asepharyanaandClaude Opus 4.8
ea168b4b20
- infra/compose/nats.yml: NATS server with JetStream, persistence volume, healthcheck - infra/compose/dapr.yml: Dapr placement service for sidecar coordination - infra/dapr/: Dapr global config, pubsub component (NATS), statestore (Redis) - infra/compose/scraper.yml: add Dapr sidecar container + depends_on nats/dapr - docs/add-dapr-service.md: guide for integrating Dapr into new services - docs/add-new-app.md: add Dapr sidecar step - ARCHITECTURE.md: add NATS/Dapr to infra table + service mesh diagram - infra/README.md: update layout and deployment order - deploy-docker.yml: add nats.yml + dapr.yml to ALL_COMPOSE_FILES Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
99 lines
2.8 KiB
Markdown
99 lines
2.8 KiB
Markdown
# Infrastructure
|
|
|
|
Docker Compose and Traefik configuration for `asepharyana-hub`.
|
|
|
|
## Layout
|
|
|
|
```text
|
|
infra/
|
|
├── compose/ # One compose file per stack/service
|
|
│ ├── traefik.yml # Public reverse proxy
|
|
│ ├── shared.yml # Shared Redis
|
|
│ ├── nats.yml # NATS message broker + JetStream
|
|
│ ├── dapr.yml # Dapr placement service
|
|
│ └── scraper.yml # Scraper API (app + Dapr sidecar)
|
|
├── docker/ # Dockerfiles and image runtime helpers
|
|
├── dapr/ # Dapr component configs
|
|
│ ├── config.yaml # Global Dapr configuration
|
|
│ └── components/ # Pub/sub (NATS), state store (Redis)
|
|
├── traefik/ # Static and dynamic Traefik configuration
|
|
│ ├── dynamic/ # Routers, services, middlewares, TLS certs
|
|
│ └── TRAEFIK_ENV_CONFIG.md
|
|
└── config/ # Service bootstrap configuration
|
|
```
|
|
|
|
## First-time setup
|
|
|
|
Create the shared Docker network before starting any service:
|
|
|
|
```bash
|
|
docker network create app-shared-net
|
|
```
|
|
|
|
Create `.env` from `.env.example` and fill production values. Do not commit `.env`.
|
|
|
|
## Deployment order
|
|
|
|
The GitHub deploy workflow combines the active compose files automatically. For manual deployment, use this order:
|
|
|
|
```bash
|
|
# 1. Shared services
|
|
docker compose -f infra/compose/shared.yml up -d
|
|
|
|
# 2. Message bus + Dapr placement
|
|
docker compose -f infra/compose/nats.yml up -d
|
|
docker compose -f infra/compose/dapr.yml up -d
|
|
|
|
# 3. Reverse proxy
|
|
docker compose -f infra/compose/traefik.yml up -d
|
|
|
|
# 4. Application services (with Dapr sidecars)
|
|
docker compose -f infra/compose/scraper.yml up -d
|
|
```
|
|
|
|
## Environment variables
|
|
|
|
Common variables used by infra compose files:
|
|
|
|
```env
|
|
DATABASE_URL=
|
|
GITHUB_TOKEN=
|
|
SHARED_REDIS_EXPOSE=127.0.0.1:6379:6379
|
|
```
|
|
|
|
Traefik certificate path variables are optional because `infra/compose/traefik.yml` provides production-compatible defaults. See `infra/traefik/TRAEFIK_ENV_CONFIG.md` for the full list.
|
|
|
|
## Traefik
|
|
|
|
Traefik reads dynamic config from `infra/traefik/dynamic/`:
|
|
|
|
- `apps.yaml` — routers and upstream services
|
|
- `middlewares.yaml` — shared middleware chains
|
|
- `ssl.yaml` — TLS certificates for `asepharyana.my.id` and `asepharyana.web.id`
|
|
|
|
## Validation
|
|
|
|
Run syntax checks after editing infra YAML:
|
|
|
|
```bash
|
|
python - <<'PY'
|
|
import pathlib, yaml
|
|
for path in pathlib.Path('infra').rglob('*.yml'):
|
|
with path.open() as fh:
|
|
yaml.safe_load(fh)
|
|
print(f'OK {path}')
|
|
for path in pathlib.Path('infra').rglob('*.yaml'):
|
|
with path.open() as fh:
|
|
yaml.safe_load(fh)
|
|
print(f'OK {path}')
|
|
PY
|
|
```
|
|
|
|
Check compose rendering when Docker is available:
|
|
|
|
```bash
|
|
for f in infra/compose/*.yml; do
|
|
docker compose -f "$f" config >/dev/null && echo "OK $f"
|
|
done
|
|
```
|