docs: add Caddy HTTPS deployment guide

Agent-Logs-Url: https://github.com/genichin/portfolio-hub/sessions/51569572-076d-4f2a-89ad-157d9a97c42a Co-authored-by: genichin <4282227+genichin@users.noreply.github.com>
2026-04-06 05:19:04 +00:00
parent 3ee7c5170c
commit 141afd53bd
2 changed files with 214 additions and 0 deletions
@@ -57,6 +57,26 @@ uvicorn app.main:app --reload
 pytest
 ```

+## Production Deployment (HTTPS with Caddy)
+
+For production, it is recommended to run PortfolioHub behind [Caddy](https://caddyserver.com/), which handles TLS certificate provisioning automatically.
+
+A minimal `Caddyfile`:
+
+```
+your-domain.com {
+    reverse_proxy localhost:8000
+}
+```
+
+See **[docs/deployment.md](docs/deployment.md)** for a full guide covering:
+
+- Caddy installation on Linux/Ubuntu
+- CORS configuration (`PORTFOLIOHUB_ALLOWED_ORIGINS`)
+- Running `uvicorn` as a systemd service
+- Docker Compose setup with a Caddy sidecar container
+- Firewall port configuration (80, 443)
+
 ## CLI

 The repository now includes a `portfoliohub` CLI that mirrors the main portfolio flows from `jsbot-kis`.