Compare commits

..

No commits in common. "16f3e17a3d6b0e999ae7b35c774ed006a0c7abc9" and "cc2615d7072510eff153b1b8d7e1be7d7d627dd7" have entirely different histories.

19 changed files with 231 additions and 350 deletions

10
.env
View File

@ -1,10 +0,0 @@
#Пример .env файла. Используем его чтобы не указывать чувствительные данные (пароли, ключи, API и т.д.) напрямую в коде
# PostgreSQL
POSTGRES_USER=user
POSTGRES_PASSWORD=password
POSTGRES_DB=website
DB_HOST=database
# Nginx bublick & private key
SSL_CERT_FILE=./nginx/ssl/domain.crt
SSL_KEY_FILE=./nginx/ssl/domain.key

View File

@ -1,29 +0,0 @@
name: Deploy to Server
on:
branches:
- master
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v3
- name: Setup SSH Key
uses: webfactory/ssh-agent@v0.7.0
with:
ssh-private-key: ${{ secrets.DEPLOY_SSH_KEY }}
- name: Add Known Host
run: ssh-keyscan ${{ secrets.SERVER_IP }} >> ~/.ssh/known_hosts
- name: Deploy to Server
run: |
ssh -o StrictHostKeyChecking=no ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_IP }} "
cd ${{ secrets.PROJECT_PATH }} &&
git pull origin master &&
docker-compose down --remove-orphans &&
docker-compose up -d --build
"

View File

@ -1,72 +1 @@
# 🚀 Web Application with Docker, PostgreSQL & Flask
Простое веб-приложение с авторизацией, которое можно использовать как основу для собственного проекта.
## 🌟 Особенности проекта
- **Docker-ориентированный** (сборка через compose)
- **Безопасность**: секреты через ".env", healthcheck для БД
- **Автоматический деплой** через Git hooks
- **Логирование** операций деплоя
## 🛠 Технологический стек
- Frontend: Nginx со статическим html
- Backend: Python Flask
- DataBase: PostgreSQL
- Infrastructure: Docker, Docker Compose
- CI/CD: Git hooks
🔧 Архитектура проекта
Copy
container-web-app/
├── backend/
│ ├── requirements.txt
│ └── server.py
├── db/
│ └── init.sql
├── frontend/
│ ├── static/
│ └── index.html
├── nginx/
│ ├── ssl/
│ │ ├── domain.crt
│ │ ├── domain.conf
│ │ └── domain.key
│ └── nginx.conf
├── scripts/
│ └── post-receive
├── .env
├── docker-compose.yaml
└── README.md
🔒 Безопасность
Все секреты хранятся в .env (в git не коммитятся)
Healthcheck для мониторинга состояния PostgreSQL
## CI/CD:
Автоматический деплой через Git hooks
Скрипт деплоя с логированием (/var/log/deploy.log)
## Infrastructure as Code:
Полная воспроизводимость через Docker
Версионирование образов
## 📈 Дальнейшее развитие
- Добавить тесты (pytest)
- Настроить GitHub Actions для CI
- Реализовать балансировку нагрузки
- Добавить мониторинг (Prometheus + Grafana)
Первый пуш, не гарантирую работоспособность этого кода

View File

@ -1,3 +1,2 @@
Flask
psycopg2-binary
python-dotenv

View File

@ -1,26 +1,20 @@
from flask import Flask, request, render_template
import psycopg2
import os
from dotenv import load_dotenv
load_dotenv()
app = Flask(__name__, template_folder='/media/frontend')
DATABASE = {
'dbname': os.getenv('POSTGRES_DB'),
'user': os.getenv('POSTGRES_USER'),
'password': os.getenv('POSTGRES_PASSWORD'),
'host': os.getenv('DB_HOST')
'dbname': 'WebSite',
'user': 'User',
'password': 'Password',
'host': 'DataBase',
}
def get_db_connection():
try:
conn = psycopg2.connect(**DATABASE)
return conn
except psycopg2.Error as e:
print(f"Ошибка подключения к базе данных: {e}")
raise
@app.route('/', methods=['GET'])
def index():
@ -29,50 +23,45 @@ def index():
@app.route('/submit', methods=['POST'])
def submit():
action = request.form.get('action')
message = ""
try:
conn = get_db_connection()
cur = conn.cursor()
if action == 'Login':
username = request.form.get('username')
password = request.form.get('password')
cur.execute(
'SELECT * FROM users WHERE username = %s AND password = %s',
(username, password)
)
conn = get_db_connection()
cur = conn.cursor()
cur.execute('SELECT * FROM users WHERE username = %s AND password = %s', (username, password))
user = cur.fetchone()
message = "Успешный вход!" if user else "Неправильные имя пользователя или пароль!"
cur.close()
conn.close()
if user:
message = "Login successful!"
else:
message = "Invalid username or password."
elif action == 'Register':
new_username = request.form.get('new_username')
new_password = request.form.get('new_password')
conn = get_db_connection()
cur = conn.cursor()
cur.execute('SELECT * FROM users WHERE username = %s', (new_username,))
if cur.fetchone():
message = "Пользователь уже существует!"
message = "User already exists!"
else:
cur.execute(
'INSERT INTO users (username, password) VALUES (%s, %s)',
(new_username, new_password)
)
cur.execute('INSERT INTO users (username, password) VALUES (%s, %s)', (new_username, new_password))
conn.commit()
message = "Успешная регистрация!"
message = "Registration successful!"
cur.close()
conn.close()
else:
message = "Неизвестное действие"
except psycopg2.Error as e:
conn.rollback()
message = f"Ошибка базы данных: {e}"
finally:
if 'cur' in locals():
cur.close()
if 'conn' in locals():
conn.close()
message = "Invalid action."
return render_template('index.html', message=message)

View File

@ -1,13 +1,13 @@
server {
listen 80;
server_name your_doman.com www.your_doman.com;
return 301 https://your_doman.com$request_uri;
server_name your_domain.com;
return 301 https://your_domain.com$request_uri;
}
server {
listen 443 ssl;
server_name your_doman.com www.your_doman.com;
server_name your_domain.com;
ssl_certificate /etc/nginx/sites-available/domain.crt;
@ -29,12 +29,16 @@ server {
location /submit {
proxy_pass http://backend_part:5000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
location /api {
proxy_pass http://backend_part:5000/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

1
conf/domain.crt Normal file
View File

@ -0,0 +1 @@
Наш сертификат

1
conf/domain.key Normal file
View File

@ -0,0 +1 @@
Приватный ключ

View File

@ -1,51 +0,0 @@
services:
database:
image: postgres:17.4-alpine3.21
container_name: database
ports:
- "5432:5432"
environment:
POSTGRES_DB: ${POSTGRES_DB}
POSTGRES_USER: ${POSTGRES_USER}
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
#Монтируем директорию на хосте, чтобы при повторных "docker-compose up" таблицы с нашими данными сохранялись
volumes:
- /database:/var/lib/postgresql/data
cpus: '0.15'
mem_limit: 256M
healthcheck:
test: ["CMD-SHELL", "pg_isready -U admin -WebSite"]
interval: 5s
timeout: 5s
retries: 5
webserver:
image: nginx:1.27.4-alpine
container_name: webserver
ports:
- "80:80"
- "443:443"
volumes:
- /WebApp/frontend:/usr/share/nginx/html
- /WebApp/nginx/ssl:/etc/nginx/sites-available
- /WebApp/nginx/nginx.conf:/etc/nginx/nginx.conf
depends_on:
- database
- backend
cpus: '0.15'
mem_limit: 256M
backend:
image: python:3.9
container_name: backend_part
ports:
- "5000:5000"
volumes:
- /WebApp/backend:/media/backend
working_dir: /media/backend
command: >
sh -c "pip install -r requirements.txt && python server.py"
cpus: '0.35'
mem_limit: 256M

51
docker/docker-compose.yml Normal file
View File

@ -0,0 +1,51 @@
services:
DataBase:
image: postgres:latest
container_name: DataBase
ports:
- "5432:5432"
#Так никто не делает в реальных кейсах, я просто даун, не умею работать с секретами (опция secrets)
environment:
POSTGRES_USER: user
POSTGRES_PASSWORD: password
POSTGRES_DB: WebSite
volumes:
- /home/git/myprojects/database:/var/lib/postgresql/data
cpus: '0.15'
mem_limit: 256M
healthcheck:
test: ["CMD-SHELL", "pg_isready -U admin -WebSite"]
interval: 5s
timeout: 5s
retries: 5
webserver:
image: nginx:latest
container_name: WebServer
ports:
- "80:80"
- "443:443"
volumes:
- /home/git/myprojects/WorkServer/frontend:/usr/share/nginx/html
- /home/git/myprojects/WorkServer/conf:/etc/nginx/sites-available
depends_on:
- DataBase
- backend
cpus: '0.15'
mem_limit: 256M
backend:
image: python:3.9
container_name: backend_part
ports:
- "5000:5000"
volumes:
- /home/git/myprojects/WorkServer/backend:/media/backend
- /home/git/myprojects/WorkServer/frontend:/media/frontend
working_dir: /media/backend
command: >
sh -c "pip install -r requirements.txt && python server.py"
cpus: '0.35'
mem_limit: 256M

View File

@ -0,0 +1,3 @@
FROM nginx:v1
COPY nginx.conf /etc/nginx/nginx.conf

View File

@ -4,7 +4,7 @@
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Login and Register Form</title>
<link rel="stylesheet" href="./static/css/styles.css">
<link rel="stylesheet" href="styles.css">
</head>
<body>
<div class="form-container">

View File

@ -1 +0,0 @@
Наш публичный ключ

View File

@ -1 +0,0 @@
Наш приватный ключ

21
post-receive Normal file
View File

@ -0,0 +1,21 @@
#!/bin/bash
TARGET="/home/git/myprojects/WorkServer"
GIT_DIR="/home/git/myprojects/web"
BRANCH="master"
git --work-tree="$TARGET" --git-dir="$GIT_DIR" checkout -f "$BRANCH"
cd /home/git/myprojects/WorkServer/docker
#docker-compose block:
# 1
docker-compose build
# 2
docker-compose down
# 3
docker-compose up -d

View File

@ -1,25 +0,0 @@
#!/bin/bash
TARGET="path to work repo"
GIT_DIR="Path to .git repo"
BRANCH="master"
LOG_FILE="/var/log/deploy.log"
exec > >(tee -a "$LOG_FILE") 2>&1
echo "[$(date '+%Y-%m-%d %H:%M:%S')] Starting deploy..."
git --work-tree="$TARGET" --git-dir="$GIT_DIR" checkout -f "$BRANCH"
cd $TARGET
#docker-compose block:
# 1
docker-compose build
# 2
docker-compose down
# 3
docker-compose up -d
echo "[$(date '+%Y-%m-%d %H:%M:%S')] Deploy successful!"