75d73b9dcd
.github/workflows/deploy-stage.yml: - Triggers on successful "Docker Images" workflow or manual dispatch. - SSHes to stage server via STAGE_SSH_KEY, copies deploy/docker-compose.yml and nginx.conf, writes .env with current SHA + POSTGRES_PASSWORD. - `docker compose pull && up -d --remove-orphans`. - Smoke-tests /health with 5 retries (5s each). - Pings Telegram on success/failure with commit SHA + stage URL. .github/workflows/notify.yml: - Separate workflow_run listener for CI/Docker failures, sends Telegram message with link to the failed run. deploy/docker-compose.yml port remap (stage server already uses 80/443/5000/5432): - API: 8080 (was 8080, confirmed free) - Web: 8081 (was 80 — taken by legacy nginx) - Postgres: 127.0.0.1:5434 (was 5433 — and now localhost-only, safer) docs/stage-setup.md — one-time server setup runbook: - Verified specs: Ubuntu 24.04, 4 CPU, 15 GB RAM, 4 GB free disk (tight). - Step 1: `sudo usermod -aG docker nns` so deploy doesn't need sudo. - Step 2: generate STAGE_POSTGRES_PASSWORD secret via `openssl rand`. - Step 3: port-conflict check. - Step 4: first manual deploy via gh workflow run. - Disk-usage monitoring via cron → Telegram when >85%. Secrets now in repo: TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID, STAGE_SSH_HOST, STAGE_SSH_PORT, STAGE_SSH_USER, STAGE_SSH_KEY Still needed from user: STAGE_POSTGRES_PASSWORD (one openssl command). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
57 lines
1.7 KiB
YAML
57 lines
1.7 KiB
YAML
services:
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
container_name: food-market-postgres
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_DB: food_market
|
|
POSTGRES_USER: food_market
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-food_market_dev}
|
|
PGDATA: /var/lib/postgresql/data/pgdata
|
|
# Stage VM already uses 5432 (host postgres) — map ours to 5434 to avoid clash.
|
|
ports:
|
|
- "127.0.0.1:5434:5432"
|
|
volumes:
|
|
- postgres-data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U food_market -d food_market"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
api:
|
|
image: ghcr.io/nurdotnet/food-market-api:${API_TAG:-latest}
|
|
container_name: food-market-api
|
|
restart: unless-stopped
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
ASPNETCORE_ENVIRONMENT: Production
|
|
ConnectionStrings__Default: Host=postgres;Port=5432;Database=food_market;Username=food_market;Password=${POSTGRES_PASSWORD:-food_market_dev}
|
|
# Host port mapping: pick free ports on existing stage server (80/443 taken by
|
|
# legacy nginx, 5000/5002/5005 taken by legacy .NET apps).
|
|
ports:
|
|
- "8080:8080" # api
|
|
|
|
volumes:
|
|
- api-data:/app/App_Data
|
|
- api-logs:/app/logs
|
|
|
|
web:
|
|
image: ghcr.io/nurdotnet/food-market-web:${WEB_TAG:-latest}
|
|
container_name: food-market-web
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- api
|
|
ports:
|
|
- "8081:80" # web SPA, not on 80 (legacy nginx holds it)
|
|
|
|
volumes:
|
|
postgres-data:
|
|
name: food-market-postgres-data
|
|
api-data:
|
|
name: food-market-api-data
|
|
api-logs:
|
|
name: food-market-api-logs
|