пва

AGENTS.md

@@ -67,6 +67,14 @@ cd client && npm run build        # full typecheck + build
 - Yandex callback: `{SERVER_PUBLIC_URL}/api/auth/oauth/yandex/callback`
 - Required env vars: `VK_CLIENT_ID`, `VK_CLIENT_SECRET`, `YANDEX_CLIENT_ID`, `YANDEX_CLIENT_SECRET`, `SERVER_PUBLIC_URL`, `CLIENT_PUBLIC_URL`
 
+## Infrastructure (deployment)
+
+- **VPS** runs Nginx Proxy Manager (NPM), connected via Netbird peer-to-peer VPN to the dev machine
+- **Local dev machine** runs the project (server + client), also a Netbird peer
+- **Traffic flow**: Browser → Domain (A record → VPS IP) → NPM → Netbird tunnel → Local dev machine (`server:3333`)
+- NPM manages SSL, domains, and proxy hosts
+- `trustProxy: true` on Fastify — `request.ip` works correctly through NPM/Netbird chain
+
 ## Notable quirks
 
 - `.env` is gitignored. Copy `.env.example` to `.env` for local dev.