Fix: imatges productes servides des d'img.treblarella.org

products.php reprefixava les URLs dels Sheets cap a
kapvoe-portfoli.treblarella.org/assets/products, on 15 imatges no
existeixen (404). Ara apunta a img.treblarella.org, on totes les
imatges existeixen i es serveixen correctament.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitignore

@@ -1,3 +1,8 @@
-checkout/config.php
 .env
 *.key
+
+data/
+data/*.csv
+data/*.log
+data/*.json
+data/*.txt

Dockerfile

@@ -1,13 +1,15 @@
-FROM php:8.2-apache
+FROM php:8.2-apache-bookworm
 
-RUN apt-get update && apt-get install -y \
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
     libcurl4-openssl-dev \
     libonig-dev \
     ca-certificates \
-    unzip \
-    git \
     && docker-php-ext-install curl mbstring mysqli pdo pdo_mysql \
     && a2enmod rewrite \
+    && echo "ServerName localhost" > /etc/apache2/conf-available/servername.conf \
+    && a2enconf servername \
     && rm -rf /var/lib/apt/lists/*
 
 COPY . /var/www/html/
@@ -15,3 +17,5 @@ COPY . /var/www/html/
 RUN mkdir -p /var/www/html/api/cache \
     && chown -R www-data:www-data /var/www/html \
     && chmod -R 775 /var/www/html/api/cache
+
+EXPOSE 80

api/products.php

@@ -111,7 +111,7 @@ function normalizeProduct(array $p): array
         'category' => normalizeText($p['category'] ?? $p['CATEGORIA'] ?? $p['CATEGORY'] ?? ''),
         'colors' => normalizeText($p['colors'] ?? $p['COLORS'] ?? $p['VIDRE'] ?? ''),
         'description' => normalizeText($p['description'] ?? $p['DESCRIPCIO'] ?? $p['DESCRIPTION'] ?? ''),
-        'image_url' => $filename ? "https://kapvoe-portfoli.treblarella.org/assets/products/$filename" : '',
+        'image_url' => $filename ? "https://img.treblarella.org/assets/products/$filename" : '',
         'stock' => normalizeStock($p['stock'] ?? $p['STOCK'] ?? 0),
         'top_vendes' => normalizeBool($p['top_vendes'] ?? $p['TOP_VENDES'] ?? false),
         'europe_price_number' => $priceNumber,

checkout/config.php

@@ -0,0 +1,60 @@
+<?php
+declare(strict_types=1);
+
+function kapvoe_env(string $key, ?string $default = null): string
+{
+    $value = getenv($key);
+    if ($value === false || $value === '') {
+        return $default ?? '';
+    }
+    return (string)$value;
+}
+
+$baseUrl = rtrim(kapvoe_env('KAPVOE_PUBLIC_BASE_URL', 'https://kapvoe-portfoli.treblarella.org'), '/');
+
+return [
+    'stripe_secret_key' => kapvoe_env('STRIPE_SECRET_KEY'),
+    'stripe_webhook_secret' => kapvoe_env('STRIPE_WEBHOOK_SECRET'),
+
+    'currency' => 'eur',
+    'orders_storage_dir' => dirname(__DIR__) . '/data',
+
+    'success_url' => $baseUrl . '/checkout/payment-success.php',
+    'cancel_url' => $baseUrl . '/checkout/payment-cancel.php',
+
+    'stock_sync_url' => kapvoe_env('KAPVOE_STOCK_SYNC_URL'),
+    'stock_sync_token' => kapvoe_env('KAPVOE_STOCK_SYNC_TOKEN'),
+    'catalog_api_url' => kapvoe_env('KAPVOE_CATALOG_API_URL', $baseUrl . '/api/products.php'),
+
+    'analytics_enabled' => true,
+    'analytics_sync_url' => kapvoe_env('KAPVOE_ANALYTICS_SYNC_URL'),
+    'analytics_sync_token' => kapvoe_env('KAPVOE_ANALYTICS_SYNC_TOKEN'),
+    'analytics_timeout' => 10,
+
+    'mail_transport' => kapvoe_env('KAPVOE_MAIL_TRANSPORT', 'smtp'),
+    'mail_from_email' => kapvoe_env('KAPVOE_MAIL_FROM_EMAIL', 'pedidos@bloodbros.store'),
+    'mail_from_name' => kapvoe_env('KAPVOE_MAIL_FROM_NAME', 'Blood Bros Sports'),
+    'mail_reply_to' => kapvoe_env('KAPVOE_MAIL_REPLY_TO', 'pedidos@bloodbros.store'),
+
+    'resend_api_key' => kapvoe_env('KAPVOE_RESEND_API_KEY'),
+    'resend_api_url' => kapvoe_env('KAPVOE_RESEND_API_URL', 'https://api.resend.com/emails'),
+
+    'smtp_enabled' => true,
+    'smtp_host' => kapvoe_env('KAPVOE_SMTP_HOST', 'mail.bloodbros.store'),
+    'smtp_port' => (int)kapvoe_env('KAPVOE_SMTP_PORT', '587'),
+    'smtp_encryption' => kapvoe_env('KAPVOE_SMTP_ENCRYPTION', 'tls'),
+    'smtp_username' => kapvoe_env('KAPVOE_SMTP_USERNAME', 'pedidos@bloodbros.store'),
+    'smtp_password' => kapvoe_env('KAPVOE_SMTP_PASSWORD'),
+    'smtp_timeout' => 15,
+    'smtp_allow_invalid_certificates' => true,
+
+    'admin_notification_email' => kapvoe_env('KAPVOE_ADMIN_NOTIFICATION_EMAIL', 'pedidos@bloodbros.store'),
+
+    'internal_notification_enabled' => true,
+    'internal_notification_webhook_url' => kapvoe_env('KAPVOE_INTERNAL_NOTIFICATION_WEBHOOK_URL'),
+    'internal_notification_webhook_token' => kapvoe_env('KAPVOE_INTERNAL_NOTIFICATION_WEBHOOK_TOKEN'),
+    'internal_notification_timeout' => 10,
+    'internal_notification_log_path' => dirname(__DIR__) . '/data/internal-notifications.log',
+
+    'admin_tools_token' => kapvoe_env('KAPVOE_ADMIN_TOOLS_TOKEN'),
+];

data/orders.csv

@@ -1,2 +0,0 @@
-order_id;created_at;product_code;product_name;unit_price;quantity;customer_name;address;postal_code;city;province;phone;email;payment_status;stripe_session_id;payment_intent_id;stock_updated;stock_updated_at;webhook_processed_at
-ORD-20260403-114000-45c216;"2026-04-03 11:40:02";K383;K383;60;1;"Albert Gadea Llevot";"Carrer del Progrés 5";25244;Fondarella;Lleida;686255350;albert@bloodbros.store;paid;cs_test_a1OGoVroq2P9ljWEHeyNewPwku0zZ1aJG3d2uDyDwIzl1q70bCZPRbrWT8;pi_3TI4CsHRV8rA2Xws1vaNX2My;1;"2026-04-03 11:40:24";"2026-04-03 11:40:24"

docs/DEPLOYMENT.md

@@ -0,0 +1,296 @@
+# Kapvoe Portfoli - Deployment i produccio
+
+## Objectiu
+
+Aquest projecte publica el portfolio d'ulleres Kapvoe al domini de produccio:
+
+https://kapvoe-portfoli.treblarella.org
+
+El flux correcte de treball es:
+
+VS Code / PowerShell
+-> git commit
+-> git push
+-> Gitea
+-> Webhook
+-> Coolify API
+-> Docker build/deploy
+-> Produccio
+
+## Arquitectura
+
+Internet
+-> Cloudflare / DNS
+-> Synology Reverse Proxy
+-> Coolify a 192.168.1.80
+-> Aplicacio Docker kapvoe-portfoli-web
+-> PHP Apache
+-> Apps Script / Google Sheets
+-> Stripe Checkout
+
+## Domini de produccio
+
+Domini public:
+
+https://kapvoe-portfoli.treblarella.org
+
+Aquest domini apunta a Synology, i Synology fa reverse proxy cap a Coolify.
+
+Configuracio recomanada del reverse proxy de Synology:
+
+Origen:
+- Protocol: HTTPS
+- Host: kapvoe-portfoli.treblarella.org
+- Port: 443
+
+Desti:
+- Protocol: HTTP
+- Host: 192.168.1.80
+- Port: 80
+
+## Coolify
+
+Aplicacio:
+
+kapvoe-portfoli-web
+
+Projecte:
+
+Portfoli Ulleres / production
+
+Build pack:
+
+Dockerfile
+
+Dockerfile location:
+
+/Dockerfile
+
+Domini configurat a Coolify:
+
+https://kapvoe-portfoli.treblarella.org
+
+## Git Source
+
+Repositori Gitea:
+
+Albert/portfoli-ulleres
+
+URL SSH interna usada per Coolify:
+
+ssh://git@10.0.0.1:22222/Albert/portfoli-ulleres.git
+
+Branca de produccio:
+
+main
+
+## Deploy automatic
+
+El deploy automatic funciona amb:
+
+Gitea webhook -> Coolify API
+
+Webhook a Gitea:
+
+coolify-production-deploy
+
+URL del webhook:
+
+http://10.0.0.1:8000/api/v1/deploy?uuid=f11x5rza9srzo6pkgqcnl0ph&force=false
+
+Metode:
+
+POST
+
+Content type:
+
+application/json
+
+Header d'autoritzacio:
+
+Bearer <COOLIFY_API_TOKEN>
+
+Important: el token no s'ha de guardar mai al repo.
+
+## Configuracio Gitea necessaria
+
+Gitea ha de permetre webhooks cap a la IP interna de Docker/Coolify.
+
+Fitxer:
+
+/data/gitea/conf/app.ini
+
+Bloc necessari:
+
+[webhook]
+ALLOWED_HOST_LIST = external,private,loopback,10.0.0.1
+
+Despres de modificar aquest fitxer cal reiniciar el contenidor de Gitea.
+
+## Coolify API
+
+A Coolify cal tenir API Access activat.
+
+Allowed IPs recomanats:
+
+10.0.0.0/8,127.0.0.1/32,192.168.1.0/24
+
+Token recomanat:
+
+gitea-production-deploy
+
+Permisos minims:
+
+- read
+- deploy
+
+## Persistent Storage
+
+La carpeta de dades runtime es persistent:
+
+/var/www/html/data
+
+Aquesta carpeta conte:
+
+- orders.csv
+- analytics.log
+- mail.log
+- internal-notifications.log
+
+Aquesta carpeta no ha d'anar al repositori Git.
+
+.gitignore ha d'incloure:
+
+data/
+data/*.csv
+data/*.log
+data/*.json
+data/*.txt
+
+## Stripe
+
+Checkout Stripe funciona amb:
+
+/checkout/create-checkout-session.php
+
+Webhook live de Stripe:
+
+https://kapvoe-portfoli.treblarella.org/checkout/stripe-webhook.php
+
+Event minim necessari:
+
+checkout.session.completed
+
+El webhook processa:
+
+- payment_status = paid
+- payment_intent_id
+- stock update
+- email client
+- email admin
+
+## Variables d'entorn critiques a Coolify
+
+No guardar secrets al repo.
+
+Variables importants:
+
+STRIPE_SECRET_KEY
+STRIPE_WEBHOOK_SECRET
+KAPVOE_PUBLIC_BASE_URL
+KAPVOE_CATALOG_API_URL
+KAPVOE_STOCK_SYNC_URL
+KAPVOE_STOCK_SYNC_TOKEN
+KAPVOE_ANALYTICS_SYNC_URL
+KAPVOE_ANALYTICS_SYNC_TOKEN
+KAPVOE_SMTP_HOST
+KAPVOE_SMTP_PORT
+KAPVOE_SMTP_ENCRYPTION
+KAPVOE_SMTP_USERNAME
+KAPVOE_SMTP_PASSWORD
+KAPVOE_ADMIN_NOTIFICATION_EMAIL
+KAPVOE_ADMIN_TOOLS_TOKEN
+
+Valor intern recomanat per evitar problemes SSL dins del contenidor:
+
+KAPVOE_CATALOG_API_URL=http://127.0.0.1/api/products.php
+
+## Com desplegar canvis
+
+Des del PC:
+
+git status
+git add .
+git commit -m "Missatge del canvi"
+git push
+
+Despres anar a Coolify -> kapvoe-portfoli-web -> Deployments.
+
+El deploy ha d'apareixer amb etiqueta:
+
+API
+
+No hauria de ser necessari premer Redeploy manualment.
+
+## Com validar produccio
+
+Productes:
+
+https://kapvoe-portfoli.treblarella.org/api/products.php?refresh=1
+
+Ha de retornar JSON amb:
+
+"ok": true
+
+I count amb el nombre de productes visibles.
+
+Web:
+
+https://kapvoe-portfoli.treblarella.org
+
+Checkout:
+
+Fer una prova amb producte de prova i verificar:
+
+- Stripe checkout obre correctament
+- Stripe webhook retorna 200
+- orders.csv passa a paid
+- stock_updated = 1
+- customer_email_sent = 1
+- admin_email_sent = 1
+
+## Comprovar dades persistents al servidor
+
+Al servidor Coolify:
+
+CONTAINER=$(docker ps --format "{{.Names}}" | grep f11x5 | head -n 1)
+docker exec "$CONTAINER" ls -la /var/www/html/data
+docker exec "$CONTAINER" sh -c 'tail -n 5 /var/www/html/data/orders.csv'
+
+## Notes importants de seguretat
+
+S'han de rotar tots els secrets que s'hagin enganxat accidentalment en converses, logs o terminals compartits.
+
+Secrets a rotar:
+
+- Stripe secret key
+- Stripe webhook secret
+- SMTP password
+- KAPVOE_STOCK_SYNC_TOKEN
+- KAPVOE_ANALYTICS_SYNC_TOKEN
+- KAPVOE_ADMIN_TOOLS_TOKEN
+- Tokens interns de Gitea si s'han exposat
+- Coolify API token si s'ha exposat
+
+## Estat final validat
+
+Validat:
+
+- Web en produccio funcional
+- Productes carregant
+- Imatges carregant
+- Stripe Checkout funcional
+- Stripe webhook funcional
+- Emails client i admin funcionals
+- Persistent storage funcional
+- Deploy automatic Gitea -> Coolify funcional