Sanitized mirror from private repository - 2026-04-20 01:32:01 UTC

deployments/mattermost/README.md

@@ -0,0 +1,74 @@
+# Mattermost Production Deployment
+
+Production-ready Mattermost Team Edition deployment for **mm.crista.love**
+
+## Architecture
+
+- **Mattermost Team Edition** - Running in Docker
+- **PostgreSQL 15** - Database (Docker)
+- **Nginx** - Reverse proxy with SSL termination
+- **Cloudflare** - DNS and SSL (Full Strict mode with Origin Certificate)
+- **Backblaze B2** - File storage (S3-compatible)
+- **Automated Backups** - Daily to Backblaze B2
+
+## Server Details
+
+- **Server**: YOUR_WAN_IP
+- **Domain**: mm.crista.love
+- **OS**: Ubuntu 24.04 LTS
+
+## Files
+
+| File | Description |
+|------|-------------|
+| `deploy-mattermost.sh` | Main deployment script |
+| `mattermost-nginx.conf` | Nginx reverse proxy configuration |
+| `mattermost-backup.sh` | Automated backup script |
+| `mm-crista-love.crt` | Cloudflare Origin SSL certificate |
+| `mm-crista-love.key` | SSL private key |
+
+## Deployment
+
+1. Copy all files to server
+2. Run `deploy-mattermost.sh` as root
+3. Visit https://mm.crista.love to create admin account
+
+## Configuration
+
+### Email (SMTP)
+- Gmail with app password
+- STARTTLS on port 587
+
+### File Storage
+- Backblaze B2 (S3-compatible)
+- Bucket: `vk-mattermost`
+
+### Backups
+- Daily at 3 AM UTC
+- Stored in B2: `vk-mattermost/backups/`
+- Retention: 30 days remote, 7 days local
+
+## Management Commands
+
+```bash
+# View logs
+docker compose -f /opt/mattermost/docker-compose.yml logs -f
+
+# Restart services
+docker compose -f /opt/mattermost/docker-compose.yml restart
+
+# Manual backup
+/opt/mattermost/backup.sh
+
+# Check status
+docker compose -f /opt/mattermost/docker-compose.yml ps
+```
+
+## Security Notes
+
+⚠️ **Important**: The actual credentials are stored in:
+- `/opt/mattermost/.env` - PostgreSQL password
+- `~/.aws/credentials` - B2 credentials
+- Docker environment variables - SMTP credentials
+
+The files in this repo contain placeholder references. Actual secrets should never be committed.