# wiki.hazim.work deployment note

Date: 2026-04-19

## What was deployed

- Subdomain: `wiki.hazim.work`
- DNS record: `A -> 64.83.1.228`
- Upstream app: `127.0.0.1:8765`
- Reverse proxy: nginx
- App service: `wiki-ui.service`

## Config paths

- nginx site: `/etc/nginx/sites-available/wiki-hazim-work.conf`
- systemd service: `/etc/systemd/system/wiki-ui.service`
- app runner: `/root/.hermes/wiki-ui/run.sh`

## Verification

- `curl -k https://wiki.hazim.work/` returns the wiki UI
- nginx SNI route matches `wiki.hazim.work`
- service `wiki-ui.service` is running

## Security note

- Current certificate is self-signed for `wiki.hazim.work`
- Browser will show a trust warning until a public CA certificate is installed
- Domain management password was used transiently and is not stored in wiki files
