAPID keys
npx web-push generate-vapid-keys

Firewall Rules

# Allow necessary ports
ufw allow 22/tcp       # SSH
ufw allow 2255/tcp     # Custom SSH
ufw allow 80/tcp       # HTTP
ufw allow 443/tcp      # HTTPS
ufw allow 8080/tcp     # Application (internal only)
ufw enable

📊 Monitoring & Maintenance

View Logs

# Service logs
journalctl -u littleshop -f

# Application logs
tail -f /opt/littleshop/logs/littleshop-*.log

# Nginx logs
tail -f /var/log/nginx/littleshop_*.log

Health Checks

# Local health check
curl http://localhost:8080/api/test/database

# Public health check
curl https://littleshop.silverlabs.uk/health

Run E2E Tests

cd /opt/littleshop
./test_e2e_comprehensive.sh

🔄 Update Procedure

1. Build new version locally
2. Upload new deployment package
3. Stop service: systemctl stop littleshop
4. Backup database: cp littleshop-production.db littleshop-production.db.backup
5. Extract new version
6. Start service: systemctl start littleshop
7. Run E2E tests to verify

🚨 Troubleshooting

Service Won't Start

# Check service status
systemctl status littleshop -l

# Check for port conflicts
netstat -tlnp | grep 8080

# Verify permissions
ls -la /opt/littleshop/

Database Issues

# Check database file
ls -la /opt/littleshop/*.db

# Test database connectivity
sqlite3 /opt/littleshop/littleshop-production.db ".tables"

Authentication Failures

• Verify JWT_SECRET_KEY is set correctly
• Check token expiration settings
• Ensure system time is synchronized: timedatectl status

📞 Support Contacts

• Hostinger VPS: srv1002428.hstgr.cloud
• SSH Port: 2255
• Application URL: https://littleshop.silverlabs.uk
• SilverPAY Gateway: http://31.97.57.205:8001

✅ Post-Deployment Verification

Run this checklist after deployment:

• Application responds at https://littleshop.silverlabs.uk
• Admin panel accessible at /Admin
• API documentation at /swagger
• Categories and products load
• Order creation works
• SilverPAY payment integration functional
• Push notifications configured
• E2E tests pass (>60% success rate)

📈 Current Test Results

• Success Rate: 63%
• Passed: 12 tests
• Failed: 7 tests (mostly auth-related)
• Core Functionality: ✅ Working

🔧 Known Issues & Solutions

1. JWT Token Validation (403 errors)

   • Ensure JWT_SECRET_KEY matches in all environments
   • Verify token includes proper role claims

2. Admin Panel Authentication

   • Cookie authentication requires HTTPS in production
   • Set proper CORS headers if accessing from different domain

3. Push Notifications

   • VAPID keys must be generated specifically for production domain
   • Subject must be valid mailto: or https: URL

📝 Notes

• BTCPay has been completely removed - using SilverPAY exclusively
• Mobile-optimized UI implemented with Blazor components
• Database health check endpoint available at /api/test/database
• Comprehensive E2E test suite included for validation