asepharyana
e953c3cb67
- Add llm-api to docker-build-push workflow (build, push, deploy) - Add llm-api compose file to deploy-docker ALL_COMPOSE_FILES - Add llm-api to update-submodule workflow - Add llm-api CodeQL build step in security workflow - Fix typo in Traefik host rule (asepharya -> asepharyana) - Update CLAUDE.md submodule list - Fix .gitmodules URL for llm-api submodule - Clean up standalone infra files from llm-api submodule repo
Infrastructure
Docker Compose and Traefik configuration for asepharyana-hub.
Layout
infra/
├── compose/ # One compose file per stack/service
│ ├── traefik.yml # Public reverse proxy
│ ├── shared.yml # Shared Redis
│ ├── nats.yml # NATS message broker + JetStream
│ ├── dapr.yml # Dapr placement service
│ └── scraper.yml # Scraper API (app + Dapr sidecar)
├── docker/ # Dockerfiles and image runtime helpers
├── dapr/ # Dapr component configs
│ ├── config.yaml # Global Dapr configuration
│ └── components/ # Pub/sub (Redis), state store (Redis)
├── traefik/ # Dynamic Traefik configuration
│ ├── dynamic/ # Routers, services, middlewares, TLS certs
│ └── TRAEFIK_ENV_CONFIG.md
First-time setup
Create the shared Docker network before starting any service:
docker network create app-shared-net
Create .env from .env.example and fill production values. Do not commit .env.
Deployment order
The GitHub deploy workflow combines the active compose files automatically. For manual deployment, use this order:
# 1. Shared services
docker compose -f infra/compose/shared.yml up -d
# 2. Message bus + Dapr placement
docker compose -f infra/compose/nats.yml up -d
docker compose -f infra/compose/dapr.yml up -d
# 3. Reverse proxy
docker compose -f infra/compose/traefik.yml up -d
# 4. Application services (with Dapr sidecars)
docker compose -f infra/compose/scraper.yml up -d
Environment variables
Common variables used by infra compose files:
DATABASE_URL=
GITHUB_TOKEN=
SHARED_REDIS_EXPOSE=127.0.0.1:6379:6379
Traefik certificate path variables are optional because infra/compose/traefik.yml provides production-compatible defaults. See infra/traefik/TRAEFIK_ENV_CONFIG.md for the full list.
Traefik
Traefik reads dynamic config from infra/traefik/dynamic/:
apps.yaml— routers and upstream servicesmiddlewares.yaml— shared middleware chainsssl.yaml— TLS certificates forasepharyana.my.idandasepharyana.web.id
Validation
Run syntax checks after editing infra YAML:
python - <<'PY'
import pathlib, yaml
for path in pathlib.Path('infra').rglob('*.yml'):
with path.open() as fh:
yaml.safe_load(fh)
print(f'OK {path}')
for path in pathlib.Path('infra').rglob('*.yaml'):
with path.open() as fh:
yaml.safe_load(fh)
print(f'OK {path}')
PY
Check compose rendering when Docker is available:
for f in infra/compose/*.yml; do
docker compose -f "$f" config >/dev/null && echo "OK $f"
done