asepharyana-hub/infra

Infrastructure

Docker Compose and Traefik configuration for asepharyana-hub.

Layout

infra/
├── compose/                 # One compose file per stack/service
│   ├── traefik.yml          # Public reverse proxy
│   ├── shared.yml           # Shared Redis
│   ├── nats.yml             # NATS message broker + JetStream
│   ├── dapr.yml             # Dapr placement service
│   └── scraper.yml          # Scraper API (app + Dapr sidecar)
├── docker/                  # Dockerfiles and image runtime helpers
├── dapr/                    # Dapr component configs
│   ├── config.yaml          # Global Dapr configuration
│   └── components/          # Pub/sub (Redis), state store (Redis)
├── traefik/                 # Dynamic Traefik configuration
│   ├── dynamic/             # Routers, services, middlewares, TLS certs
│   └── TRAEFIK_ENV_CONFIG.md

First-time setup

Create the shared Docker network before starting any service:

docker network create app-shared-net

Create .env from .env.example and fill production values. Do not commit .env.

Deployment order

The GitHub deploy workflow combines the active compose files automatically. For manual deployment, use this order:

# 1. Shared services
docker compose -f infra/compose/shared.yml up -d

# 2. Message bus + Dapr placement
docker compose -f infra/compose/nats.yml up -d
docker compose -f infra/compose/dapr.yml up -d

# 3. Reverse proxy
docker compose -f infra/compose/traefik.yml up -d

# 4. Application services (with Dapr sidecars)
docker compose -f infra/compose/scraper.yml up -d

Environment variables

Common variables used by infra compose files:

DATABASE_URL=
GITHUB_TOKEN=
SHARED_REDIS_EXPOSE=127.0.0.1:6379:6379

Traefik certificate path variables are optional because infra/compose/traefik.yml provides production-compatible defaults. See infra/traefik/TRAEFIK_ENV_CONFIG.md for the full list.

Traefik

Traefik reads dynamic config from infra/traefik/dynamic/:

• apps.yaml — routers and upstream services
• middlewares.yaml — shared middleware chains
• ssl.yaml — TLS certificates for asepharyana.my.id and asepharyana.web.id

Validation

Run syntax checks after editing infra YAML:

python - <<'PY'
import pathlib, yaml
for path in pathlib.Path('infra').rglob('*.yml'):
    with path.open() as fh:
        yaml.safe_load(fh)
    print(f'OK {path}')
for path in pathlib.Path('infra').rglob('*.yaml'):
    with path.open() as fh:
        yaml.safe_load(fh)
    print(f'OK {path}')
PY

Check compose rendering when Docker is available:

for f in infra/compose/*.yml; do
  docker compose -f "$f" config >/dev/null && echo "OK $f"
done