{"id":1343,"date":"2026-02-15T20:14:32","date_gmt":"2026-02-15T20:14:32","guid":{"rendered":"https:\/\/docs.ai.drawconclusions.org\/?page_id=1343"},"modified":"2026-02-24T12:45:57","modified_gmt":"2026-02-24T12:45:57","slug":"server","status":"publish","type":"page","link":"https:\/\/docs.ai.drawconclusions.org\/?page_id=1343","title":{"rendered":"server"},"content":{"rendered":"

The app runs on a DigitalOcean droplet called dracox. Primary domain: ai.drawconclusions.org Docs domain: docs.ai.drawconclusions.org Domains are sourced from server\/var_www\/config.xml<\/code> (source of truth). phpMyAdmin domain: pma.ai.drawconclusions.org SSH key: use config.xml<\/code> value at ssh\/local_key_name<\/code> (user: root) PHP (stable): 8.4.15 (latest release listed on php.net releases page; released 20 Nov 2025) Required software (server):<\/p>\n

Software<\/h2>\n
    \n
  • Docker Engine<\/li>\n
  • Docker Compose<\/li>\n
  • Firewall: UFW<\/li>\n
  • Fail2ban<\/li>\n
  • Python 3<\/li>\n
  • Node.js 20+ (for frontend tooling, if needed)<\/li>\n
  • rsync (for deployments)<\/li>\n<\/ul>\n

    Local tooling (Windows):<\/p>\n

    Rsync<\/h2>\n
      \n
    • rsync is installed locally via MSYS2.<\/li>\n
    • Path: C:msys64usrbinrsync.exe<\/code><\/li>\n<\/ul>\n

      Swap configuration:<\/p>\n

      Swap<\/h2>\n
        \n
      • Swap file enabled at \/swapfile<\/code> (size: 2G).<\/li>\n
      • \/etc\/fstab<\/code> contains: \/swapfile none swap sw 0 0<\/code>.<\/li>\n<\/ul>\n

        UFW rules (recommended):<\/p>\n

        Rules<\/h2>\n
          \n
        • Default: deny incoming, allow outgoing.<\/li>\n
        • Allow SSH (22\/tcp) from any IP (key-based auth required).<\/li>\n
        • Allow HTTP (80) from anywhere.<\/li>\n
        • Allow HTTPS (443) from anywhere (Traefik terminates TLS).<\/li>\n
        • Internal Docker service URLs (e.g., http:\/\/be-nginx<\/code>) remain HTTP-only and are not exposed publicly.<\/li>\n<\/ul>\n

          Access policy:<\/p>\n

            \n
          • Only the admin IP is allowed to access the server (block all other IPs).<\/li>\n
          • Temporary during initial development.<\/li>\n<\/ul>\n

            Access:<\/p>\n

            Access<\/h2>\n
              \n
            • Build host from config: DROPLET_IP="$(python3 - <<'PY'nimport xml.etree.ElementTree as ETnprint((ET.parse('server\/var_www\/config.xml').getroot().findtext('domains\/droplet_ip') or '').strip())nPYn)"; SSH_KEY="$(python3 - <<'PY'nimport xml.etree.ElementTree as ETnfrom pathlib import Pathnkey=(ET.parse('server\/var_www\/config.xml').getroot().findtext('ssh\/local_key_name') or '').strip()nprint(str(Path.home()\/'.ssh'\/key))nPYn)"<\/code><\/li>\n
            • Test access: ssh -i "$SSH_KEY" "root@$DROPLET_IP" "echo ok"<\/code><\/li>\n<\/ul>\n

              Deployment access:<\/p>\n

              Access<\/h2>\n
                \n
              • Deployment uses rsync from the local machine (no git-based deploys).<\/li>\n
              • The server does not pull from git during deployment.<\/li>\n<\/ul>\n

                phpMyAdmin access:<\/p>\n

                  \n
                • Use the domain: https:\/\/pma.ai.drawconclusions.org\/<\/li>\n
                • Restrict access to the admin IP via Traefik (IP allowlist).<\/li>\n
                • Allowlist lives in server\/var_www\/docker\/traefik\/dynamic.yml<\/code> under pmd-allowlist<\/code>.<\/li>\n<\/ul>\n

                  Development workflow:<\/p>\n

                    \n
                  • Development happens locally, then changes are deployed to the server.<\/li>\n<\/ul>\n

                    Docs:<\/p>\n

                      \n
                    • DevDocs are WordPress pages at https:\/\/docs.ai.drawconclusions.org<\/code> (publish via python3 scripts_local\/publish_devdocs.py<\/code>).<\/li>\n
                    • HTTP requests redirect to HTTPS for all domains.<\/li>\n<\/ul>\n

                      DeveloperDoc ID: dd_id_59ded457ab<\/p>\n","protected":false},"excerpt":{"rendered":"

                      The app runs on a DigitalOcean droplet called dracox. Primary domain: ai.drawconclusions.org Docs domain: docs.ai.drawconclusions.org Domains are sourced from server\/var_www\/config.xml (source of truth). phpMyAdmin domain: pma.ai.drawconclusions.org SSH key: use config.xml value at ssh\/local_key_name (user: root) PHP (stable): 8.4.15 (latest release listed on php.net releases page; released 20 Nov 2025) Required software (server): Software Docker Engine […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":1360,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"doc_category":[8],"doc_layer":[31],"class_list":["post-1343","page","type-page","status-publish","hentry","doc_category-server","layer-dd_id_cffc321500"],"_links":{"self":[{"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=\/wp\/v2\/pages\/1343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1343"}],"version-history":[{"count":5,"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=\/wp\/v2\/pages\/1343\/revisions"}],"predecessor-version":[{"id":3894,"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=\/wp\/v2\/pages\/1343\/revisions\/3894"}],"up":[{"embeddable":true,"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=\/wp\/v2\/pages\/1360"}],"wp:attachment":[{"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1343"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=%2Fwp%2Fv2%2Fdoc_category&post=1343"},{"taxonomy":"doc_layer","embeddable":true,"href":"https:\/\/docs.ai.drawconclusions.org\/index.php?rest_route=%2Fwp%2Fv2%2Fdoc_layer&post=1343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}