0cbac68ec1
Dev: - Add tailwind install + build to docker-compose startup so CSS is built inside the container — not dependent on local filesystem Production (docker-compose.prod.yml): - Gunicorn on 127.0.0.1:8001, bind-mounted static/media to host paths so Caddy can serve them directly - Runs migrate, tailwind build, collectstatic on startup Settings (production.py): - Disable SECURE_SSL_REDIRECT (Caddy handles redirects; Django would loop) - Add CSRF_TRUSTED_ORIGINS for nohypeai.net CI (.gitea/workflows/ci.yml): - Add push-to-main trigger - Add deploy job: SSHes to lintel-prod-01 as deploy, runs deploy/deploy.sh Server config (deploy/): - deploy/caddy/nohype.caddy — Caddy site config for nohypeai.net - deploy/sum-nohype.service — systemd unit for the compose stack - deploy/deploy.sh — deploy script (pull, build, restart) One-time manual steps required on lintel-prod-01 (need root): sudo cp deploy/sum-nohype.service /etc/systemd/system/ sudo cp deploy/caddy/nohype.caddy /etc/caddy/sites-enabled/ sudo systemctl daemon-reload && sudo systemctl enable sum-nohype sudo systemctl reload caddy Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
47 lines
1.2 KiB
YAML
47 lines
1.2 KiB
YAML
services:
|
|
web:
|
|
build: .
|
|
working_dir: /app
|
|
command: >
|
|
sh -c "python manage.py tailwind install --no-input &&
|
|
python manage.py tailwind build &&
|
|
python manage.py migrate --noinput &&
|
|
python manage.py collectstatic --noinput &&
|
|
gunicorn config.wsgi:application
|
|
--workers 3
|
|
--bind 0.0.0.0:8000
|
|
--access-logfile -
|
|
--error-logfile -
|
|
--capture-output"
|
|
env_file: .env
|
|
environment:
|
|
DJANGO_SETTINGS_MODULE: config.settings.production
|
|
volumes:
|
|
- /srv/sum/nohype/static:/app/staticfiles
|
|
- /srv/sum/nohype/media:/app/media
|
|
ports:
|
|
- "127.0.0.1:8001:8000"
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
restart: unless-stopped
|
|
|
|
db:
|
|
image: postgres:16-alpine
|
|
env_file: .env
|
|
environment:
|
|
POSTGRES_DB: nohype
|
|
POSTGRES_USER: nohype
|
|
volumes:
|
|
- nohype_pg:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U nohype -d nohype"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
start_period: 10s
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
nohype_pg:
|