Marius Mutu
6b13ffa183
Modern ERP Reports Application with microservices architecture Tech Stack: - Backend: FastAPI + python-oracledb (Oracle DB integration) - Frontend: Vue.js 3 + PrimeVue + Vite - Telegram Bot: python-telegram-bot + SQLite - Infrastructure: Shared database pool, JWT authentication, SSH tunnel Features: - FastAPI backend with async Oracle connection pool - Vue.js 3 responsive frontend with PrimeVue components - Telegram bot alternative interface - Microservices architecture with shared components - Complete deployment support (Linux Docker + Windows IIS) - Comprehensive testing (Playwright E2E + pytest) Repository Structure: - reports-app/ - Main application (backend, frontend, telegram-bot) - shared/ - Shared components (database pool, auth, utils) - deployment/ - Deployment scripts (Linux & Windows) - docs/ - Project documentation - security/ - Security scanning and git hooks
51 lines
1.6 KiB
Docker
51 lines
1.6 KiB
Docker
FROM nginx:1.25-alpine
|
|
|
|
# Install necessary packages for SSL and security
|
|
RUN apk add --no-cache \
|
|
tini \
|
|
openssl \
|
|
certbot \
|
|
certbot-nginx \
|
|
&& rm -rf /var/cache/apk/*
|
|
|
|
# Create non-root user
|
|
RUN addgroup -g 1001 -S nginx-user && \
|
|
adduser -S -D -H -u 1001 -h /var/cache/nginx -s /sbin/nologin -G nginx-user nginx-user
|
|
|
|
# Create directories
|
|
RUN mkdir -p /etc/nginx/conf.d \
|
|
/etc/nginx/sites-enabled \
|
|
/var/log/nginx \
|
|
/etc/letsencrypt \
|
|
/var/www/certbot
|
|
|
|
# Copy configuration files
|
|
COPY conf/nginx.conf /etc/nginx/nginx.conf
|
|
COPY conf/sites-enabled/ /etc/nginx/sites-enabled/
|
|
COPY conf/ssl.conf /etc/nginx/conf.d/ssl.conf
|
|
COPY conf/upstream.conf /etc/nginx/conf.d/upstream.conf
|
|
COPY conf/security.conf /etc/nginx/conf.d/security.conf
|
|
|
|
# Copy SSL maintenance scripts
|
|
COPY scripts/ssl-renew.sh /usr/local/bin/ssl-renew.sh
|
|
RUN chmod +x /usr/local/bin/ssl-renew.sh
|
|
|
|
# Set proper permissions
|
|
RUN chown -R nginx-user:nginx-user /var/cache/nginx \
|
|
/var/log/nginx \
|
|
/etc/nginx/conf.d \
|
|
/etc/nginx/sites-enabled \
|
|
/var/www/certbot
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
|
|
CMD wget --no-verbose --tries=1 --spider http://localhost/health || exit 1
|
|
|
|
# Expose ports
|
|
EXPOSE 80 443
|
|
|
|
# Use tini as init system
|
|
ENTRYPOINT ["/sbin/tini", "--"]
|
|
|
|
# Start Nginx (run as root for port binding, nginx will drop privileges)
|
|
CMD ["nginx", "-g", "daemon off;"] |