# Deployment

# Topology

Secrets: deploy/.env on the server only (copy in ~/.internetpressure/env.bhs64b on the laptop). Probe keys live in production Postgres; sudo passwords of rented Macs in ~/.internetpressure/sudo.txt.

# Commands

deploy/bin/prep-server.sh            # once: wg1 peer to BHS64, ufw, /opt/internetpressure, deploy/.env with random secrets
deploy/bin/deploy.sh                 # rsync → build images on BHS64b → compose up → migrate + seed → health
deploy/bin/deploy.sh route           # (re)create the public route on the gateway
deploy/bin/deploy.sh status|logs [svc]|restart [svc]|migrate|up|build
deploy/bin/probes.sh build           # cross-compile the Go agent
deploy/bin/probes.sh keys            # probe ids + HMAC keys (from production)
deploy/bin/probes.sh install [id…]   # push + install/upgrade the agent on the nodes
deploy/bin/probes.sh status          # /healthz of every probe

Admin token: grep IP_ADMIN_TOKEN ~/.internetpressure/env.bhs64b → paste in https://www.internetpressure.io/admin.

# Operations

• Logs: deploy/bin/deploy.sh logs engine (or api, bgp, web, edge).
• ClickHouse shell: ssh BHS64b 'cd /opt/internetpressure && docker compose -f infra/compose.yml --env-file deploy/.env exec clickhouse clickhouse-client -u ip --password "$(grep CLICKHOUSE_PASSWORD deploy/.env | cut -d= -f2)" -d ip'.
• Postgres: … exec postgres psql -U ip ip.
• Config changes (weights…) are done in /admin → Scoring; the file packages/config/pressure.yaml is the default.
• Adding a probe: POST /api/admin/probes (or add to data/seed/probes.yaml + deploy.sh migrate), then probes.sh install <id>. Add the node to ~/.internetpressure/sudo.txt if its sudo needs a password.
• Adding targets: /admin → Targets or data/targets/targets.yaml + deploy.sh migrate (seed is idempotent; it does not delete).
• The instrument's own health: GET /api/v1/status (internal_status ok/degraded/stale) and /admin → Overview.

# Backups

ClickHouse and Postgres volumes live on BHS64b's RAID-1 NVMe. deploy/bin/backup.sh (to add) should pg_dump and BACKUP TABLE … TO Disk to BHS128 nightly; pressure_history and bgp_stats_10s are the irreplaceable tables.