ante-erp-cli 1.11.36 → 1.11.37

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ante-erp-cli",
-  "version": "1.11.36",
+  "version": "1.11.37",
   "description": "Comprehensive CLI tool for managing ANTE ERP self-hosted installations",
   "type": "module",
   "bin": {

package/src/commands/install.js

@@ -81,6 +81,7 @@ function showSuccess(installDir, credentials, config) {
   const guardianAppUrl = config.guardianAppDomain || 'http://localhost:8082';
   const facialWebUrl = config.facialAppDomain || 'http://localhost:8083';
   const posAppUrl = config.posAppDomain || 'http://localhost:8084';
+  const clientAppUrl = config.clientAppDomain || 'http://localhost:9005';
 
   let accessInfo = chalk.white('Access Information:') + '\n' +
     chalk.gray('━'.repeat(40)) + '\n' +
@@ -102,6 +103,10 @@ function showSuccess(installDir, credentials, config) {
     accessInfo += chalk.cyan('POS App:       ') + chalk.white(posAppUrl) + '\n';
   }
 
+  if (config.installClient) {
+    accessInfo += chalk.cyan('Client App:    ') + chalk.white(clientAppUrl) + '\n';
+  }
+
   accessInfo += chalk.cyan('Backend:       ') + chalk.white(apiUrl) + '\n' +
     chalk.cyan('WebSocket:     ') + chalk.white(apiUrl) + '\n\n';
 
@@ -312,6 +317,7 @@ export async function install(options) {
     const guardianAppPort = 8082;
     const facialWebPort = 8083;
     const posAppPort = 8084;
+    const clientAppPort = 9005;
 
     const config = {
       installDir: options.dir || './ante-erp',
@@ -322,18 +328,21 @@ export async function install(options) {
       guardianAppDomain: buildURL(host, guardianAppPort),
       facialAppDomain: buildURL(host, facialWebPort),
       posAppDomain: buildURL(host, posAppPort),
+      clientAppDomain: buildURL(host, clientAppPort),
       frontendPort,
       apiPort,
       gateAppPort,
       guardianAppPort,
       facialWebPort,
       posAppPort,
+      clientAppPort,
       companyId: 1,
       installGate: true,      // Install all frontends by default
       installGuardian: true,
       installFacial: true,
       installPos: true,
-      frontends: ['main', 'gate', 'guardian', 'facial', 'pos']
+      installClient: true,
+      frontends: ['main', 'gate', 'guardian', 'facial', 'pos', 'client']
     };
 
     console.log(chalk.green(`✓ ${formatStepTitle(stepNetworkDetect, totalSteps, `Network detected: ${host}`)}\n`));
@@ -346,6 +355,7 @@ export async function install(options) {
     console.log(chalk.cyan('  Guardian App:'), chalk.white(config.guardianAppDomain));
     console.log(chalk.cyan('  Facial Web:'), chalk.white(config.facialAppDomain));
     console.log(chalk.cyan('  POS App:'), chalk.white(config.posAppDomain));
+    console.log(chalk.cyan('  Client App:'), chalk.white(config.clientAppDomain));
     console.log(chalk.cyan('  API:'), chalk.white(config.apiDomain));
     console.log();
 
@@ -426,11 +436,13 @@ export async function install(options) {
             guardianAppPort: config.guardianAppPort,
             facialWebPort: config.facialWebPort,
             posAppPort: config.posAppPort,
+            clientAppPort: config.clientAppPort,
             installMain: true,
             installGate: config.installGate,
             installGuardian: config.installGuardian,
             installFacial: config.installFacial,
             installPos: config.installPos,
+            installClient: config.installClient,
             companyId: config.companyId
           });
 
@@ -444,15 +456,18 @@ export async function install(options) {
             guardianAppPort: config.guardianAppPort,
             facialWebPort: config.facialWebPort,
             posAppPort: config.posAppPort,
+            clientAppPort: config.clientAppPort,
             gateAppUrl: config.gateAppDomain,
             guardianAppUrl: config.guardianAppDomain,
             facialWebUrl: config.facialAppDomain,
             posAppUrl: config.posAppDomain,
+            clientAppUrl: config.clientAppDomain,
             companyId: config.companyId,
             installGate: config.installGate,
             installGuardian: config.installGuardian,
             installFacial: config.installFacial,
-            installPos: config.installPos
+            installPos: config.installPos,
+            installClient: config.installClient
           });
 
           writeFileSync(join(config.installDir, 'docker-compose.yml'), dockerCompose);

package/src/commands/regenerate-compose.js

@@ -35,10 +35,12 @@ function detectInstalledApps(composeFile) {
       hasMain: composeContent.includes('frontend:') || composeContent.includes('container_name: ante-frontend'),
       hasGateApp: composeContent.includes('gate-app:') || composeContent.includes('container_name: ante-gate-app'),
       hasGuardianApp: composeContent.includes('guardian-app:') || composeContent.includes('container_name: ante-guardian-app'),
-      hasFacialWeb: composeContent.includes('facial-web:') || composeContent.includes('container_name: ante-facial-web')
+      hasFacialWeb: composeContent.includes('facial-web:') || composeContent.includes('container_name: ante-facial-web'),
+      hasPosApp: composeContent.includes('pos-app:') || composeContent.includes('container_name: ante-pos'),
+      hasClientApp: composeContent.includes('client-app:') || composeContent.includes('container_name: ante-client')
     };
   } catch {
-    return { hasMain: true, hasGateApp: false, hasGuardianApp: false, hasFacialWeb: false };
+    return { hasMain: true, hasGateApp: false, hasGuardianApp: false, hasFacialWeb: false, hasPosApp: false, hasClientApp: false };
   }
 }
 
@@ -74,7 +76,9 @@ export async function regenerateCompose() {
     console.log(chalk.gray(`  Frontend Main:  ${installed.hasMain ? '✓ Installed' : '✗ Not installed'}`));
     console.log(chalk.gray(`  Gate App:       ${installed.hasGateApp ? '✓ Installed' : '✗ Not installed'}`));
     console.log(chalk.gray(`  Guardian App:   ${installed.hasGuardianApp ? '✓ Installed' : '✗ Not installed'}`));
-    console.log(chalk.gray(`  Facial Web:     ${installed.hasFacialWeb ? '✓ Installed' : '✗ Not installed'}\n`));
+    console.log(chalk.gray(`  Facial Web:     ${installed.hasFacialWeb ? '✓ Installed' : '✗ Not installed'}`));
+    console.log(chalk.gray(`  POS App:        ${installed.hasPosApp ? '✓ Installed' : '✗ Not installed'}`));
+    console.log(chalk.gray(`  Client App:     ${installed.hasClientApp ? '✓ Installed' : '✗ Not installed'}\n`));
 
     // Parse .env file
     const envConfig = parseEnvFile(envFile);

package/src/commands/set-domain.js

@@ -107,10 +107,11 @@ function detectInstalledApps(composeFile) {
       hasGateApp: composeContent.includes('gate-app:') || composeContent.includes('container_name: ante-gate-app'),
       hasGuardianApp: composeContent.includes('guardian-app:') || composeContent.includes('container_name: ante-guardian-app'),
       hasFacialWeb: composeContent.includes('facial-web:') || composeContent.includes('container_name: ante-facial-web'),
-      hasPosApp: composeContent.includes('pos-app:') || composeContent.includes('container_name: ante-pos')
+      hasPosApp: composeContent.includes('pos-app:') || composeContent.includes('container_name: ante-pos'),
+      hasClientApp: composeContent.includes('client-app:') || composeContent.includes('container_name: ante-client')
     };
   } catch {
-    return { hasGateApp: false, hasGuardianApp: false, hasFacialWeb: false, hasPosApp: false };
+    return { hasGateApp: false, hasGuardianApp: false, hasFacialWeb: false, hasPosApp: false, hasClientApp: false };
   }
 }
 
@@ -158,10 +159,10 @@ export async function setDomain(options) {
       console.log(); // Add spacing
     }
 
-    let frontendUrl, apiUrl, gateAppUrl, guardianAppUrl, facialWebUrl, posAppUrl;
+    let frontendUrl, apiUrl, gateAppUrl, guardianAppUrl, facialWebUrl, posAppUrl, clientAppUrl;
 
     // Detect which apps are installed
-    const { hasGateApp, hasGuardianApp, hasFacialWeb, hasPosApp } = detectInstalledApps(composeFile);
+    const { hasGateApp, hasGuardianApp, hasFacialWeb, hasPosApp, hasClientApp } = detectInstalledApps(composeFile);
 
     if (options.interactive !== false) {
       // Show current values
@@ -171,6 +172,7 @@ export async function setDomain(options) {
       const currentGuardianAppUrl = getEnvValue(envPath, 'GUARDIAN_APP_URL');
       const currentFacialWebUrl = getEnvValue(envPath, 'FACIAL_WEB_URL');
       const currentPosAppUrl = getEnvValue(envPath, 'POS_APP_URL');
+      const currentClientAppUrl = getEnvValue(envPath, 'CLIENT_APP_URL');
 
       if (currentFrontendUrl) {
         console.log(chalk.gray(`Current Frontend URL: ${currentFrontendUrl}`));
@@ -187,6 +189,9 @@ export async function setDomain(options) {
       if (currentPosAppUrl) {
         console.log(chalk.gray(`Current POS App URL: ${currentPosAppUrl}`));
       }
+      if (currentClientAppUrl) {
+        console.log(chalk.gray(`Current Client App URL: ${currentClientAppUrl}`));
+      }
       if (currentApiUrl) {
         console.log(chalk.gray(`Current API URL: ${currentApiUrl}\n`));
       }
@@ -254,6 +259,15 @@ export async function setDomain(options) {
           });
         }
 
+        if (hasClientApp) {
+          portPrompts.push({
+            type: 'number',
+            name: 'clientAppPort',
+            message: 'Client App port:',
+            default: 9005
+          });
+        }
+
         portPrompts.push({
           type: 'number',
           name: 'apiPort',
@@ -269,6 +283,7 @@ export async function setDomain(options) {
         if (hasGuardianApp) guardianAppUrl = buildURL(detectedIP, ports.guardianAppPort);
         if (hasFacialWeb) facialWebUrl = buildURL(detectedIP, ports.facialWebPort);
         if (hasPosApp) posAppUrl = buildURL(detectedIP, ports.posAppPort);
+        if (hasClientApp) clientAppUrl = buildURL(detectedIP, ports.clientAppPort);
       } else if (configType.type === 'localhost') {
         const portPrompts = [
           {
@@ -315,6 +330,15 @@ export async function setDomain(options) {
           });
         }
 
+        if (hasClientApp) {
+          portPrompts.push({
+            type: 'number',
+            name: 'clientAppPort',
+            message: 'Client App port:',
+            default: 9005
+          });
+        }
+
         portPrompts.push({
           type: 'number',
           name: 'apiPort',
@@ -330,6 +354,7 @@ export async function setDomain(options) {
         if (hasGuardianApp) guardianAppUrl = buildURL('localhost', ports.guardianAppPort);
         if (hasFacialWeb) facialWebUrl = buildURL('localhost', ports.facialWebPort);
         if (hasPosApp) posAppUrl = buildURL('localhost', ports.posAppPort);
+        if (hasClientApp) clientAppUrl = buildURL('localhost', ports.clientAppPort);
       } else if (configType.type === 'custom-ip') {
         const ipPrompts = [
           {
@@ -385,6 +410,15 @@ export async function setDomain(options) {
           });
         }
 
+        if (hasClientApp) {
+          ipPrompts.push({
+            type: 'number',
+            name: 'clientAppPort',
+            message: 'Client App port:',
+            default: 9005
+          });
+        }
+
         ipPrompts.push({
           type: 'number',
           name: 'apiPort',
@@ -400,6 +434,7 @@ export async function setDomain(options) {
         if (hasGuardianApp) guardianAppUrl = buildURL(ipConfig.ip, ipConfig.guardianAppPort);
         if (hasFacialWeb) facialWebUrl = buildURL(ipConfig.ip, ipConfig.facialWebPort);
         if (hasPosApp) posAppUrl = buildURL(ipConfig.ip, ipConfig.posAppPort);
+        if (hasClientApp) clientAppUrl = buildURL(ipConfig.ip, ipConfig.clientAppPort);
       } else {
         // Manual URL input (domain configuration)
 
@@ -442,6 +477,7 @@ export async function setDomain(options) {
           if (hasGuardianApp) guardianAppUrl = `https://${subdomain}-guardian.ante.ph`;
           if (hasFacialWeb) facialWebUrl = `https://${subdomain}-fr.ante.ph`;
           if (hasPosApp) posAppUrl = `https://${subdomain}-pos.ante.ph`;
+          if (hasClientApp) clientAppUrl = `https://${subdomain}-client.ante.ph`;
 
           // Display generated domains for confirmation
           console.log(chalk.cyan('\n📋 Generated Domain Configuration:\n'));
@@ -451,6 +487,7 @@ export async function setDomain(options) {
           if (hasGuardianApp) console.log(chalk.gray(`  Guardian App:    ${guardianAppUrl}`));
           if (hasFacialWeb) console.log(chalk.gray(`  Facial Web:      ${facialWebUrl}`));
           if (hasPosApp) console.log(chalk.gray(`  POS App:         ${posAppUrl}`));
+          if (hasClientApp) console.log(chalk.gray(`  Client App:      ${clientAppUrl}`));
           console.log('');
 
           const confirmDomains = await inquirer.prompt([
@@ -518,6 +555,16 @@ export async function setDomain(options) {
             });
           }
 
+          if (hasClientApp) {
+            domainPrompts.push({
+              type: 'input',
+              name: 'clientAppUrl',
+              message: 'Client App URL:\n  Examples: https://client.ante.ph or http://143.198.91.153:9005\n  Enter URL',
+              default: currentClientAppUrl || 'http://localhost:9005',
+              validate: validateUrl
+            });
+          }
+
           domainPrompts.push({
             type: 'input',
             name: 'apiUrl',
@@ -535,6 +582,7 @@ export async function setDomain(options) {
           if (hasGuardianApp) guardianAppUrl = sanitizeUrl(answers.guardianAppUrl);
           if (hasFacialWeb) facialWebUrl = sanitizeUrl(answers.facialWebUrl);
           if (hasPosApp) posAppUrl = sanitizeUrl(answers.posAppUrl);
+          if (hasClientApp) clientAppUrl = sanitizeUrl(answers.clientAppUrl);
         }
       }
     } else {
@@ -590,6 +638,10 @@ export async function setDomain(options) {
       envUpdates.POS_APP_URL = posAppUrl;
     }
 
+    if (hasClientApp && clientAppUrl) {
+      envUpdates.CLIENT_APP_URL = clientAppUrl;
+    }
+
     updateEnvFile(envPath, envUpdates);
 
     console.log(chalk.green('✓ Configuration updated'));
@@ -627,6 +679,11 @@ export async function setDomain(options) {
           nginxConfig.posAppPort = 8084;
         }
 
+        if (hasClientApp && clientAppUrl) {
+          nginxConfig.clientAppDomain = clientAppUrl;
+          nginxConfig.clientAppPort = 9005;
+        }
+
         await configureNginx(nginxConfig);
       } catch (error) {
         console.log(chalk.yellow('\n⚠  NGINX configuration failed:', error.message));
@@ -724,6 +781,12 @@ export async function setDomain(options) {
                 domains.push(posAppDomain);
               }
             }
+            if (hasClientApp && clientAppUrl && clientAppUrl.startsWith('https://')) {
+              const clientAppDomain = extractDomain(clientAppUrl);
+              if (clientAppDomain !== 'localhost' && !clientAppDomain.match(/^\d+\.\d+\.\d+\.\d+$/) && !domains.includes(clientAppDomain)) {
+                domains.push(clientAppDomain);
+              }
+            }
 
             for (const domain of domains) {
               console.log(chalk.gray(`   Obtaining certificate for ${domain}...`));
@@ -766,6 +829,11 @@ export async function setDomain(options) {
               sslNginxConfig.posAppPort = 8084;
             }
 
+            if (hasClientApp && clientAppUrl) {
+              sslNginxConfig.clientAppDomain = clientAppUrl;
+              sslNginxConfig.clientAppPort = 9005;
+            }
+
             await updateNginxForSSL(sslNginxConfig);
 
             // Step 3: Setup auto-renewal
@@ -904,6 +972,9 @@ export async function setDomain(options) {
     if (hasFacialWeb && facialWebUrl) {
       console.log(chalk.cyan('Facial Web: '), chalk.white(facialWebUrl));
     }
+    if (hasClientApp && clientAppUrl) {
+      console.log(chalk.cyan('Client App: '), chalk.white(clientAppUrl));
+    }
     console.log(chalk.cyan('API:        '), chalk.white(apiUrl));
     console.log(chalk.cyan('WebSocket:  '), chalk.white(apiUrl));
 
@@ -918,6 +989,9 @@ export async function setDomain(options) {
     if (hasFacialWeb && facialWebUrl) {
       console.log(chalk.white(`   Facial Web:    ${facialWebUrl}`));
     }
+    if (hasClientApp && clientAppUrl) {
+      console.log(chalk.white(`   Client App:    ${clientAppUrl}`));
+    }
     console.log();
 
   } catch (error) {

package/src/commands/update.js

@@ -21,10 +21,11 @@ function detectInstalledApps(composeFile) {
       hasGateApp: composeContent.includes('gate-app:') || composeContent.includes('container_name: ante-gate-app'),
       hasGuardianApp: composeContent.includes('guardian-app:') || composeContent.includes('container_name: ante-guardian-app'),
       hasFacialWeb: composeContent.includes('facial-web:') || composeContent.includes('container_name: ante-facial-web'),
-      hasPosApp: composeContent.includes('pos-app:') || composeContent.includes('container_name: ante-pos')
+      hasPosApp: composeContent.includes('pos-app:') || composeContent.includes('container_name: ante-pos'),
+      hasClientApp: composeContent.includes('client-app:') || composeContent.includes('container_name: ante-client')
     };
   } catch {
-    return { hasGateApp: false, hasGuardianApp: false, hasFacialWeb: false, hasPosApp: false };
+    return { hasGateApp: false, hasGuardianApp: false, hasFacialWeb: false, hasPosApp: false, hasClientApp: false };
   }
 }
 
@@ -39,7 +40,8 @@ function detectMissingServices(composeFile) {
     gateApp: !installed.hasGateApp,
     guardianApp: !installed.hasGuardianApp,
     facialWeb: !installed.hasFacialWeb,
-    posApp: !installed.hasPosApp
+    posApp: !installed.hasPosApp,
+    clientApp: !installed.hasClientApp
   };
 }
 
@@ -80,11 +82,13 @@ function updateDockerCompose(composeFile, envFile, newServices) {
     guardianAppPort: parseInt(envConfig.GUARDIAN_APP_PORT) || 8082,
     facialWebPort: parseInt(envConfig.FACIAL_WEB_PORT) || 8083,
     posAppPort: parseInt(envConfig.POS_APP_PORT) || 8084,
+    clientAppPort: parseInt(envConfig.CLIENT_APP_PORT) || 9005,
     installMain: true,
     installGate: currentInstalled.hasGateApp || newServices.gateApp,
     installGuardian: currentInstalled.hasGuardianApp || newServices.guardianApp,
     installFacial: currentInstalled.hasFacialWeb || newServices.facialWeb,
     installPos: currentInstalled.hasPosApp || newServices.posApp,
+    installClient: currentInstalled.hasClientApp || newServices.clientApp,
     companyId: parseInt(envConfig.COMPANY_ID) || 1
   });
 
@@ -200,8 +204,32 @@ COMPANY_ID=1
     }
   }
 
+  // Add client-app configuration if needed
+  if (newServices.clientApp && !envContent.includes('CLIENT_APP_PORT')) {
+    if (!envContent.includes('# FRONTEND APP CONFIGURATION')) {
+      envContent += `\n# ------------------------------------------------------------------------------
+# FRONTEND APP CONFIGURATION
+# ------------------------------------------------------------------------------
+COMPANY_ID=1
+`;
+    }
+
+    // Replace commented line or add new
+    if (envContent.includes('# CLIENT_APP_PORT=')) {
+      envContent = envContent.replace(/# CLIENT_APP_PORT=\d+/, 'CLIENT_APP_PORT=9005');
+    } else {
+      envContent += `CLIENT_APP_PORT=9005\n`;
+    }
+
+    if (envContent.includes('# CLIENT_APP_URL=')) {
+      envContent = envContent.replace(/# CLIENT_APP_URL=.*/, 'CLIENT_APP_URL=http://localhost:9005');
+    } else {
+      envContent += `CLIENT_APP_URL=http://localhost:9005\n`;
+    }
+  }
+
   // Add COMPANY_ID if missing and any new service is being added
-  if ((newServices.gateApp || newServices.guardianApp || newServices.facialWeb || newServices.posApp) && !envContent.includes('COMPANY_ID=')) {
+  if ((newServices.gateApp || newServices.guardianApp || newServices.facialWeb || newServices.posApp || newServices.clientApp) && !envContent.includes('COMPANY_ID=')) {
     envContent += `COMPANY_ID=1\n`;
   }
 
@@ -255,10 +283,10 @@ export async function update(options) {
 
     // Detect missing services that could be installed
     const missingServices = detectMissingServices(composeFile);
-    const hasNewServices = missingServices.gateApp || missingServices.guardianApp || missingServices.facialWeb || missingServices.posApp;
+    const hasNewServices = missingServices.gateApp || missingServices.guardianApp || missingServices.facialWeb || missingServices.posApp || missingServices.clientApp;
 
     // Track which services to install (will be set to missingServices if any found)
-    let servicesToInstall = { gateApp: false, guardianApp: false, facialWeb: false, posApp: false };
+    let servicesToInstall = { gateApp: false, guardianApp: false, facialWeb: false, posApp: false, clientApp: false };
 
     // Calculate total steps dynamically
     let totalSteps = 6; // Base steps: check services, pull, stop, start, backend health, migrations
@@ -329,6 +357,7 @@ export async function update(options) {
           if (missingServices.guardianApp) availableServices.push('Guardian App');
           if (missingServices.facialWeb) availableServices.push('Facial Web');
           if (missingServices.posApp) availableServices.push('POS App');
+          if (missingServices.clientApp) availableServices.push('Client App');
 
           task.title = formatStepTitle(stepCheckServices, totalSteps, `Found new services: ${availableServices.join(', ')}`);
           ctx.missingServices = missingServices;
@@ -343,6 +372,7 @@ export async function update(options) {
           if (servicesToInstall.guardianApp) servicesAdded.push('Guardian App');
           if (servicesToInstall.facialWeb) servicesAdded.push('Facial Web');
           if (servicesToInstall.posApp) servicesAdded.push('POS App');
+          if (servicesToInstall.clientApp) servicesAdded.push('Client App');
 
           // Update docker-compose.yml with new services
           updateDockerCompose(composeFile, envFile, servicesToInstall);

package/src/templates/docker-compose.yml.js

@@ -11,10 +11,12 @@ export function generateDockerCompose(options = {}) {
     guardianAppPort = 8082,
     facialWebPort = 8083,
     posAppPort = 8084,
+    clientAppPort = 9005,
     installGate = false,
     installGuardian = false,
     installFacial = false,
     installPos = false,
+    installClient = false,
     companyId = 1
   } = options;
 
@@ -299,6 +301,34 @@ ${installGate ? `
       options:
         max-size: "10m"
         max-file: "3"
+` : ''}${installClient ? `
+  # ANTE Client App
+  client-app:
+    image: ghcr.io/gtplusnet/ante-self-hosted-ante-client:latest
+    container_name: ante-client
+    restart: unless-stopped
+    depends_on:
+      backend:
+        condition: service_healthy
+    environment:
+      - VITE_API_URL=\${API_URL:-http://localhost:${backendPort}}
+      - VITE_APP_NAME=ANTE Client Portal
+      - VITE_APP_VERSION=\${VERSION:-1.0.0}
+    ports:
+      - "${clientAppPort}:9005"
+    networks:
+      - ante-network
+    healthcheck:
+      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:9005/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
 ` : ''}
 volumes:
   postgres_data:

package/src/templates/env.js

@@ -15,15 +15,18 @@ export function generateEnv(credentials, options = {}) {
     guardianAppPort = 8082,
     facialWebPort = 8083,
     posAppPort = 8084,
+    clientAppPort = 9005,
     gateAppUrl = 'http://localhost:8081',
     guardianAppUrl = 'http://localhost:8082',
     facialWebUrl = 'http://localhost:8083',
     posAppUrl = 'http://localhost:8084',
+    clientAppUrl = 'http://localhost:9005',
     companyId = 1,
     installGate = false,
     installGuardian = false,
     installFacial = false,
     installPos = false,
+    installClient = false,
     smtpHost = '',
     smtpPort = 587,
     smtpUsername = '',
@@ -68,9 +71,10 @@ ${installGate ? `GATE_APP_PORT=${gateAppPort}` : '# GATE_APP_PORT=8081'}
 ${installGuardian ? `GUARDIAN_APP_PORT=${guardianAppPort}` : '# GUARDIAN_APP_PORT=8082'}
 ${installFacial ? `FACIAL_WEB_PORT=${facialWebPort}` : '# FACIAL_WEB_PORT=8083'}
 ${installPos ? `POS_APP_PORT=${posAppPort}` : '# POS_APP_PORT=8084'}
+${installClient ? `CLIENT_APP_PORT=${clientAppPort}` : '# CLIENT_APP_PORT=9005'}
 # Note: WebSocket runs on the same port as backend (BACKEND_PORT)
 
-${(installGate || installGuardian || installFacial || installPos) ? `# ------------------------------------------------------------------------------
+${(installGate || installGuardian || installFacial || installPos || installClient) ? `# ------------------------------------------------------------------------------
 # FRONTEND APP CONFIGURATION
 # ------------------------------------------------------------------------------
 COMPANY_ID=${companyId}
@@ -78,6 +82,7 @@ ${installGate ? `GATE_APP_URL=${gateAppUrl}` : '# GATE_APP_URL=http://localhost:
 ${installGuardian ? `GUARDIAN_APP_URL=${guardianAppUrl}` : '# GUARDIAN_APP_URL=http://localhost:8082'}
 ${installFacial ? `FACIAL_WEB_URL=${facialWebUrl}` : '# FACIAL_WEB_URL=http://localhost:8083'}
 ${installPos ? `POS_APP_URL=${posAppUrl}` : '# POS_APP_URL=http://localhost:8084'}
+${installClient ? `CLIENT_APP_URL=${clientAppUrl}` : '# CLIENT_APP_URL=http://localhost:9005'}
 
 ` : ''}# ------------------------------------------------------------------------------
 # EMAIL CONFIGURATION

package/src/utils/nginx.js

@@ -52,12 +52,14 @@ export async function installNginx(spinner) {
  * @param {string} [config.guardianAppDomain] - Guardian app domain (optional)
  * @param {string} [config.facialAppDomain] - Facial web app domain (optional)
  * @param {string} [config.posAppDomain] - POS app domain (optional)
+ * @param {string} [config.clientAppDomain] - Client app domain (optional)
  * @param {number} config.frontendPort - Frontend Docker port (default: 8080)
  * @param {number} config.apiPort - API Docker port (default: 3001)
  * @param {number} [config.gateAppPort] - Gate app Docker port (default: 8081)
  * @param {number} [config.guardianAppPort] - Guardian app Docker port (default: 8082)
  * @param {number} [config.facialWebPort] - Facial web app Docker port (default: 8083)
  * @param {number} [config.posAppPort] - POS app Docker port (default: 8084)
+ * @param {number} [config.clientAppPort] - Client app Docker port (default: 9005)
  * @param {boolean} config.ssl - Enable SSL configuration (default: false)
  * @returns {string} NGINX configuration content
  */
@@ -69,12 +71,14 @@ export function generateNginxConfig(config) {
     guardianAppDomain,
     facialAppDomain,
     posAppDomain,
+    clientAppDomain,
     frontendPort = 8080,
     apiPort = 3001,
     gateAppPort = 8081,
     guardianAppPort = 8082,
     facialWebPort = 8083,
     posAppPort = 8084,
+    clientAppPort = 9005,
     ssl = false
   } = config;
 
@@ -85,6 +89,7 @@ export function generateNginxConfig(config) {
   const guardianAppHost = guardianAppDomain ? guardianAppDomain.replace(/^https?:\/\//, '').replace(/:\d+$/, '') : null;
   const facialAppHost = facialAppDomain ? facialAppDomain.replace(/^https?:\/\//, '').replace(/:\d+$/, '') : null;
   const posAppHost = posAppDomain ? posAppDomain.replace(/^https?:\/\//, '').replace(/:\d+$/, '') : null;
+  const clientAppHost = clientAppDomain ? clientAppDomain.replace(/^https?:\/\//, '').replace(/:\d+$/, '') : null;
 
   if (ssl) {
     return generateSslNginxConfig({
@@ -94,12 +99,14 @@ export function generateNginxConfig(config) {
       guardianAppHost,
       facialAppHost,
       posAppHost,
+      clientAppHost,
       frontendPort,
       apiPort,
       gateAppPort,
       guardianAppPort,
       facialWebPort,
-      posAppPort
+      posAppPort,
+      clientAppPort
     });
   }
 
@@ -292,6 +299,37 @@ server {
         proxy_read_timeout 60s;
     }
 }
+` : ''}${clientAppHost ? `
+# ANTE Client App Configuration
+server {
+    listen 80;
+    listen [::]:80;
+    server_name ${clientAppHost};
+
+    # Increase buffer sizes for large headers
+    client_header_buffer_size 16k;
+    large_client_header_buffers 4 16k;
+
+    # Increase body size for file uploads
+    client_max_body_size 100M;
+
+    location / {
+        proxy_pass http://localhost:${clientAppPort};
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+
+        # Timeout settings
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+}
 ` : ''}`;
 }
 
@@ -304,12 +342,14 @@ server {
  * @param {string} [config.guardianAppHost] - Guardian app hostname (optional)
  * @param {string} [config.facialAppHost] - Facial web app hostname (optional)
  * @param {string} [config.posAppHost] - POS app hostname (optional)
+ * @param {string} [config.clientAppHost] - Client app hostname (optional)
  * @param {number} config.frontendPort - Frontend port
  * @param {number} config.apiPort - API port
  * @param {number} [config.gateAppPort] - Gate app port (default: 8081)
  * @param {number} [config.guardianAppPort] - Guardian app port (default: 8082)
  * @param {number} [config.facialWebPort] - Facial web app port (default: 8083)
  * @param {number} [config.posAppPort] - POS app port (default: 8084)
+ * @param {number} [config.clientAppPort] - Client app port (default: 9005)
  * @returns {string} NGINX configuration with SSL
  */
 function generateSslNginxConfig(config) {
@@ -320,12 +360,14 @@ function generateSslNginxConfig(config) {
     guardianAppHost,
     facialAppHost,
     posAppHost,
+    clientAppHost,
     frontendPort,
     apiPort,
     gateAppPort = 8081,
     guardianAppPort = 8082,
     facialWebPort = 8083,
-    posAppPort = 8084
+    posAppPort = 8084,
+    clientAppPort = 9005
   } = config;
 
   return `# ANTE Frontend Configuration (HTTPS)
@@ -683,6 +725,63 @@ server {
     server_name ${posAppHost};
     return 301 https://$server_name$request_uri;
 }
+` : ''}${clientAppHost ? `
+# ANTE Client App Configuration (HTTPS)
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+    server_name ${clientAppHost};
+
+    # SSL Certificate paths
+    ssl_certificate /etc/letsencrypt/live/${clientAppHost}/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/${clientAppHost}/privkey.pem;
+
+    # SSL Configuration
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+    ssl_prefer_server_ciphers on;
+    ssl_session_cache shared:SSL:10m;
+    ssl_session_timeout 10m;
+
+    # Security headers
+    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+    add_header X-Frame-Options SAMEORIGIN always;
+    add_header X-Content-Type-Options nosniff always;
+    add_header X-XSS-Protection "1; mode=block" always;
+
+    # Increase buffer sizes for large headers
+    client_header_buffer_size 16k;
+    large_client_header_buffers 4 16k;
+
+    # Increase body size for file uploads
+    client_max_body_size 100M;
+
+    location / {
+        proxy_pass http://localhost:${clientAppPort};
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+
+        # Timeout settings
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+}
+
+# HTTP to HTTPS redirect for ${clientAppHost}
+server {
+    listen 80;
+    listen [::]:80;
+    server_name ${clientAppHost};
+    return 301 https://$server_name$request_uri;
+}
 ` : ''}`;
 }
 
@@ -762,6 +861,12 @@ export async function configureNginx(config) {
     if (config.facialAppDomain) {
       console.log(chalk.gray(`   Facial Web: ${config.facialAppDomain} → localhost:${config.facialWebPort || 8083}`));
     }
+    if (config.posAppDomain) {
+      console.log(chalk.gray(`   POS App: ${config.posAppDomain} → localhost:${config.posAppPort || 8084}`));
+    }
+    if (config.clientAppDomain) {
+      console.log(chalk.gray(`   Client App: ${config.clientAppDomain} → localhost:${config.clientAppPort || 9005}`));
+    }
     console.log(chalk.gray(`   API: ${config.apiDomain} → localhost:${config.apiPort || 3001}`));
 
   } catch (error) {