mrleo1nidandClaude Opus 5.5
01319c58d7
ci / api (push) Successful in 50s
ci / recommender (push) Successful in 37s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (apps/web/Dockerfile, web, ) (push) Successful in 44s
release / android + release (push) Failing after 53s
ci / contract (сгенерированный код совпадает с openapi.yaml) (push) Successful in 45s
ci / ts (packages + web) (push) Successful in 37s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, api, api) (push) Successful in 1m30s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, storage-agent, storage-agent) (push) Successful in 52s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/recommender/Dockerfile, recommender, ) (push) Successful in 28s
ci / mobile (Metro-бандл Android) (push) Successful in 49s
release / verify (push) Successful in 1m14s
- deploy/compose.yaml: every app service has `build:` (repo root context), local tags pipu-music-<service>:<version> - deploy/update.sh: git fetch → checkout tag (latest release by default, or vX.Y.Z / main) → docker compose build --pull → up -d → prune → /readyz; re-executes from a temp copy because checkout may replace the script - install.sh / .env.example: no REGISTRY, PIPU_VERSION set by update.sh, .env owned by the invoking user - release.yml: drop image publishing; release ships APK + sha256 only - ci.yml: new `docker` job builds all images without push - docs: install guide uses git clone, deployment/ci-cd updated, ADR-013 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
129 lines
3.5 KiB
YAML
129 lines
3.5 KiB
YAML
# Продакшен-развёртывание (docs/install-guide.md). Образы собираются на сервере из клонированного репозитория.
|
|
# Перед первым запуском: sudo ./install.sh. Установка / обновление: ./update.sh [vX.Y.Z]
|
|
name: pipu
|
|
|
|
x-version: &version
|
|
VERSION: ${PIPU_VERSION:-0.0.0-dev}
|
|
|
|
x-build-rec: &build-rec
|
|
context: ..
|
|
dockerfile: services/recommender/Dockerfile
|
|
args: *version
|
|
|
|
x-library-ro: &library-ro
|
|
type: bind
|
|
source: ${PIPU_DATA:-/srv/pipu}/library
|
|
target: /library
|
|
read_only: true
|
|
bind: { propagation: rslave }
|
|
|
|
x-restart: &restart
|
|
restart: unless-stopped
|
|
|
|
services:
|
|
nginx:
|
|
<<: *restart
|
|
image: pipu-music-web:${PIPU_VERSION:-dev}
|
|
build:
|
|
context: ..
|
|
dockerfile: apps/web/Dockerfile
|
|
args: *version
|
|
ports: ["${HTTP_PORT:-80}:80"]
|
|
volumes:
|
|
- *library-ro
|
|
- ${PIPU_DATA:-/srv/pipu}/cache:/cache:ro
|
|
- ${PIPU_DATA:-/srv/pipu}/uploads:/uploads:ro
|
|
depends_on: [api]
|
|
|
|
api:
|
|
<<: *restart
|
|
image: pipu-music-api:${PIPU_VERSION:-dev}
|
|
build:
|
|
context: ..
|
|
dockerfile: services/api/Dockerfile
|
|
target: api
|
|
args: *version
|
|
env_file: .env
|
|
environment: &db-env
|
|
DATABASE_URL: postgres://pipu:${POSTGRES_PASSWORD}@postgres:5432/pipu?sslmode=disable
|
|
volumes:
|
|
- *library-ro
|
|
- ${PIPU_DATA:-/srv/pipu}/cache:/cache
|
|
- ${PIPU_DATA:-/srv/pipu}/updates:/updates
|
|
- ${PIPU_DATA:-/srv/pipu}/uploads:/uploads
|
|
depends_on:
|
|
postgres: { condition: service_healthy }
|
|
redis: { condition: service_started }
|
|
storage-agent: { condition: service_started }
|
|
|
|
storage-agent:
|
|
<<: *restart
|
|
image: pipu-music-storage-agent:${PIPU_VERSION:-dev}
|
|
build:
|
|
context: ..
|
|
dockerfile: services/api/Dockerfile
|
|
target: storage-agent
|
|
args: *version
|
|
cap_add: [SYS_ADMIN]
|
|
security_opt: ["apparmor:unconfined"]
|
|
environment:
|
|
INTERNAL_TOKEN: ${INTERNAL_TOKEN}
|
|
LIBRARY_ROOT: /library
|
|
volumes:
|
|
- type: bind
|
|
source: ${PIPU_DATA:-/srv/pipu}/library
|
|
target: /library
|
|
bind: { propagation: rshared }
|
|
- ${PIPU_DATA:-/srv/pipu}/uploads:/uploads:ro
|
|
|
|
recommender:
|
|
<<: *restart
|
|
image: pipu-music-recommender:${PIPU_VERSION:-dev}
|
|
build: *build-rec
|
|
command: ["serve"]
|
|
env_file: .env
|
|
environment: *db-env
|
|
depends_on:
|
|
postgres: { condition: service_healthy }
|
|
|
|
analyzer:
|
|
<<: *restart
|
|
image: pipu-music-recommender:${PIPU_VERSION:-dev}
|
|
build: *build-rec
|
|
command: ["analyze", "--workers", "4"]
|
|
env_file: .env
|
|
environment: *db-env
|
|
volumes:
|
|
- *library-ro
|
|
- ${PIPU_DATA:-/srv/pipu}/models:/models
|
|
deploy: { resources: { limits: { cpus: "4" } } }
|
|
depends_on:
|
|
postgres: { condition: service_healthy }
|
|
|
|
postgres:
|
|
<<: *restart
|
|
image: pgvector/pgvector:pg17
|
|
environment:
|
|
POSTGRES_USER: pipu
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
POSTGRES_DB: pipu
|
|
volumes: [ "${PIPU_DATA:-/srv/pipu}/postgres:/var/lib/postgresql/data" ]
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U pipu -d pipu"]
|
|
interval: 5s
|
|
retries: 20
|
|
|
|
redis:
|
|
<<: *restart
|
|
image: redis:7-alpine
|
|
command: ["redis-server", "--appendonly", "yes"]
|
|
volumes: [ "${PIPU_DATA:-/srv/pipu}/redis:/data" ]
|
|
|
|
meilisearch:
|
|
<<: *restart
|
|
image: getmeili/meilisearch:v1.11
|
|
environment:
|
|
MEILI_MASTER_KEY: ${MEILI_MASTER_KEY}
|
|
MEILI_ENV: production
|
|
volumes: [ "${PIPU_DATA:-/srv/pipu}/meili:/meili_data" ]
|