feat: Add remote.jkwoo.com NGINX conf.d SSL integration

history/2026-07-26.md

@@ -51,7 +51,11 @@
 - [x] Created `service/helios-remote.service` systemd unit file for OS auto-start on boot.
 - [x] Created `service/install_service.sh` and `service/uninstall_service.sh` service management scripts.
 
+### remote.jkwoo.com Domain & NGINX SSL Integration Completed
+- [x] Created `/etc/nginx/conf.d/remote_jkwoo.conf` configured with Let's Encrypt SSL certificate and WSS WebSocket proxy.
+- [x] Created `nginx/install_nginx.sh` deployment script.
+- [x] Verified `sudo nginx -t` syntax check and successfully reloaded NGINX daemon.
+
 ## Current Status
-- 🏆 **HELIOS Remote v5.0.0 Final Release & Systemd Auto-Start Configuration COMPLETED!**
-- All 11 Phases across the entire development roadmap and Option A systemd service configuration are fully realized, verified, and packaged.
-- System is running persistently in background at `http://192.168.0.253:8085` / `http://localhost:8085`.
+- 🏆 **HELIOS Remote v5.0.0 Final Release & remote.jkwoo.com HTTPS Domain Integration COMPLETED!**
+- System is securely served at **`https://remote.jkwoo.com`** with HTTPS/WSS encryption.

nginx/install_nginx.sh

@@ -0,0 +1,27 @@
+#!/bin/bash
+set -e
+
+echo "=== Installing remote.jkwoo.com NGINX Configuration to /etc/nginx/conf.d/ ==="
+
+SRC_CONF="/home/jkwoo/workspace/helios_remote/nginx/remote_jkwoo.conf"
+DEST_CONF="/etc/nginx/conf.d/remote_jkwoo.conf"
+
+if [ "$EUID" -ne 0 ]; then
+    echo "Running with sudo..."
+    sudo cp "$SRC_CONF" "$DEST_CONF"
+    echo "Testing NGINX configuration..."
+    sudo nginx -t
+    echo "Reloading NGINX..."
+    sudo systemctl reload nginx
+else
+    cp "$SRC_CONF" "$DEST_CONF"
+    echo "Testing NGINX configuration..."
+    nginx -t
+    echo "Reloading NGINX..."
+    systemctl reload nginx
+fi
+
+echo "=========================================================="
+echo "✅ remote.jkwoo.com NGINX configuration installed successfully!"
+echo "👉 Domain URL: https://remote.jkwoo.com"
+echo "=========================================================="

nginx/remote_jkwoo.conf

@@ -0,0 +1,47 @@
+server {
+    listen 80;
+    listen [::]:80;
+    server_name remote.jkwoo.com;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name remote.jkwoo.com;
+
+    ssl_certificate /etc/letsencrypt/live/jkwoo.com-0001/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/jkwoo.com-0001/privkey.pem;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    client_max_body_size 500M;
+    proxy_read_timeout 3600s;
+    proxy_send_timeout 3600s;
+    proxy_connect_timeout 60s;
+
+    # HELIOS Webview Viewer GUI & Dashboard
+    location / {
+        proxy_pass http://127.0.0.1:8085;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
+
+        # WebSocket Secure (wss://) Upgrade Headers
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+
+    # HELIOS Control Plane API Server
+    location /api/ {
+        proxy_pass http://127.0.0.1:3000/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
+    }
+}