kyle
6c3f017a9e
Implements comprehensive Docker containerization for the entire VIP Coordinator application, enabling single-command production deployment. Backend Containerization: - Multi-stage Dockerfile (dependencies → builder → production) - Automated database migrations via docker-entrypoint.sh - Health checks and non-root user for security - Optimized image size (~200-250MB vs ~500MB) - Includes OpenSSL, dumb-init, and netcat for proper operation Frontend Containerization: - Multi-stage Dockerfile (builder → nginx) - Nginx configuration with SPA routing and API proxying - Security headers and gzip compression - Optimized image size (~45-50MB vs ~450MB) - Health check endpoint at /health Infrastructure: - docker-compose.prod.yml orchestrating 4 services: * PostgreSQL 16 (database) * Redis 7 (caching) * Backend (NestJS API) * Frontend (Nginx serving React SPA) - Service dependencies with health check conditions - Named volumes for data persistence - Dedicated bridge network for service isolation - Comprehensive logging configuration Configuration: - .env.production.example template with all required variables - Build-time environment injection for frontend - Runtime environment injection for backend - .dockerignore files for optimal build context Documentation: - Updated README.md with complete Docker deployment guide - Quick start instructions - Troubleshooting section - Production enhancement recommendations - Updated project structure diagram Deployment Features: - One-command deployment: docker-compose up -d - Automatic database migrations on backend startup - Optional database seeding via RUN_SEED flag - Rolling updates support - Zero-config service discovery - Health checks prevent premature traffic Image Optimizations: - Backend: 60% size reduction via multi-stage build - Frontend: 90% size reduction via nginx alpine - Total deployment: <300MB (excluding volumes) - Layer caching for fast rebuilds Security Enhancements: - Non-root users in all containers - Minimal attack surface (Alpine Linux) - No secrets in images (runtime injection) - Health checks ensure service readiness Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
84 lines
2.2 KiB
Nginx Configuration File
84 lines
2.2 KiB
Nginx Configuration File
server {
|
|
listen 80;
|
|
server_name _;
|
|
root /usr/share/nginx/html;
|
|
index index.html;
|
|
|
|
# Enable gzip compression
|
|
gzip on;
|
|
gzip_vary on;
|
|
gzip_min_length 1024;
|
|
gzip_comp_level 6;
|
|
gzip_types
|
|
text/plain
|
|
text/css
|
|
text/xml
|
|
text/javascript
|
|
application/javascript
|
|
application/json
|
|
application/xml+rss
|
|
application/x-font-ttf
|
|
font/opentype
|
|
image/svg+xml
|
|
image/x-icon;
|
|
|
|
# Security headers
|
|
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
add_header X-XSS-Protection "1; mode=block" always;
|
|
add_header Referrer-Policy "no-referrer-when-downgrade" always;
|
|
|
|
# API proxy - forward all /api requests to backend service
|
|
location /api {
|
|
proxy_pass http://backend:3000;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection 'upgrade';
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_cache_bypass $http_upgrade;
|
|
|
|
# Timeouts
|
|
proxy_connect_timeout 60s;
|
|
proxy_send_timeout 60s;
|
|
proxy_read_timeout 60s;
|
|
}
|
|
|
|
# Cache static assets with versioned filenames
|
|
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
|
|
expires 1y;
|
|
add_header Cache-Control "public, immutable";
|
|
access_log off;
|
|
}
|
|
|
|
# Don't cache index.html
|
|
location = /index.html {
|
|
expires -1;
|
|
add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
|
|
}
|
|
|
|
# SPA routing - serve index.html for all routes
|
|
location / {
|
|
try_files $uri $uri/ /index.html;
|
|
}
|
|
|
|
# Health check endpoint
|
|
location /health {
|
|
access_log off;
|
|
return 200 "healthy\n";
|
|
add_header Content-Type text/plain;
|
|
}
|
|
|
|
# Hide nginx version
|
|
server_tokens off;
|
|
|
|
# Custom error pages
|
|
error_page 404 /index.html;
|
|
error_page 500 502 503 504 /50x.html;
|
|
location = /50x.html {
|
|
root /usr/share/nginx/html;
|
|
}
|
|
}
|