grabowski
744a56d22b
Deploy test site / deploy (push) Successful in 1m2s
User, 20 Oct 2026: can the deck also be made in a light and dark mode; the new order tool should also offer fan funding, so the platform screenshots match and use the same calculator; the main investor holds at least 60 %, so 40 % is for sale. Order tool (docs/order.html, /demos/order/): - New step 15 "How to pay": pay the plant directly (deposit) or let fans fund it; step 16 becomes "Review & launch" with the campaign simulation and its three outcomes. - Campaign maths ported from make-a-record (fan price, length, cap, own copies, VAT; fans needed = max(100, break-even); keep at the goal and with more fans; price hint); R gains fee (3.5 %), VAT and campaign length with sources; no price changed. - Quote card shows fan price, fans needed and the artist's keep on the fan route; route and campaign in the #q= hash; deep links #s=<step>&p=<preset>&route=fans. - Parity with make-a-record: 206/206 checks over 40 configurations; default quotes unchanged (37,836 / 217 / 102,936 THB; partner mastering 43,676). Investor deck (docs/pitch/): - Light and dark theme like the other site pages (cnx-theme, T key and button), presenter and overview follow; charts from CSS variables; text pairs at WCAG AA in both themes; tool screenshots in both themes. - Two PDFs: dark and light (print-friendly), each ~1.5 MB. - Platform slide: both pictures from the order tool (Splatter 12" order step and its fan-funding view: 100 fans at 1,200 THB, break-even 46, ~480 THB a copy kept). - BOI and financing slide: shareholding bar, lead investor at least 60 %, at most 40 % for co-investors (~32M / ~22M THB at the ~54M equity floor, arithmetic only); the ask offers up to 40 %. Docs: artist-platform.md (fan funding in the order tool), README and landing page entries.
Test site: cnxvinyl.lol
https://cnxvinyl.lol/ is the internal test site for this repository: demo
pages from docs/ (the plant operation page
first) and any static site we want to show by link. It runs on the same web
server as buildfor.life (Debian VPS s1, Caddy behind Cloudflare) and is
not a plant service; plant systems follow the
digital factory plan. Every page and file is
sent with noindex and robots.txt disallows everything; nothing is behind
a login unless basic_auth in the Caddyfile is switched on.
How it is built
public/is copied verbatim to the web root: the landing page (index.html),robots.txt, and any static site as its own directory (public/<name>/index.htmlis served at/<name>/).build.shassemblessite/dist:public/plus every entry in itsDEMOSlist, which copies a page out ofdocs/(for exampledocs/plant-operation.htmlto/demos/plant-operation/), so the docs stay the one source. It writesversion.txt(the commit) and fails on any internal link that does not resolve.- To add a demo: one line in
DEMOS, one entry on the landing page. To add a static site: drop its built output inpublic/<name>/and link it. - Local preview:
bash site/build.sh, then opensite/dist/index.html.
How it is deployed
.gitea/workflows/deploy-site.yml runs on every push to master that
touches site/, an HTML page under docs/, or the workflow itself, and on
demand (Actions tab, "Run workflow"). It builds, rsyncs site/dist into
the idle one of /var/www/cnxvinyl.lol and /var/www/cnxvinyl.lol-prev,
swaps them by rename (the blog's pattern), checks version.txt on the
server, purges the Cloudflare cache when the token is set, and finally
checks the public URL (warning only).
The deploy owns the whole web root: anything put into
/var/www/cnxvinyl.lol by hand disappears on the next deploy. Static sites
go into public/ instead.
One-time setup
- DNS in Cloudflare, both proxied (orange cloud):
cnxvinyl.lol CNAME s1.buildfor.lifeandwww CNAME cnxvinyl.lol(Cloudflare flattens the apex CNAME, so the site follows s1 if its address changes). SSL/TLS mode Full (strict): "Flexible" makes a redirect loop with Caddy. - Caddy on s1: append
Caddyfileto/etc/caddy/Caddyfile(the comments in it list the checks),caddy validate, thensystemctl reload caddy. Caddy gets the certificate the same way it does for the buildfor.life apex. - Web root: the deploy user must be able to create and rename
directories in
/var/www, as it already does for the blog. If not:sudo install -d -o <deploy user> /var/www/cnxvinyl.lol /var/www/cnxvinyl.lol-prevand make/var/wwwwritable for that user (the swap renames entries in it). - Secrets in Gitea (repo: Settings > Actions > Secrets, or user level so
every repo of the account gets them):
VPS_HOST,VPS_USER,VPS_SSH_KEY, optionallyVPS_PORT(default 22),VPS_KNOWN_HOSTS(output ofssh-keyscan -p <port> s1.buildfor.life, pins the host key),CLOUDFLARE_ZONE_IDandCLOUDFLARE_API_TOKEN(Zone > Cache Purge on cnxvinyl.lol). The names match the blog's workflow, so the blog's deploy key and values work unchanged: s1 only checks the key against the deploy user'sauthorized_keys, whichever repository sends it. Gitea secrets cannot be read back, so they are entered again here from the private key file; repo secrets set onB4L/buildfor_life_webdo not reach this repository, B4L organisation secrets only reach it if it moves into B4L. The blog key isdeploy@s1.b4l.co.th, fingerprintSHA256:o4w7HL+EsPI3MXbbcYWGn0EykN7qeLtYg0Tc9FI1a3s, and it is the only key in/home/deploy/.ssh/authorized_keyson s1 (sshd on port 2255, soVPS_PORTis 2255). The deploy log prints the fingerprint of the key inVPS_SSH_KEY; if it differs, the server answers "Permission denied (publickey)". If the private key is gone, make a new key instead:ssh-keygen -t ed25519 -N "" -C cnx_vinyl-deploy -f cnx_vinyl-deploy, public half into the deploy user's~/.ssh/authorized_keyson s1, private half intoVPS_SSH_KEY, then delete the local copy. - Runner: the job asks for
ubuntu-latest, the label the blog's runner serves. This repository is under a user account, not the B4L organisation, so a runner registered only for B4L does not pick it up; if the run stays "Waiting", register the runner for this repository or instance-wide, or move the repository into B4L. - Run the workflow once from the Actions tab and open
https://cnxvinyl.lol/.