Compare commits
No commits in common. "d94152730e2ee0c7047e946eb194fba73674f177" and "30c352c2a43ea78550bea69f58dec139809c571f" have entirely different histories.
d94152730e
...
30c352c2a4
|
|
@ -1,394 +0,0 @@
|
|||
name: Build, Push and Deploy Florale Emotion Website
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [ 'feature/*', 'main', 'master' ]
|
||||
pull_request:
|
||||
branches: [ main, master ]
|
||||
|
||||
env:
|
||||
HARBOR_REGISTRY: registry.julianvollmer.de
|
||||
PROJECT_NAME: florale-emotion
|
||||
|
||||
jobs:
|
||||
feature-branch:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 60
|
||||
if: startsWith(github.ref, 'refs/heads/feature/')
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v3
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v2
|
||||
with:
|
||||
driver-opts: |
|
||||
image=moby/buildkit:v0.12.0
|
||||
buildkitd-flags: --debug
|
||||
|
||||
- name: Extract metadata
|
||||
id: meta
|
||||
run: |
|
||||
BRANCH_CLEAN=$(echo "${{ github.ref_name }}" | sed 's/[^a-zA-Z0-9._-]/-/g')
|
||||
SHORT_SHA="${{ github.sha }}"
|
||||
SHORT_SHA="${SHORT_SHA:0:8}"
|
||||
TAG="${BRANCH_CLEAN}-${SHORT_SHA}"
|
||||
|
||||
echo "tag=${TAG}" >> $GITHUB_OUTPUT
|
||||
echo "frontend_image=${{ env.HARBOR_REGISTRY }}/${{ env.PROJECT_NAME }}/florale-emotion-frontend:${TAG}" >> $GITHUB_OUTPUT
|
||||
echo "backend_image=${{ env.HARBOR_REGISTRY }}/${{ env.PROJECT_NAME }}/florale-emotion-backend:${TAG}" >> $GITHUB_OUTPUT
|
||||
echo "bot_image=${{ env.HARBOR_REGISTRY }}/${{ env.PROJECT_NAME }}/florale-emotion-bot:${TAG}" >> $GITHUB_OUTPUT
|
||||
|
||||
- name: Login to Harbor Registry
|
||||
run: |
|
||||
echo "Harbor12345" | docker login ${{ env.HARBOR_REGISTRY }} -u admin --password-stdin
|
||||
|
||||
- name: Build and Push Frontend (Feature)
|
||||
working-directory: ./website
|
||||
run: |
|
||||
IMAGE_NAME=${{ steps.meta.outputs.frontend_image }}
|
||||
for attempt in 1 2 3; do
|
||||
echo "Build attempt $attempt for feature frontend..."
|
||||
docker build --no-cache --progress=plain -t "${IMAGE_NAME}" . || {
|
||||
echo "Build failed on attempt $attempt"
|
||||
if [ $attempt -eq 3 ]; then
|
||||
echo "All build attempts failed"
|
||||
exit 1
|
||||
fi
|
||||
sleep 10
|
||||
continue
|
||||
}
|
||||
for push_attempt in 1 2 3; do
|
||||
echo "Push attempt $push_attempt for feature frontend..."
|
||||
docker push "${IMAGE_NAME}" && {
|
||||
echo "Feature frontend push successful on attempt $push_attempt"
|
||||
break
|
||||
} || {
|
||||
echo "Push failed on attempt $push_attempt"
|
||||
if [ $push_attempt -eq 3 ]; then
|
||||
echo "All push attempts failed"
|
||||
exit 1
|
||||
fi
|
||||
sleep 30
|
||||
}
|
||||
done
|
||||
break
|
||||
done
|
||||
|
||||
echo "✅ Feature frontend build and push completed successfully!"
|
||||
echo "🏷️ Tag: ${TAG}"
|
||||
echo "📦 Image: ${IMAGE_NAME}"
|
||||
|
||||
- name: Build and Push Backend (Feature)
|
||||
working-directory: ./website/backend
|
||||
env:
|
||||
IMAGE_NAME: ${{ steps.meta.outputs.backend_image }}
|
||||
TAG: ${{ steps.meta.outputs.tag }}
|
||||
run: |
|
||||
echo "Building backend image: ${IMAGE_NAME}"
|
||||
docker build --no-cache --progress=plain -t "${IMAGE_NAME}" .
|
||||
echo "Pushing backend image: ${IMAGE_NAME}"
|
||||
docker push "${IMAGE_NAME}"
|
||||
echo "✅ Feature backend build and push completed successfully!"
|
||||
echo "🏷️ Tag: ${TAG}"
|
||||
echo "📦 Image: ${IMAGE_NAME}"
|
||||
|
||||
- name: Build and Push Social Media Bot (Feature)
|
||||
working-directory: ./website/social-media-bot
|
||||
env:
|
||||
IMAGE_NAME: ${{ steps.meta.outputs.bot_image }}
|
||||
TAG: ${{ steps.meta.outputs.tag }}
|
||||
run: |
|
||||
echo "Building social media bot image: ${IMAGE_NAME}"
|
||||
docker build --no-cache --progress=plain -t "${IMAGE_NAME}" .
|
||||
echo "Pushing social media bot image: ${IMAGE_NAME}"
|
||||
docker push "${IMAGE_NAME}"
|
||||
echo "✅ Feature social media bot build and push completed successfully!"
|
||||
echo "🏷️ Tag: ${TAG}"
|
||||
echo "📦 Image: ${IMAGE_NAME}"
|
||||
|
||||
- name: Setup kubectl
|
||||
uses: azure/setup-kubectl@v3
|
||||
with:
|
||||
version: 'latest'
|
||||
|
||||
- name: Configure kubectl
|
||||
run: |
|
||||
mkdir -p ~/.kube
|
||||
|
||||
echo "🔍 Debugging KUBECTLSECRET..."
|
||||
echo "Secret length: ${#KUBECTLSECRET}"
|
||||
|
||||
# Try to decode as base64 first, if that fails, use as plain text
|
||||
if echo "${{ secrets.KUBECTLSECRET }}" | base64 -d > ~/.kube/config 2>/dev/null; then
|
||||
echo "✅ KUBECTLSECRET decoded as base64"
|
||||
else
|
||||
echo "⚠️ KUBECTLSECRET is not base64, using as plain text"
|
||||
echo "${{ secrets.KUBECTLSECRET }}" > ~/.kube/config
|
||||
fi
|
||||
|
||||
echo "📁 kubeconfig created at ~/.kube/config"
|
||||
chmod 600 ~/.kube/config
|
||||
|
||||
- name: Test kubectl connection
|
||||
run: |
|
||||
kubectl version --client
|
||||
kubectl get nodes
|
||||
|
||||
- name: Deploy Feature Branch
|
||||
env:
|
||||
FRONTEND_IMAGE: ${{ steps.meta.outputs.frontend_image }}
|
||||
BACKEND_IMAGE: ${{ steps.meta.outputs.backend_image }}
|
||||
BOT_IMAGE: ${{ steps.meta.outputs.bot_image }}
|
||||
BRANCH_NAME: ${{ github.ref_name }}
|
||||
run: |
|
||||
echo "🚀 Deploying feature branch: $BRANCH_NAME"
|
||||
echo "Frontend image: $FRONTEND_IMAGE"
|
||||
echo "Backend image: $BACKEND_IMAGE"
|
||||
echo "Bot image: $BOT_IMAGE"
|
||||
|
||||
# Ensure namespace exists
|
||||
kubectl create namespace florale-emotion --dry-run=client -o yaml | kubectl apply -f -
|
||||
|
||||
# Ensure Harbor registry secret exists
|
||||
kubectl create secret docker-registry harbor-registry-secret \
|
||||
--docker-server=${{ env.HARBOR_REGISTRY }} \
|
||||
--docker-username=admin \
|
||||
--docker-password=Harbor12345 \
|
||||
--namespace=florale-emotion \
|
||||
--dry-run=client -o yaml | kubectl apply -f -
|
||||
|
||||
# Apply frontend deployment und ersetze das Image-Tag dynamisch (kein latest in Features)
|
||||
sed "s|__IMAGE_TAG__|${{ steps.meta.outputs.tag }}|g" website/k8s/frontend.yaml | kubectl apply -n florale-emotion -f -
|
||||
|
||||
# Apply backend deployment mit Tag-Ersetzung
|
||||
sed "s|__IMAGE_TAG__|${{ steps.meta.outputs.tag }}|g" website/k8s/backend.yaml | kubectl apply -n florale-emotion -f -
|
||||
|
||||
# Apply social media bot deployment mit Tag-Ersetzung
|
||||
sed "s|__IMAGE_TAG__|${{ steps.meta.outputs.tag }}|g" website/k8s/bot.yaml | kubectl apply -n florale-emotion -f -
|
||||
|
||||
# Apply feature branch ingress (using dev subdomain)
|
||||
kubectl apply -f website/k8s/ingress-dev.yaml -n florale-emotion
|
||||
|
||||
# Wait for rollout
|
||||
echo "⏳ Waiting for rollout to finish..."
|
||||
kubectl rollout status deployment/florale-emotion-frontend -n florale-emotion --timeout=300s
|
||||
|
||||
echo "✅ Feature branch deployment complete!"
|
||||
echo "🌐 Dev URL: https://dev.florale-emotion.de"
|
||||
echo "📦 Harbor Registry: https://registry.julianvollmer.de"
|
||||
|
||||
production-branch:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 60
|
||||
if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master'
|
||||
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v3
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v2
|
||||
with:
|
||||
driver-opts: |
|
||||
image=moby/buildkit:v0.12.0
|
||||
buildkitd-flags: --debug
|
||||
|
||||
- name: Extract metadata
|
||||
id: meta
|
||||
run: |
|
||||
BRANCH_CLEAN=$(echo "${{ github.ref_name }}" | sed 's/[^a-zA-Z0-9._-]/-/g')
|
||||
SHORT_SHA="${{ github.sha }}"
|
||||
SHORT_SHA="${SHORT_SHA:0:8}"
|
||||
TAG="${BRANCH_CLEAN}-${SHORT_SHA}"
|
||||
|
||||
# Für Master-Branches zusätzlich latest Tag erstellen
|
||||
echo "Master branch detected, will create latest tags"
|
||||
|
||||
echo "tag=${TAG}" >> $GITHUB_OUTPUT
|
||||
echo "frontend_image=${{ env.HARBOR_REGISTRY }}/${{ env.PROJECT_NAME }}/florale-emotion-frontend:${TAG}" >> $GITHUB_OUTPUT
|
||||
echo "backend_image=${{ env.HARBOR_REGISTRY }}/${{ env.PROJECT_NAME }}/florale-emotion-backend:${TAG}" >> $GITHUB_OUTPUT
|
||||
echo "bot_image=${{ env.HARBOR_REGISTRY }}/${{ env.PROJECT_NAME }}/florale-emotion-bot:${TAG}" >> $GITHUB_OUTPUT
|
||||
|
||||
- name: Login to Harbor Registry
|
||||
run: |
|
||||
echo "Harbor12345" | docker login ${{ env.HARBOR_REGISTRY }} -u admin --password-stdin
|
||||
|
||||
- name: Build and Push Frontend (Production + Latest)
|
||||
working-directory: ./website
|
||||
run: |
|
||||
IMAGE_NAME=${{ steps.meta.outputs.frontend_image }}
|
||||
LATEST_IMAGE="${{ env.HARBOR_REGISTRY }}/${{ env.PROJECT_NAME }}/florale-emotion-frontend:latest"
|
||||
|
||||
for attempt in 1 2 3; do
|
||||
echo "Build attempt $attempt for production frontend..."
|
||||
docker build --no-cache --progress=plain -t "${IMAGE_NAME}" . || {
|
||||
echo "Build failed on attempt $attempt"
|
||||
if [ $attempt -eq 3 ]; then
|
||||
echo "All build attempts failed"
|
||||
exit 1
|
||||
fi
|
||||
sleep 10
|
||||
continue
|
||||
}
|
||||
|
||||
# Push versioned image
|
||||
for push_attempt in 1 2 3; do
|
||||
echo "Push attempt $push_attempt for production frontend..."
|
||||
docker push "${IMAGE_NAME}" && {
|
||||
echo "Production frontend push successful on attempt $push_attempt"
|
||||
break
|
||||
} || {
|
||||
echo "Push failed on attempt $push_attempt"
|
||||
if [ $push_attempt -eq 3 ]; then
|
||||
echo "All push attempts failed"
|
||||
exit 1
|
||||
fi
|
||||
sleep 30
|
||||
}
|
||||
done
|
||||
|
||||
# Create and push latest tag
|
||||
echo "Creating latest tag for production..."
|
||||
docker tag "${IMAGE_NAME}" "${LATEST_IMAGE}"
|
||||
for push_attempt in 1 2 3; do
|
||||
echo "Push attempt $push_attempt for latest tag..."
|
||||
docker push "${LATEST_IMAGE}" && {
|
||||
echo "Latest tag push successful on attempt $push_attempt"
|
||||
break
|
||||
} || {
|
||||
echo "Latest push failed on attempt $push_attempt"
|
||||
if [ $push_attempt -eq 3 ]; then
|
||||
echo "Latest push attempts failed"
|
||||
exit 1
|
||||
fi
|
||||
sleep 30
|
||||
}
|
||||
done
|
||||
break
|
||||
done
|
||||
|
||||
echo "✅ Production frontend build and push completed successfully!"
|
||||
echo "🏷️ Tag: ${TAG}"
|
||||
echo "📦 Image: ${IMAGE_NAME}"
|
||||
echo "📦 Latest: ${LATEST_IMAGE}"
|
||||
|
||||
- name: Build and Push Backend (Production + Latest)
|
||||
working-directory: ./website/backend
|
||||
env:
|
||||
IMAGE_NAME: ${{ steps.meta.outputs.backend_image }}
|
||||
TAG: ${{ steps.meta.outputs.tag }}
|
||||
run: |
|
||||
echo "Building backend image: ${IMAGE_NAME}"
|
||||
docker build --no-cache --progress=plain -t "${IMAGE_NAME}" .
|
||||
echo "Pushing backend image: ${IMAGE_NAME}"
|
||||
docker push "${IMAGE_NAME}"
|
||||
LATEST_IMAGE="${IMAGE_NAME%:*}:latest"
|
||||
echo "Tagging backend as latest: ${LATEST_IMAGE}"
|
||||
docker tag "${IMAGE_NAME}" "${LATEST_IMAGE}"
|
||||
docker push "${LATEST_IMAGE}"
|
||||
echo "✅ Production backend build and push completed successfully!"
|
||||
echo "🏷️ Tag: ${TAG}"
|
||||
echo "📦 Image: ${IMAGE_NAME}"
|
||||
echo "📦 Latest: ${LATEST_IMAGE}"
|
||||
|
||||
- name: Build and Push Social Media Bot (Production + Latest)
|
||||
working-directory: ./website/social-media-bot
|
||||
env:
|
||||
IMAGE_NAME: ${{ steps.meta.outputs.bot_image }}
|
||||
TAG: ${{ steps.meta.outputs.tag }}
|
||||
run: |
|
||||
echo "Building social media bot image: ${IMAGE_NAME}"
|
||||
docker build --no-cache --progress=plain -t "${IMAGE_NAME}" .
|
||||
echo "Pushing social media bot image: ${IMAGE_NAME}"
|
||||
docker push "${IMAGE_NAME}"
|
||||
LATEST_IMAGE="${IMAGE_NAME%:*}:latest"
|
||||
echo "Tagging social media bot as latest: ${LATEST_IMAGE}"
|
||||
docker tag "${IMAGE_NAME}" "${LATEST_IMAGE}"
|
||||
docker push "${LATEST_IMAGE}"
|
||||
echo "✅ Production social media bot build and push completed successfully!"
|
||||
echo "🏷️ Tag: ${TAG}"
|
||||
echo "📦 Image: ${IMAGE_NAME}"
|
||||
echo "📦 Latest: ${LATEST_IMAGE}"
|
||||
|
||||
- name: Setup kubectl
|
||||
uses: azure/setup-kubectl@v3
|
||||
with:
|
||||
version: 'latest'
|
||||
|
||||
- name: Configure kubectl
|
||||
run: |
|
||||
mkdir -p ~/.kube
|
||||
|
||||
echo "🔍 Debugging KUBECTLSECRET..."
|
||||
echo "Secret length: ${#KUBECTLSECRET}"
|
||||
|
||||
# Try to decode as base64 first, if that fails, use as plain text
|
||||
if echo "${{ secrets.KUBECTLSECRET }}" | base64 -d > ~/.kube/config 2>/dev/null; then
|
||||
echo "✅ KUBECTLSECRET decoded as base64"
|
||||
else
|
||||
echo "⚠️ KUBECTLSECRET is not base64, using as plain text"
|
||||
echo "${{ secrets.KUBECTLSECRET }}" > ~/.kube/config
|
||||
fi
|
||||
|
||||
echo "📁 kubeconfig created at ~/.kube/config"
|
||||
chmod 600 ~/.kube/config
|
||||
|
||||
- name: Test kubectl connection
|
||||
run: |
|
||||
kubectl version --client
|
||||
kubectl get nodes
|
||||
|
||||
- name: Deploy to Production
|
||||
env:
|
||||
FRONTEND_IMAGE: ${{ steps.meta.outputs.frontend_image }}
|
||||
BACKEND_IMAGE: ${{ steps.meta.outputs.backend_image }}
|
||||
BOT_IMAGE: ${{ steps.meta.outputs.bot_image }}
|
||||
run: |
|
||||
echo "🚀 Deploying to production..."
|
||||
echo "Frontend image: $FRONTEND_IMAGE"
|
||||
echo "Backend image: $BACKEND_IMAGE"
|
||||
echo "Bot image: $BOT_IMAGE"
|
||||
|
||||
# Ensure namespace exists
|
||||
kubectl create namespace florale-emotion --dry-run=client -o yaml | kubectl apply -f -
|
||||
|
||||
# Ensure Harbor registry secret exists
|
||||
kubectl create secret docker-registry harbor-registry-secret \
|
||||
--docker-server=${{ env.HARBOR_REGISTRY }} \
|
||||
--docker-username=admin \
|
||||
--docker-password=Harbor12345 \
|
||||
--namespace=florale-emotion \
|
||||
--dry-run=client -o yaml | kubectl apply -f -
|
||||
|
||||
# Apply frontend deployment und ersetze das Image-Tag mit latest
|
||||
sed "s|__IMAGE_TAG__|latest|g" website/k8s/frontend.yaml | kubectl apply -n florale-emotion -f -
|
||||
|
||||
# Apply backend deployment mit latest Tag
|
||||
sed "s|__IMAGE_TAG__|latest|g" website/k8s/backend.yaml | kubectl apply -n florale-emotion -f -
|
||||
|
||||
# Apply social media bot deployment mit latest Tag
|
||||
sed "s|__IMAGE_TAG__|latest|g" website/k8s/bot.yaml | kubectl apply -n florale-emotion -f -
|
||||
|
||||
# Apply production ingress
|
||||
kubectl apply -f website/k8s/ingress.yaml -n florale-emotion
|
||||
|
||||
# Wait for rollout
|
||||
echo "⏳ Waiting for rollout to finish..."
|
||||
kubectl rollout status deployment/florale-emotion-frontend -n florale-emotion --timeout=300s
|
||||
|
||||
echo "✅ Production deployment complete!"
|
||||
echo "🌐 Website: https://florale-emotion.de"
|
||||
echo "🌐 WWW: https://www.florale-emotion.de"
|
||||
echo "🔧 Backend API: https://api.florale-emotion.de"
|
||||
|
||||
# Hinweise:
|
||||
# - Angepasst für florale-emotion Projekt
|
||||
# - Namespace: florale-emotion
|
||||
# - Dev-Deployment unter dev.florale-emotion.de
|
||||
# - Production unter florale-emotion.de
|
||||
# - Unterstützt Frontend, Backend und Social Media Bot
|
||||
# - Robuste Retry-Mechanismen für Build und Push
|
||||
# - Eindeutige Tags für bessere Nachverfolgung
|
||||
# - Timeout-Schutz für alle Deployments
|
||||
149
DEPLOYMENT.md
149
DEPLOYMENT.md
|
|
@ -1,149 +0,0 @@
|
|||
# Florale Emotion - Kubernetes Deployment
|
||||
|
||||
Dieses Dokument beschreibt das Deployment-Setup für das Florale Emotion Projekt.
|
||||
|
||||
## Übersicht
|
||||
|
||||
Das Projekt besteht aus drei Hauptkomponenten:
|
||||
- **Frontend**: Angular-basierte Website
|
||||
- **Backend**: Node.js API Server
|
||||
- **Social Media Bot**: Automatisierte Social Media Posting
|
||||
|
||||
## Deployment-Umgebungen
|
||||
|
||||
### Development
|
||||
- **URL**: https://dev.florale-emotion.de
|
||||
- **API**: https://api-dev.florale-emotion.de
|
||||
- **Trigger**: Feature-Branches (`feature/*`)
|
||||
- **Namespace**: `florale-emotion`
|
||||
|
||||
### Production
|
||||
- **URL**: https://florale-emotion.de, https://www.florale-emotion.de
|
||||
- **API**: https://api.florale-emotion.de
|
||||
- **Trigger**: Main/Master Branch
|
||||
- **Namespace**: `florale-emotion`
|
||||
|
||||
## Pipeline-Struktur
|
||||
|
||||
### Gitea Workflow
|
||||
Die Pipeline wird durch `.gitea/workflows/deploy.yml` definiert und umfasst:
|
||||
|
||||
1. **Feature Branch Deployment**
|
||||
- Baut und pushed Docker Images mit Branch-spezifischen Tags
|
||||
- Deployed auf dev.florale-emotion.de
|
||||
- Verwendet dynamische Image-Tags (kein `latest`)
|
||||
|
||||
2. **Production Deployment**
|
||||
- Baut und pushed sowohl versionierte als auch `latest` Tags
|
||||
- Deployed auf florale-emotion.de
|
||||
- Vollständige SSL-Konfiguration
|
||||
|
||||
### Docker Images
|
||||
Alle Images werden in der Harbor Registry gespeichert:
|
||||
- `registry.julianvollmer.de/florale-emotion/florale-emotion-frontend`
|
||||
- `registry.julianvollmer.de/florale-emotion/florale-emotion-backend`
|
||||
- `registry.julianvollmer.de/florale-emotion/florale-emotion-bot`
|
||||
|
||||
## Kubernetes-Manifeste
|
||||
|
||||
### Frontend (`website/k8s/frontend.yaml`)
|
||||
- 2 Replicas für High Availability
|
||||
- Nginx-basiertes Angular Deployment
|
||||
- Health Checks auf Port 80
|
||||
- Resource Limits: 256Mi RAM, 200m CPU
|
||||
|
||||
### Backend (`website/k8s/backend.yaml`)
|
||||
- 2 Replicas für Load Balancing
|
||||
- Node.js API auf Port 3000
|
||||
- Health Checks auf `/health` Endpoint
|
||||
- Resource Limits: 512Mi RAM, 300m CPU
|
||||
|
||||
### Social Media Bot (`website/k8s/bot.yaml`)
|
||||
- 1 Replica (Singleton Service)
|
||||
- Scheduled/Cron-basierte Ausführung
|
||||
- Resource Limits: 256Mi RAM, 100m CPU
|
||||
|
||||
### Ingress Konfiguration
|
||||
- **Production** (`ingress.yaml`): florale-emotion.de, www.florale-emotion.de, api.florale-emotion.de
|
||||
- **Development** (`ingress-dev.yaml`): dev.florale-emotion.de, api-dev.florale-emotion.de
|
||||
- Automatische SSL-Zertifikate via Let's Encrypt
|
||||
- HTTPS-Weiterleitung aktiviert
|
||||
|
||||
## Deployment-Prozess
|
||||
|
||||
### Automatisches Deployment
|
||||
1. Code-Push auf Feature-Branch oder Main
|
||||
2. Gitea Pipeline startet automatisch
|
||||
3. Docker Images werden gebaut und gepushed
|
||||
4. Kubernetes Deployments werden aktualisiert
|
||||
5. Health Checks bestätigen erfolgreiche Bereitstellung
|
||||
|
||||
### Manuelle Schritte (falls nötig)
|
||||
```bash
|
||||
# Namespace erstellen
|
||||
kubectl create namespace florale-emotion
|
||||
|
||||
# Harbor Registry Secret erstellen
|
||||
kubectl create secret docker-registry harbor-registry-secret \
|
||||
--docker-server=registry.julianvollmer.de \
|
||||
--docker-username=admin \
|
||||
--docker-password=Harbor12345 \
|
||||
--namespace=florale-emotion
|
||||
|
||||
# Deployments anwenden
|
||||
kubectl apply -f website/k8s/ -n florale-emotion
|
||||
```
|
||||
|
||||
## Monitoring & Troubleshooting
|
||||
|
||||
### Logs anzeigen
|
||||
```bash
|
||||
# Frontend Logs
|
||||
kubectl logs -f deployment/florale-emotion-frontend -n florale-emotion
|
||||
|
||||
# Backend Logs
|
||||
kubectl logs -f deployment/florale-emotion-backend -n florale-emotion
|
||||
|
||||
# Bot Logs
|
||||
kubectl logs -f deployment/florale-emotion-bot -n florale-emotion
|
||||
```
|
||||
|
||||
### Status prüfen
|
||||
```bash
|
||||
# Deployment Status
|
||||
kubectl get deployments -n florale-emotion
|
||||
|
||||
# Pod Status
|
||||
kubectl get pods -n florale-emotion
|
||||
|
||||
# Service Status
|
||||
kubectl get services -n florale-emotion
|
||||
|
||||
# Ingress Status
|
||||
kubectl get ingress -n florale-emotion
|
||||
```
|
||||
|
||||
## Sicherheit
|
||||
|
||||
- Alle Images werden aus einer privaten Harbor Registry bezogen
|
||||
- Non-root Container für Backend und Bot
|
||||
- Security Headers in Nginx-Konfiguration
|
||||
- HTTPS-Erzwingung für alle Domains
|
||||
- Resource Limits für alle Container
|
||||
|
||||
## Skalierung
|
||||
|
||||
Die Anwendung kann horizontal skaliert werden:
|
||||
```bash
|
||||
# Frontend skalieren
|
||||
kubectl scale deployment florale-emotion-frontend --replicas=3 -n florale-emotion
|
||||
|
||||
# Backend skalieren
|
||||
kubectl scale deployment florale-emotion-backend --replicas=3 -n florale-emotion
|
||||
```
|
||||
|
||||
## Backup & Recovery
|
||||
|
||||
- Kubernetes-Manifeste sind in Git versioniert
|
||||
- Docker Images sind in Harbor Registry gespeichert
|
||||
- Datenbank-Backups (falls vorhanden) sollten separat konfiguriert werden
|
||||
|
|
@ -279,7 +279,11 @@ pm2 save
|
|||
|
||||
Dieses Projekt ist für den internen Gebrauch von Florale Emotion bestimmt.
|
||||
|
||||
## 🙏 DanksagungenEntwickelt mit ❤️ für Florale Emotion - Blumen für besondere Momente.---**Nächste Schritte:**
|
||||
## 🙏 Danksagungen
|
||||
|
||||
Entwickelt mit ❤️ für Florale Emotion - Blumen für besondere Momente.
|
||||
|
||||
---**Nächste Schritte:**
|
||||
1. [ ] Domain registrieren
|
||||
2. [ ] Hosting einrichten
|
||||
3. [ ] E-Mail-Accounts erstellen
|
||||
|
|
|
|||
|
|
@ -1,19 +0,0 @@
|
|||
node_modules
|
||||
npm-debug.log
|
||||
.git
|
||||
.gitignore
|
||||
README.md
|
||||
.env
|
||||
.nyc_output
|
||||
coverage
|
||||
.nyc_output
|
||||
.vscode
|
||||
.DS_Store
|
||||
*.md
|
||||
.angular
|
||||
dist
|
||||
e2e
|
||||
src/**/*.spec.ts
|
||||
karma.conf.js
|
||||
protractor.conf.js
|
||||
.editorconfig
|
||||
|
|
@ -1,32 +0,0 @@
|
|||
# Multi-stage build for Angular Frontend
|
||||
FROM node:18-alpine AS builder
|
||||
|
||||
# Set working directory
|
||||
WORKDIR /app
|
||||
|
||||
# Copy package files
|
||||
COPY package*.json ./
|
||||
|
||||
# Install dependencies
|
||||
RUN npm ci --only=production
|
||||
|
||||
# Copy source code
|
||||
COPY . .
|
||||
|
||||
# Build the Angular application
|
||||
RUN npm run build --prod
|
||||
|
||||
# Production stage
|
||||
FROM nginx:alpine
|
||||
|
||||
# Copy built application from builder stage
|
||||
COPY --from=builder /app/dist/florale-emotion /usr/share/nginx/html
|
||||
|
||||
# Copy custom nginx configuration
|
||||
COPY nginx.conf /etc/nginx/conf.d/default.conf
|
||||
|
||||
# Expose port 80
|
||||
EXPOSE 80
|
||||
|
||||
# Start nginx
|
||||
CMD ["nginx", "-g", "daemon off;"]
|
||||
|
|
@ -1,12 +0,0 @@
|
|||
node_modules
|
||||
npm-debug.log
|
||||
.git
|
||||
.gitignore
|
||||
README.md
|
||||
.env
|
||||
.nyc_output
|
||||
coverage
|
||||
.nyc_output
|
||||
.vscode
|
||||
.DS_Store
|
||||
*.md
|
||||
|
|
@ -1,31 +0,0 @@
|
|||
FROM node:18-alpine
|
||||
|
||||
# Set working directory
|
||||
WORKDIR /app
|
||||
|
||||
# Copy package files
|
||||
COPY package*.json ./
|
||||
|
||||
# Install dependencies
|
||||
RUN npm ci --only=production
|
||||
|
||||
# Copy application code
|
||||
COPY . .
|
||||
|
||||
# Create non-root user
|
||||
RUN addgroup -g 1001 -S nodejs
|
||||
RUN adduser -S nodejs -u 1001
|
||||
|
||||
# Change ownership of the app directory
|
||||
RUN chown -R nodejs:nodejs /app
|
||||
USER nodejs
|
||||
|
||||
# Expose port
|
||||
EXPOSE 3000
|
||||
|
||||
# Health check
|
||||
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
||||
CMD node healthcheck.js
|
||||
|
||||
# Start the application
|
||||
CMD ["node", "server.js"]
|
||||
|
|
@ -1,28 +0,0 @@
|
|||
const http = require('http');
|
||||
|
||||
const options = {
|
||||
hostname: 'localhost',
|
||||
port: process.env.PORT || 3000,
|
||||
path: '/health',
|
||||
method: 'GET',
|
||||
timeout: 2000
|
||||
};
|
||||
|
||||
const request = http.request(options, (res) => {
|
||||
if (res.statusCode === 200) {
|
||||
process.exit(0);
|
||||
} else {
|
||||
process.exit(1);
|
||||
}
|
||||
});
|
||||
|
||||
request.on('error', () => {
|
||||
process.exit(1);
|
||||
});
|
||||
|
||||
request.on('timeout', () => {
|
||||
request.destroy();
|
||||
process.exit(1);
|
||||
});
|
||||
|
||||
request.end();
|
||||
|
|
@ -1,60 +0,0 @@
|
|||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: florale-emotion-backend
|
||||
labels:
|
||||
app: florale-emotion-backend
|
||||
spec:
|
||||
replicas: 2
|
||||
selector:
|
||||
matchLabels:
|
||||
app: florale-emotion-backend
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: florale-emotion-backend
|
||||
spec:
|
||||
imagePullSecrets:
|
||||
- name: harbor-registry-secret
|
||||
containers:
|
||||
- name: florale-emotion-backend
|
||||
image: registry.julianvollmer.de/florale-emotion/florale-emotion-backend:__IMAGE_TAG__
|
||||
ports:
|
||||
- containerPort: 3000
|
||||
env:
|
||||
- name: NODE_ENV
|
||||
value: "production"
|
||||
- name: PORT
|
||||
value: "3000"
|
||||
resources:
|
||||
requests:
|
||||
memory: "256Mi"
|
||||
cpu: "100m"
|
||||
limits:
|
||||
memory: "512Mi"
|
||||
cpu: "300m"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 3000
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 3000
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 5
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: florale-emotion-backend-service
|
||||
spec:
|
||||
selector:
|
||||
app: florale-emotion-backend
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: 3000
|
||||
targetPort: 3000
|
||||
type: ClusterIP
|
||||
|
|
@ -1,46 +0,0 @@
|
|||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: florale-emotion-bot
|
||||
labels:
|
||||
app: florale-emotion-bot
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: florale-emotion-bot
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: florale-emotion-bot
|
||||
spec:
|
||||
imagePullSecrets:
|
||||
- name: harbor-registry-secret
|
||||
containers:
|
||||
- name: florale-emotion-bot
|
||||
image: registry.julianvollmer.de/florale-emotion/florale-emotion-bot:__IMAGE_TAG__
|
||||
env:
|
||||
- name: NODE_ENV
|
||||
value: "production"
|
||||
resources:
|
||||
requests:
|
||||
memory: "128Mi"
|
||||
cpu: "50m"
|
||||
limits:
|
||||
memory: "256Mi"
|
||||
cpu: "100m"
|
||||
# Social Media Bot läuft als Cronjob/Scheduled Task
|
||||
# Keine Health Checks nötig da es kein HTTP Service ist
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: florale-emotion-bot-service
|
||||
spec:
|
||||
selector:
|
||||
app: florale-emotion-bot
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: 8080
|
||||
targetPort: 8080
|
||||
type: ClusterIP
|
||||
|
|
@ -1,55 +0,0 @@
|
|||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: florale-emotion-frontend
|
||||
labels:
|
||||
app: florale-emotion-frontend
|
||||
spec:
|
||||
replicas: 2
|
||||
selector:
|
||||
matchLabels:
|
||||
app: florale-emotion-frontend
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: florale-emotion-frontend
|
||||
spec:
|
||||
imagePullSecrets:
|
||||
- name: harbor-registry-secret
|
||||
containers:
|
||||
- name: florale-emotion-frontend
|
||||
image: registry.julianvollmer.de/florale-emotion/florale-emotion-frontend:__IMAGE_TAG__
|
||||
ports:
|
||||
- containerPort: 80
|
||||
resources:
|
||||
requests:
|
||||
memory: "128Mi"
|
||||
cpu: "100m"
|
||||
limits:
|
||||
memory: "256Mi"
|
||||
cpu: "200m"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 80
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 80
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 5
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: florale-emotion-frontend-service
|
||||
spec:
|
||||
selector:
|
||||
app: florale-emotion-frontend
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: 80
|
||||
targetPort: 80
|
||||
type: ClusterIP
|
||||
|
|
@ -1,37 +0,0 @@
|
|||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: florale-emotion-dev-ingress
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: "nginx"
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/redirect-to-https: "true"
|
||||
spec:
|
||||
tls:
|
||||
- hosts:
|
||||
- dev.florale-emotion.de
|
||||
- api-dev.florale-emotion.de
|
||||
secretName: florale-emotion-dev-tls
|
||||
rules:
|
||||
- host: dev.florale-emotion.de
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: florale-emotion-frontend-service
|
||||
port:
|
||||
number: 80
|
||||
- host: api-dev.florale-emotion.de
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: florale-emotion-backend-service
|
||||
port:
|
||||
number: 3000
|
||||
|
|
@ -1,48 +0,0 @@
|
|||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: florale-emotion-ingress
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: "nginx"
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/redirect-to-https: "true"
|
||||
spec:
|
||||
tls:
|
||||
- hosts:
|
||||
- florale-emotion.de
|
||||
- www.florale-emotion.de
|
||||
- api.florale-emotion.de
|
||||
secretName: florale-emotion-tls
|
||||
rules:
|
||||
- host: florale-emotion.de
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: florale-emotion-frontend-service
|
||||
port:
|
||||
number: 80
|
||||
- host: www.florale-emotion.de
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: florale-emotion-frontend-service
|
||||
port:
|
||||
number: 80
|
||||
- host: api.florale-emotion.de
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: florale-emotion-backend-service
|
||||
port:
|
||||
number: 3000
|
||||
|
|
@ -1,48 +0,0 @@
|
|||
server {
|
||||
listen 80;
|
||||
server_name localhost;
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
# Gzip compression
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_min_length 1024;
|
||||
gzip_proxied any;
|
||||
gzip_comp_level 6;
|
||||
gzip_types
|
||||
text/plain
|
||||
text/css
|
||||
text/xml
|
||||
text/javascript
|
||||
application/json
|
||||
application/javascript
|
||||
application/xml+rss
|
||||
application/atom+xml
|
||||
image/svg+xml;
|
||||
|
||||
# Security headers
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
add_header Referrer-Policy "no-referrer-when-downgrade" always;
|
||||
add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
|
||||
|
||||
# Handle Angular routing
|
||||
location / {
|
||||
try_files $uri $uri/ /index.html;
|
||||
}
|
||||
|
||||
# Cache static assets
|
||||
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
|
||||
expires 1y;
|
||||
add_header Cache-Control "public, immutable";
|
||||
}
|
||||
|
||||
# Health check endpoint
|
||||
location /health {
|
||||
access_log off;
|
||||
return 200 "healthy\n";
|
||||
add_header Content-Type text/plain;
|
||||
}
|
||||
}
|
||||
|
|
@ -1,12 +0,0 @@
|
|||
node_modules
|
||||
npm-debug.log
|
||||
.git
|
||||
.gitignore
|
||||
README.md
|
||||
.env
|
||||
.nyc_output
|
||||
coverage
|
||||
.nyc_output
|
||||
.vscode
|
||||
.DS_Store
|
||||
*.md
|
||||
|
|
@ -1,27 +0,0 @@
|
|||
FROM node:18-alpine
|
||||
|
||||
# Set working directory
|
||||
WORKDIR /app
|
||||
|
||||
# Copy package files
|
||||
COPY package*.json ./
|
||||
|
||||
# Install dependencies
|
||||
RUN npm ci --only=production
|
||||
|
||||
# Copy application code
|
||||
COPY . .
|
||||
|
||||
# Create non-root user
|
||||
RUN addgroup -g 1001 -S nodejs
|
||||
RUN adduser -S nodejs -u 1001
|
||||
|
||||
# Change ownership of the app directory
|
||||
RUN chown -R nodejs:nodejs /app
|
||||
USER nodejs
|
||||
|
||||
# Expose port (for health checks)
|
||||
EXPOSE 8080
|
||||
|
||||
# Start the application
|
||||
CMD ["node", "bot.js"]
|
||||
Loading…
Reference in New Issue