Initial Ladill Meet release.

Phases 0–18: core meetings, webinar, breakouts, team chat, live streaming, town hall, billing, and Ladill Mail calendar wiring. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-30 23:35:29 +00:00
commit 965fb992e9
319 changed files with 30322 additions and 0 deletions
@@ -0,0 +1,86 @@
+# Ladill Care — deploy runbook
+
+Healthcare management at **care.ladill.com** (patients, appointments, consultations, lab, pharmacy, billing).
+
+## 1. Gitea repo + CI
+
+- Repo: **ladill-care** (`isaacclad/ladill-care`).
+- Push to `main` triggers `.gitea/workflows/deploy.yml` (on-host `deploy` runner).
+- App root: `/var/www/ladill-care`.
+
+To publish from the monorepo copy:
+
+```bash
+bash scripts/extract-ladill-care.sh
+```
+
+## 2. Server app-slot + database
+
+```bash
+sudo install -d -o deploy -g www-data /var/www/ladill-care
+sudo install -d -o deploy -g www-data /var/www/ladill-care/{releases,shared}
+sudo chown -R deploy:www-data /var/www/ladill-care
+sudo mysql -e "CREATE DATABASE ladill_care CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
+sudo mysql -e "CREATE USER 'ladill_care'@'127.0.0.1' IDENTIFIED BY '<pw>';"
+sudo mysql -e "GRANT ALL ON ladill_care.* TO 'ladill_care'@'127.0.0.1'; FLUSH PRIVILEGES;"
+```
+
+## 3. Platform wiring (monolith)
+
+On the Ladill platform host:
+
+```bash
+cd /var/www/ladill.com/current
+php artisan ladill:onboard-app care --run-dns
+php artisan passport:client --name="Ladill Care" --redirect_uri=https://care.ladill.com/sso/callback
+php artisan ladill:launcher:sync --propagate
+```
+
+Apply the generated `IDENTITY_API_KEY_CARE`, `BILLING_API_KEY_CARE`,
+`SERVICE_EVENTS_CARE_*`, and `SERVICE_EVENTS_INBOUND_SECRET` values to the monolith `.env`, then:
+
+```bash
+php artisan config:cache
+```
+
+## 4. Shared `.env` (`/var/www/ladill-care/shared/.env`)
+
+Copy `.env.example`, set production values:
+
+| Variable | Notes |
+|----------|-------|
+| `APP_KEY` | `php artisan key:generate --show` |
+| `APP_URL` | `https://care.ladill.com` |
+| `DB_*` | MySQL `ladill_care` credentials |
+| `LADILL_SSO_CLIENT_ID` / `LADILL_SSO_CLIENT_SECRET` | Passport client (plain text from `passport:client`) |
+| `BILLING_API_KEY_CARE` | Same as monolith consumer key |
+| `IDENTITY_API_KEY_CARE` | Same as monolith consumer key |
+| `SERVICE_EVENTS_INBOUND_SECRET` | Same as monolith `SERVICE_EVENTS_CARE_SECRET` |
+
+**SSO secret:** use the plain-text value printed once by `passport:client` — never copy
+`oauth_clients.secret` from the database (Passport stores a bcrypt hash there).
+
+## 5. nginx + TLS
+
+```bash
+sudo bash deployment/setup-service-subdomain-nginx.sh care --app /var/www/ladill-care/current
+```
+
+DNS: `care.ladill.com` → app server (via `dns:sync-subdomains` on the monolith).
+
+## 6. First deploy
+
+Push to `main` or run the Gitea deploy workflow manually. Then verify:
+
+```bash
+curl -sI https://care.ladill.com | head -1
+curl -s -o /dev/null -w '%{http_code}\n' https://care.ladill.com/login
+curl -s https://care.ladill.com/api/health
+```
+
+## 7. Optional queue worker
+
+```bash
+sudo cp deployment/supervisor/ladill-care-worker.conf /etc/supervisor/conf.d/
+sudo supervisorctl reread && sudo supervisorctl update
+```