Compare commits
No commits in common. "47d445fb8a5dbc90405ea2ecac882e8c12cc4c19" and "04f65de2339866e677fdeb050faad9a060719f0b" have entirely different histories.
47d445fb8a
...
04f65de233
10
.env
10
.env
@ -1,10 +0,0 @@
|
|||||||
#Пример .env файла. Используем его чтобы не указывать чувствительные данные (пароли, ключи, API и т.д.) напрямую в коде
|
|
||||||
# PostgreSQL
|
|
||||||
POSTGRES_USER=user
|
|
||||||
POSTGRES_PASSWORD=password
|
|
||||||
POSTGRES_DB=website
|
|
||||||
DB_HOST=database
|
|
||||||
|
|
||||||
# Nginx bublick & private key
|
|
||||||
SSL_CERT_FILE=./nginx/ssl/domain.crt
|
|
||||||
SSL_KEY_FILE=./nginx/ssl/domain.key
|
|
73
README.md
73
README.md
@ -1,72 +1 @@
|
|||||||
# 🚀 Web Application with Docker, PostgreSQL & Flask
|
Первый пуш, не гарантирую работоспособность этого кода
|
||||||
|
|
||||||
Простое веб-приложение с авторизацией, которое можно использовать как основу для собственного проекта.
|
|
||||||
|
|
||||||
## 🌟 Особенности проекта
|
|
||||||
|
|
||||||
- **Docker-ориентированный** (сборка через compose)
|
|
||||||
- **Безопасность**: секреты через ".env", healthcheck для БД
|
|
||||||
- **Автоматический деплой** через Git hooks
|
|
||||||
- **Логирование** операций деплоя
|
|
||||||
|
|
||||||
## 🛠 Технологический стек
|
|
||||||
|
|
||||||
- Frontend: Nginx со статическим html
|
|
||||||
- Backend: Python Flask
|
|
||||||
- DataBase: PostgreSQL
|
|
||||||
- Infrastructure: Docker, Docker Compose
|
|
||||||
- CI/CD: Git hooks
|
|
||||||
|
|
||||||
🔧 Архитектура проекта
|
|
||||||
Copy
|
|
||||||
container-web-app/
|
|
||||||
│
|
|
||||||
├── backend/
|
|
||||||
│ ├── requirements.txt
|
|
||||||
│ └── server.py
|
|
||||||
│
|
|
||||||
├── db/
|
|
||||||
│ └── init.sql
|
|
||||||
│
|
|
||||||
├── frontend/
|
|
||||||
│ ├── static/
|
|
||||||
│ └── index.html
|
|
||||||
│
|
|
||||||
├── nginx/
|
|
||||||
│ ├── ssl/
|
|
||||||
│ │ ├── domain.crt
|
|
||||||
│ │ ├── domain.conf
|
|
||||||
│ │ └── domain.key
|
|
||||||
│ └── nginx.conf
|
|
||||||
│
|
|
||||||
├── scripts/
|
|
||||||
│ └── post-receive
|
|
||||||
│
|
|
||||||
├── .env
|
|
||||||
├── docker-compose.yaml
|
|
||||||
└── README.md
|
|
||||||
🔒 Безопасность
|
|
||||||
Все секреты хранятся в .env (в git не коммитятся)
|
|
||||||
|
|
||||||
Healthcheck для мониторинга состояния PostgreSQL
|
|
||||||
|
|
||||||
## CI/CD:
|
|
||||||
|
|
||||||
Автоматический деплой через Git hooks
|
|
||||||
|
|
||||||
Скрипт деплоя с логированием (/var/log/deploy.log)
|
|
||||||
|
|
||||||
## Infrastructure as Code:
|
|
||||||
|
|
||||||
Полная воспроизводимость через Docker
|
|
||||||
|
|
||||||
Версионирование образов
|
|
||||||
|
|
||||||
## 📈 Дальнейшее развитие
|
|
||||||
- Добавить тесты (pytest)
|
|
||||||
|
|
||||||
- Настроить GitHub Actions для CI
|
|
||||||
|
|
||||||
- Реализовать балансировку нагрузки
|
|
||||||
|
|
||||||
- Добавить мониторинг (Prometheus + Grafana)
|
|
@ -1,3 +1,2 @@
|
|||||||
Flask
|
Flask
|
||||||
psycopg2-binary
|
psycopg2-binary
|
||||||
python-dotenv
|
|
@ -1,26 +1,20 @@
|
|||||||
from flask import Flask, request, render_template
|
from flask import Flask, request, render_template
|
||||||
import psycopg2
|
import psycopg2
|
||||||
import os
|
|
||||||
from dotenv import load_dotenv
|
|
||||||
|
|
||||||
load_dotenv()
|
|
||||||
|
|
||||||
app = Flask(__name__, template_folder='/media/frontend')
|
app = Flask(__name__, template_folder='/media/frontend')
|
||||||
|
|
||||||
|
|
||||||
DATABASE = {
|
DATABASE = {
|
||||||
'dbname': os.getenv('POSTGRES_DB'),
|
'dbname': 'WebSite',
|
||||||
'user': os.getenv('POSTGRES_USER'),
|
'user': 'User',
|
||||||
'password': os.getenv('POSTGRES_PASSWORD'),
|
'password': 'Password',
|
||||||
'host': os.getenv('DB_HOST')
|
'host': 'DataBase',
|
||||||
}
|
}
|
||||||
|
|
||||||
def get_db_connection():
|
def get_db_connection():
|
||||||
try:
|
|
||||||
conn = psycopg2.connect(**DATABASE)
|
conn = psycopg2.connect(**DATABASE)
|
||||||
return conn
|
return conn
|
||||||
except psycopg2.Error as e:
|
|
||||||
print(f"Ошибка подключения к базе данных: {e}")
|
|
||||||
raise
|
|
||||||
|
|
||||||
@app.route('/', methods=['GET'])
|
@app.route('/', methods=['GET'])
|
||||||
def index():
|
def index():
|
||||||
@ -29,50 +23,45 @@ def index():
|
|||||||
@app.route('/submit', methods=['POST'])
|
@app.route('/submit', methods=['POST'])
|
||||||
def submit():
|
def submit():
|
||||||
action = request.form.get('action')
|
action = request.form.get('action')
|
||||||
message = ""
|
|
||||||
|
|
||||||
try:
|
|
||||||
conn = get_db_connection()
|
|
||||||
cur = conn.cursor()
|
|
||||||
|
|
||||||
if action == 'Login':
|
if action == 'Login':
|
||||||
username = request.form.get('username')
|
username = request.form.get('username')
|
||||||
password = request.form.get('password')
|
password = request.form.get('password')
|
||||||
|
|
||||||
cur.execute(
|
conn = get_db_connection()
|
||||||
'SELECT * FROM users WHERE username = %s AND password = %s',
|
cur = conn.cursor()
|
||||||
(username, password)
|
|
||||||
)
|
cur.execute('SELECT * FROM users WHERE username = %s AND password = %s', (username, password))
|
||||||
user = cur.fetchone()
|
user = cur.fetchone()
|
||||||
|
|
||||||
message = "Успешный вход!" if user else "Неправильные имя пользователя или пароль!"
|
cur.close()
|
||||||
|
conn.close()
|
||||||
|
|
||||||
|
if user:
|
||||||
|
message = "Login successful!"
|
||||||
|
else:
|
||||||
|
message = "Invalid username or password."
|
||||||
|
|
||||||
elif action == 'Register':
|
elif action == 'Register':
|
||||||
new_username = request.form.get('new_username')
|
new_username = request.form.get('new_username')
|
||||||
new_password = request.form.get('new_password')
|
new_password = request.form.get('new_password')
|
||||||
|
|
||||||
|
conn = get_db_connection()
|
||||||
|
cur = conn.cursor()
|
||||||
|
|
||||||
cur.execute('SELECT * FROM users WHERE username = %s', (new_username,))
|
cur.execute('SELECT * FROM users WHERE username = %s', (new_username,))
|
||||||
if cur.fetchone():
|
if cur.fetchone():
|
||||||
message = "Пользователь уже существует!"
|
message = "User already exists!"
|
||||||
else:
|
else:
|
||||||
cur.execute(
|
cur.execute('INSERT INTO users (username, password) VALUES (%s, %s)', (new_username, new_password))
|
||||||
'INSERT INTO users (username, password) VALUES (%s, %s)',
|
|
||||||
(new_username, new_password)
|
|
||||||
)
|
|
||||||
conn.commit()
|
conn.commit()
|
||||||
message = "Успешная регистрация!"
|
message = "Registration successful!"
|
||||||
|
|
||||||
|
cur.close()
|
||||||
|
conn.close()
|
||||||
|
|
||||||
else:
|
else:
|
||||||
message = "Неизвестное действие"
|
message = "Invalid action."
|
||||||
|
|
||||||
except psycopg2.Error as e:
|
|
||||||
conn.rollback()
|
|
||||||
message = f"Ошибка базы данных: {e}"
|
|
||||||
finally:
|
|
||||||
if 'cur' in locals():
|
|
||||||
cur.close()
|
|
||||||
if 'conn' in locals():
|
|
||||||
conn.close()
|
|
||||||
|
|
||||||
return render_template('index.html', message=message)
|
return render_template('index.html', message=message)
|
||||||
|
|
||||||
|
@ -1,13 +1,13 @@
|
|||||||
server {
|
server {
|
||||||
listen 80;
|
listen 80;
|
||||||
server_name your_doman.com www.your_doman.com;
|
server_name your_domain.com;
|
||||||
return 301 https://your_doman.com$request_uri;
|
return 301 https://your_domain.com$request_uri;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
server {
|
server {
|
||||||
listen 443 ssl;
|
listen 443 ssl;
|
||||||
server_name your_doman.com www.your_doman.com;
|
server_name your_domain.com;
|
||||||
|
|
||||||
|
|
||||||
ssl_certificate /etc/nginx/sites-available/domain.crt;
|
ssl_certificate /etc/nginx/sites-available/domain.crt;
|
||||||
@ -29,12 +29,16 @@ server {
|
|||||||
|
|
||||||
location /submit {
|
location /submit {
|
||||||
proxy_pass http://backend_part:5000;
|
proxy_pass http://backend_part:5000;
|
||||||
|
|
||||||
proxy_set_header Host $host;
|
proxy_set_header Host $host;
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
}
|
}
|
||||||
|
location /api {
|
||||||
|
proxy_pass http://backend_part:5000/;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
1
conf/domain.crt
Normal file
1
conf/domain.crt
Normal file
@ -0,0 +1 @@
|
|||||||
|
Наш сертификат
|
1
conf/domain.key
Normal file
1
conf/domain.key
Normal file
@ -0,0 +1 @@
|
|||||||
|
Приватный ключ
|
@ -1,51 +0,0 @@
|
|||||||
services:
|
|
||||||
database:
|
|
||||||
image: postgres:17.4-alpine3.21
|
|
||||||
container_name: database
|
|
||||||
ports:
|
|
||||||
- "5432:5432"
|
|
||||||
environment:
|
|
||||||
POSTGRES_DB: ${POSTGRES_DB}
|
|
||||||
POSTGRES_USER: ${POSTGRES_USER}
|
|
||||||
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
||||||
|
|
||||||
#Монтируем директорию на хосте, чтобы при повторных "docker-compose up" таблицы с нашими данными сохранялись
|
|
||||||
volumes:
|
|
||||||
- /database:/var/lib/postgresql/data
|
|
||||||
cpus: '0.15'
|
|
||||||
mem_limit: 256M
|
|
||||||
|
|
||||||
healthcheck:
|
|
||||||
test: ["CMD-SHELL", "pg_isready -U admin -WebSite"]
|
|
||||||
interval: 5s
|
|
||||||
timeout: 5s
|
|
||||||
retries: 5
|
|
||||||
|
|
||||||
webserver:
|
|
||||||
image: nginx:1.27.4-alpine
|
|
||||||
container_name: webserver
|
|
||||||
ports:
|
|
||||||
- "80:80"
|
|
||||||
- "443:443"
|
|
||||||
volumes:
|
|
||||||
- /WebApp/frontend:/usr/share/nginx/html
|
|
||||||
- /WebApp/nginx/ssl:/etc/nginx/sites-available
|
|
||||||
- /WebApp/nginx/nginx.conf:/etc/nginx/nginx.conf
|
|
||||||
|
|
||||||
depends_on:
|
|
||||||
- database
|
|
||||||
- backend
|
|
||||||
cpus: '0.15'
|
|
||||||
mem_limit: 256M
|
|
||||||
backend:
|
|
||||||
image: python:3.9
|
|
||||||
container_name: backend_part
|
|
||||||
ports:
|
|
||||||
- "5000:5000"
|
|
||||||
volumes:
|
|
||||||
- /WebApp/backend:/media/backend
|
|
||||||
working_dir: /media/backend
|
|
||||||
command: >
|
|
||||||
sh -c "pip install -r requirements.txt && python server.py"
|
|
||||||
cpus: '0.35'
|
|
||||||
mem_limit: 256M
|
|
51
docker/docker-compose.yml
Normal file
51
docker/docker-compose.yml
Normal file
@ -0,0 +1,51 @@
|
|||||||
|
services:
|
||||||
|
|
||||||
|
DataBase:
|
||||||
|
image: postgres:latest
|
||||||
|
container_name: DataBase
|
||||||
|
ports:
|
||||||
|
- "5432:5432"
|
||||||
|
#Так никто не делает в реальных кейсах, я просто даун, не умею работать с секретами (опция secrets)
|
||||||
|
environment:
|
||||||
|
POSTGRES_USER: user
|
||||||
|
POSTGRES_PASSWORD: password
|
||||||
|
POSTGRES_DB: WebSite
|
||||||
|
volumes:
|
||||||
|
- /home/git/myprojects/database:/var/lib/postgresql/data
|
||||||
|
cpus: '0.15'
|
||||||
|
mem_limit: 256M
|
||||||
|
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD-SHELL", "pg_isready -U admin -WebSite"]
|
||||||
|
interval: 5s
|
||||||
|
timeout: 5s
|
||||||
|
retries: 5
|
||||||
|
|
||||||
|
webserver:
|
||||||
|
image: nginx:latest
|
||||||
|
container_name: WebServer
|
||||||
|
ports:
|
||||||
|
- "80:80"
|
||||||
|
- "443:443"
|
||||||
|
volumes:
|
||||||
|
- /home/git/myprojects/WorkServer/frontend:/usr/share/nginx/html
|
||||||
|
- /home/git/myprojects/WorkServer/conf:/etc/nginx/sites-available
|
||||||
|
|
||||||
|
depends_on:
|
||||||
|
- DataBase
|
||||||
|
- backend
|
||||||
|
cpus: '0.15'
|
||||||
|
mem_limit: 256M
|
||||||
|
backend:
|
||||||
|
image: python:3.9
|
||||||
|
container_name: backend_part
|
||||||
|
ports:
|
||||||
|
- "5000:5000"
|
||||||
|
volumes:
|
||||||
|
- /home/git/myprojects/WorkServer/backend:/media/backend
|
||||||
|
- /home/git/myprojects/WorkServer/frontend:/media/frontend
|
||||||
|
working_dir: /media/backend
|
||||||
|
command: >
|
||||||
|
sh -c "pip install -r requirements.txt && python server.py"
|
||||||
|
cpus: '0.35'
|
||||||
|
mem_limit: 256M
|
3
docker/dockfile/Dockerfile
Normal file
3
docker/dockfile/Dockerfile
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
FROM nginx:v1
|
||||||
|
|
||||||
|
COPY nginx.conf /etc/nginx/nginx.conf
|
@ -4,10 +4,8 @@
|
|||||||
<meta charset="UTF-8">
|
<meta charset="UTF-8">
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
<title>Login and Register Form</title>
|
<title>Login and Register Form</title>
|
||||||
<link rel="stylesheet" href="./static/css/styles.css">
|
|
||||||
</head>
|
</head>
|
||||||
<body>
|
<body>
|
||||||
<div class="form-container">
|
|
||||||
<h1>Login Form</h1>
|
<h1>Login Form</h1>
|
||||||
<form action="/submit" method="post">
|
<form action="/submit" method="post">
|
||||||
<label for="username">Username:</label><br>
|
<label for="username">Username:</label><br>
|
||||||
@ -18,9 +16,7 @@
|
|||||||
|
|
||||||
<button type="submit" name="action" value="Login">Login</button>
|
<button type="submit" name="action" value="Login">Login</button>
|
||||||
</form>
|
</form>
|
||||||
</div>
|
|
||||||
|
|
||||||
<div class="form-container">
|
|
||||||
<h1>Register Form</h1>
|
<h1>Register Form</h1>
|
||||||
<form action="/submit" method="post">
|
<form action="/submit" method="post">
|
||||||
<label for="new_username">Username:</label><br>
|
<label for="new_username">Username:</label><br>
|
||||||
@ -31,6 +27,7 @@
|
|||||||
|
|
||||||
<button type="submit" name="action" value="Register">Register</button>
|
<button type="submit" name="action" value="Register">Register</button>
|
||||||
</form>
|
</form>
|
||||||
</div>
|
|
||||||
|
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
@ -1,68 +0,0 @@
|
|||||||
/* Общие стили */
|
|
||||||
body {
|
|
||||||
font-family: Arial, sans-serif;
|
|
||||||
background-color: #f4f4f4;
|
|
||||||
margin: 0;
|
|
||||||
padding: 20px;
|
|
||||||
display: flex;
|
|
||||||
flex-direction: column; /* Располагаем контейнеры вертикально */
|
|
||||||
justify-content: center;
|
|
||||||
align-items: center;
|
|
||||||
min-height: 100vh;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
/* Контейнер для форм */
|
|
||||||
.form-container { /* Изменили селектор на класс .form-container */
|
|
||||||
width: 100%;
|
|
||||||
max-width: 400px;
|
|
||||||
padding: 20px;
|
|
||||||
background-color: #fff;
|
|
||||||
border-radius: 8px;
|
|
||||||
box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
|
|
||||||
margin-bottom: 20px;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
/* Заголовки */
|
|
||||||
h1 {
|
|
||||||
text-align: center;
|
|
||||||
color: #333;
|
|
||||||
margin-bottom: 20px;
|
|
||||||
}
|
|
||||||
|
|
||||||
/* Метки (labels) */
|
|
||||||
label {
|
|
||||||
display: block;
|
|
||||||
margin-bottom: 5px;
|
|
||||||
font-weight: bold;
|
|
||||||
color: #555;
|
|
||||||
}
|
|
||||||
|
|
||||||
/* Поля ввода (input) */
|
|
||||||
input[type="text"],
|
|
||||||
input[type="password"] {
|
|
||||||
width: 100%;
|
|
||||||
padding: 10px;
|
|
||||||
margin-bottom: 20px;
|
|
||||||
border: 1px solid #ccc;
|
|
||||||
border-radius: 4px;
|
|
||||||
box-sizing: border-box;
|
|
||||||
}
|
|
||||||
|
|
||||||
/* Кнопки */
|
|
||||||
button {
|
|
||||||
background-color: #4CAF50;
|
|
||||||
color: white;
|
|
||||||
padding: 12px 20px;
|
|
||||||
border: none;
|
|
||||||
border-radius: 4px;
|
|
||||||
cursor: pointer;
|
|
||||||
width: 100%;
|
|
||||||
font-size: 16px;
|
|
||||||
transition: background-color 0.3s ease;
|
|
||||||
}
|
|
||||||
|
|
||||||
button:hover {
|
|
||||||
background-color: #45a049;
|
|
||||||
}
|
|
@ -1 +0,0 @@
|
|||||||
Наш публичный ключ
|
|
@ -1 +0,0 @@
|
|||||||
Наш приватный ключ
|
|
21
post-receive
Normal file
21
post-receive
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
TARGET="/home/git/myprojects/WorkServer"
|
||||||
|
GIT_DIR="/home/git/myprojects/web"
|
||||||
|
BRANCH="master"
|
||||||
|
|
||||||
|
git --work-tree="$TARGET" --git-dir="$GIT_DIR" checkout -f "$BRANCH"
|
||||||
|
|
||||||
|
cd /home/git/myprojects/WorkServer/docker
|
||||||
|
|
||||||
|
#docker-compose block:
|
||||||
|
|
||||||
|
# 1
|
||||||
|
docker-compose build
|
||||||
|
|
||||||
|
# 2
|
||||||
|
docker-compose down
|
||||||
|
|
||||||
|
# 3
|
||||||
|
docker-compose up -d
|
||||||
|
|
@ -1,25 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
TARGET="path to work repo"
|
|
||||||
GIT_DIR="Path to .git repo"
|
|
||||||
BRANCH="master"
|
|
||||||
LOG_FILE="/var/log/deploy.log"
|
|
||||||
|
|
||||||
exec > >(tee -a "$LOG_FILE") 2>&1
|
|
||||||
echo "[$(date '+%Y-%m-%d %H:%M:%S')] Starting deploy..."
|
|
||||||
git --work-tree="$TARGET" --git-dir="$GIT_DIR" checkout -f "$BRANCH"
|
|
||||||
|
|
||||||
cd $TARGET
|
|
||||||
|
|
||||||
#docker-compose block:
|
|
||||||
|
|
||||||
# 1
|
|
||||||
docker-compose build
|
|
||||||
|
|
||||||
# 2
|
|
||||||
docker-compose down
|
|
||||||
|
|
||||||
# 3
|
|
||||||
docker-compose up -d
|
|
||||||
|
|
||||||
echo "[$(date '+%Y-%m-%d %H:%M:%S')] Deploy successful!"
|
|
Loading…
x
Reference in New Issue
Block a user