How can I deploy my Hexabot Project?

Introduction

This documentation explains how to deploy your Hexabot project using two different methods:

1. Using Nginx as a service and Certbot for SSL.

2. Using Dockerized Nginx and Certbot services.

Pre-requisites

Make sure you have access to a server running a Linux distribution with SSH enabled. The following documentation is based on an Ubuntu distribution, so you may need to adapt the steps according to your specific operating system.

---

Using Nginx as a service and Certbot for SSL

Step 1: Install Docker

Setting Up Docker for Development and Production

Step 2: Install NPM

Setup Node.js with NVM

Step 3: Setup Hexabot project

1. Install the Hexabot CLI:

npm install -g hexabot-cli

1. Create new project:

 hexabot create my-chatbot
 cd my-chatbot/

Or clone an existing project of yours:

 git clone [e-mail]:YOUR_ORG/my-chatbot.git
 cd my-chatbot/

1. Environment Setup:

To configure the environment variables, use the following command:

hexabot init

This command will copy the .env.example file to .env in the ./docker directory if the file does not already exist

1. Update your .env file for production, especially the following ones:

Variable Name	Example Value	Env variable description
NODE_ENV	prod	Environment Mode
APP_DOMAIN	mychatbot.ai	Application Domain Name
API_ORIGIN	https://mychatbot.ai/api	The api endpoint will be used to communicate with the backend
FRONTEND_ORIGIN	https://mychatbot.ai	The origins that will be accepted by the API
JWT_SECRET	346998ba1f171f107433	Secret to encrypt jwt token
SESSION_SECRET	27feaf70d2c78892bf49	Secret to encrypt session token
HTTPS_ENABLED	true	Https setting
INVITATION_JWT_SECRET	51c8ea00d82eb10ee226	Secret to encrypt invitation token
PASSWORD_RESET_JWT_SECRET	5ee97916017176d1ca6c	Secret to encrypt reset password token
CONFIRM_ACCOUNT_SECRET	80f74dce70e5385bf80b	Secret to encrypt confirm account token
MONGO_USER	my_mongo_username	Mongodb username
MONGO_PASSWORD	my_mongo_password	Mongodb password
AUTH_TOKEN	c97643c1c1e5e9dc5745	Secret to encrypt NLU token
NEXT_PUBLIC_API_ORIGIN	https://mychatbot.ai/api	Nextjs api endpoint

Note that you can also adjust the default token expirations durations as needed.

To be able to send email you will need to configure SMTP. Learn how to configure SMTP environment variables by following our detailed SMTP setup guide.

1. Run your Hexabot project in production mode:

hexabot start
# Or include additional services you may want to use
hexabot start --services nlu,ollama,influxdb

Note that this command will start all the services (api, frontend, mongodb, ...) as Docker containers.

Step 4: Install Nginx

Deploying an Hexabot project on production requires you to setup a HTTP Web Server like Apache2, HAProxy or Nginx to secure communications using SSL, establish access per domain name, and a lot of other capabilities such as rate limiting for example to help protect against abuse and prevent server overload. In this guide, we will walk you through a typical HTTP Web Server setup using Nginx and Certbot for SSL certificate generation.

1. Update the system:

sudo apt update

1. Install Nginx:

sudo apt install nginx

1. Verify the Nginx installation:

nginx -v

1. Start Nginx:

sudo systemctl start nginx

1. Check the Nginx status:

sudo systemctl status nginx

---

Step 5: Configure Nginx

1. Replace Nginx server configuration with the following : /etc/nginx/sites-available/default.

```
server {
    listen 80;
    server_name mychatbot.ai; # You will need to update this to use your own domain 
    server_tokens off;
    client_max_body_size 20M;

    location / {
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Url-Scheme $scheme;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://localhost:8080; # Make sure to use the port configured in .env file
    }

    location /api/ {
        rewrite ^/api/?(.*)$ /$1 break;
        proxy_pass http://localhost:4000; # Make sure to use the port configured in .env file
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Host $http_host;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header X-NginX-Proxy false;
        proxy_pass_request_headers on;
    }

    location ~* \.io {
        rewrite ^/api/?(.*)$ /$1 break;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header X-NginX-Proxy false;

        proxy_pass http://localhost:4000; # Make sure to use the port configured in .env file
        proxy_redirect off;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}
```

Step6: Generate SSL certificate using Certbot

1. Install Certbot:

sudo apt install certbot python3-certbot-nginx

1. Obtain an SSL certificate:

sudo certbot --nginx

1. (Optional) Automate SSL renewal:

sudo crontab -e

1. Add the following line:

0 12 * * * certbot renew --quiet

Step 7: Reload Nginx with new configuration

1. Test configuration syntax:

sudo nginx -t

If you get an error please make sure you don't have any syntax error in /etc/nginx/sites-available/default

1. Reload Nginx with new configuration:

sudo systemctl reload nginx

---

Access your domain using HTTPS (eg. https://mychatbot.ai) to check if you have successfully deployed your Hexabot project using Nginx! 🚀🎉. Feel free to ask for support from the community on our Discord channel.

Using Dockerized Nginx and Certbot services :

The second deployment method, where everything is Dockerized, is still WIP.