From 9c8aecec939e31306e5a5606c3736ebb253c0fdd Mon Sep 17 00:00:00 2001 From: Matthieu Date: Wed, 1 Apr 2026 12:08:32 +0200 Subject: [PATCH] feat : add Docker production deployment Co-Authored-By: Claude Opus 4.6 (1M context) --- .dockerignore | 24 +++ .gitea/workflows/build-docker.yml | 32 +++ deploy/docker/.env.example | 10 + deploy/docker/Dockerfile.prod | 83 +++++++ deploy/docker/deploy.sh | 28 +++ deploy/docker/docker-compose.prod.yml | 12 ++ deploy/docker/nginx.conf | 36 ++++ deploy/docker/supervisord.conf | 28 +++ deploy/nginx/inventory-docker.conf | 13 ++ doc/deployment-docker.md | 299 ++++++++++++++++++++++++++ 10 files changed, 565 insertions(+) create mode 100644 .dockerignore create mode 100644 .gitea/workflows/build-docker.yml create mode 100644 deploy/docker/.env.example create mode 100644 deploy/docker/Dockerfile.prod create mode 100755 deploy/docker/deploy.sh create mode 100644 deploy/docker/docker-compose.prod.yml create mode 100644 deploy/docker/nginx.conf create mode 100644 deploy/docker/supervisord.conf create mode 100644 deploy/nginx/inventory-docker.conf create mode 100644 doc/deployment-docker.md diff --git a/.dockerignore b/.dockerignore new file mode 100644 index 0000000..b6ecff4 --- /dev/null +++ b/.dockerignore @@ -0,0 +1,24 @@ +.git +.gitea +.env.local +.env.test +docker/ +deploy/docker/docker-compose.prod.yml +deploy/docker/deploy.sh +deploy/docker/.env.example +Inventory_frontend/node_modules +Inventory_frontend/.nuxt +Inventory_frontend/.output +var/ +vendor/ +LOG/ +docs/ +tests/ +scripts/ +*.sql +*.xlsx +*.png +*.md +!composer.lock +!symfony.lock +!Inventory_frontend/package-lock.json diff --git a/.gitea/workflows/build-docker.yml b/.gitea/workflows/build-docker.yml new file mode 100644 index 0000000..cfcbb97 --- /dev/null +++ b/.gitea/workflows/build-docker.yml @@ -0,0 +1,32 @@ +name: Build & Push Docker Image + +on: + push: + tags: + - "v*" + +jobs: + build: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + with: + submodules: true + + - name: Login to Gitea Registry + run: | + echo "${{ secrets.REGISTRY_TOKEN }}" | docker login gitea.malio.fr -u "${{ gitea.repository_owner }}" --password-stdin + + - name: Build Docker image + run: | + docker build \ + -f deploy/docker/Dockerfile.prod \ + -t gitea.malio.fr/malio-dev/inventory:${{ gitea.ref_name }} \ + -t gitea.malio.fr/malio-dev/inventory:latest \ + . + + - name: Push Docker image + run: | + docker push gitea.malio.fr/malio-dev/inventory:${{ gitea.ref_name }} + docker push gitea.malio.fr/malio-dev/inventory:latest diff --git a/deploy/docker/.env.example b/deploy/docker/.env.example new file mode 100644 index 0000000..d0cabde --- /dev/null +++ b/deploy/docker/.env.example @@ -0,0 +1,10 @@ +# Symfony +APP_ENV=prod +APP_DEBUG=0 +APP_SECRET=change-me + +# Database (use host.docker.internal to reach bare-metal PostgreSQL) +DATABASE_URL="postgresql://inventory_user:password@host.docker.internal:5432/inventory_prod?serverVersion=16&charset=utf8" + +# CORS +CORS_ALLOW_ORIGIN='^https?://inventory\.malio-dev\.fr$' diff --git a/deploy/docker/Dockerfile.prod b/deploy/docker/Dockerfile.prod new file mode 100644 index 0000000..f27b86c --- /dev/null +++ b/deploy/docker/Dockerfile.prod @@ -0,0 +1,83 @@ +# --- Stage 1: Build backend --- +FROM php:8.4-cli AS backend-build + +RUN apt-get update && apt-get install -y \ + libicu-dev libpq-dev libpng-dev libzip-dev libxml2-dev \ + unzip curl git \ + && docker-php-ext-install -j$(nproc) intl pdo_pgsql zip gd opcache \ + && rm -rf /var/lib/apt/lists/* + +COPY --from=composer:2 /usr/bin/composer /usr/bin/composer + +WORKDIR /app +COPY composer.json composer.lock symfony.lock ./ +RUN APP_ENV=prod APP_DEBUG=0 composer install --no-dev --no-scripts --no-interaction + +COPY bin bin/ +COPY config config/ +COPY migrations migrations/ +COPY public public/ +COPY src src/ +COPY templates templates/ +COPY VERSION VERSION + +RUN composer dump-autoload --optimize --no-dev + +# --- Stage 2: Build frontend --- +FROM node:lts-alpine AS frontend-build + +WORKDIR /app/Inventory_frontend +COPY Inventory_frontend/package.json Inventory_frontend/package-lock.json ./ +RUN npm ci + +COPY Inventory_frontend/ ./ +ENV CI=1 \ + NUXT_TELEMETRY_DISABLED=1 \ + NUXT_PUBLIC_API_BASE_URL=/api \ + NUXT_PUBLIC_APP_BASE=/ +RUN npm run generate + +# --- Stage 3: Production image --- +FROM php:8.4-fpm AS production + +RUN apt-get update && apt-get install -y \ + libicu-dev libpq-dev libpng-dev libzip-dev libxml2-dev \ + nginx supervisor \ + && docker-php-ext-install -j$(nproc) intl pdo_pgsql zip gd opcache \ + && rm -rf /var/lib/apt/lists/* + +# PHP production config +RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini" + +# PHP-FPM: forward worker output to stderr for docker logs +RUN echo "catch_workers_output = yes" >> /usr/local/etc/php-fpm.d/www.conf \ + && echo "decorate_workers_output = no" >> /usr/local/etc/php-fpm.d/www.conf + +# Nginx: log to stdout/stderr +RUN ln -sf /dev/stdout /var/log/nginx/access.log \ + && ln -sf /dev/stderr /var/log/nginx/error.log + +# Remove default nginx site +RUN rm -f /etc/nginx/sites-enabled/default + +# Configs +COPY deploy/docker/supervisord.conf /etc/supervisor/conf.d/app.conf +COPY deploy/docker/nginx.conf /etc/nginx/sites-enabled/inventory.conf + +# Backend from stage 1 +COPY --from=backend-build /app /var/www/html + +# Frontend from stage 2 +COPY --from=frontend-build /app/Inventory_frontend/.output/public /var/www/html/Inventory_frontend/.output/public + +# Symfony needs a .env file to boot (variables are overridden by env_file in docker-compose) +RUN echo "APP_ENV=prod" > /var/www/html/.env + +# Permissions +RUN mkdir -p /var/www/html/var /var/www/html/var/uploads \ + && chown -R www-data:www-data /var/www/html/var + +WORKDIR /var/www/html +EXPOSE 80 + +CMD ["supervisord", "-n", "-c", "/etc/supervisor/conf.d/app.conf"] diff --git a/deploy/docker/deploy.sh b/deploy/docker/deploy.sh new file mode 100755 index 0000000..c2a0ee5 --- /dev/null +++ b/deploy/docker/deploy.sh @@ -0,0 +1,28 @@ +#!/usr/bin/env bash +set -euo pipefail + +cd "$(dirname "$0")" + +TAG="${1:-latest}" +export INVENTORY_IMAGE_TAG="$TAG" + +echo "==> Deploying inventory:${TAG}..." + +echo "==> Pulling image..." +sudo docker compose pull + +echo "==> Starting container..." +sudo docker compose up -d + +echo "==> Waiting for container to be ready..." +sleep 3 + +echo "==> Running migrations..." +sudo docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate --no-interaction + +echo "==> Clearing cache..." +sudo docker compose exec -T -u www-data app php bin/console cache:clear --env=prod +sudo docker compose exec -T -u www-data app php bin/console cache:warmup --env=prod + +VERSION=$(sudo docker compose exec -T app cat VERSION) +echo "==> Deployed v${VERSION}" diff --git a/deploy/docker/docker-compose.prod.yml b/deploy/docker/docker-compose.prod.yml new file mode 100644 index 0000000..4d46b24 --- /dev/null +++ b/deploy/docker/docker-compose.prod.yml @@ -0,0 +1,12 @@ +services: + app: + image: gitea.malio.fr/malio-dev/inventory:${INVENTORY_IMAGE_TAG:-latest} + container_name: inventory-app + env_file: .env + ports: + - "8082:80" + volumes: + - ./uploads:/var/www/html/var/uploads + extra_hosts: + - "host.docker.internal:host-gateway" + restart: unless-stopped diff --git a/deploy/docker/nginx.conf b/deploy/docker/nginx.conf new file mode 100644 index 0000000..b3484af --- /dev/null +++ b/deploy/docker/nginx.conf @@ -0,0 +1,36 @@ +server { + listen 80; + server_name _; + + root /var/www/html/Inventory_frontend/.output/public; + index index.html; + + access_log /dev/stdout; + error_log /dev/stderr; + + location ^~ /api/ { + root /var/www/html/public; + try_files $uri /index.php?$query_string; + } + + location ^~ /bundles/ { + root /var/www/html/public; + try_files $uri =404; + } + + location ~ ^/index\.php(/|$) { + include fastcgi_params; + fastcgi_param SCRIPT_FILENAME /var/www/html/public/index.php; + fastcgi_param DOCUMENT_ROOT /var/www/html/public; + fastcgi_pass 127.0.0.1:9000; + internal; + } + + location ~ \.php$ { + return 404; + } + + location / { + try_files $uri $uri/ /index.html; + } +} diff --git a/deploy/docker/supervisord.conf b/deploy/docker/supervisord.conf new file mode 100644 index 0000000..dafb36a --- /dev/null +++ b/deploy/docker/supervisord.conf @@ -0,0 +1,28 @@ +[supervisord] +nodaemon=true +user=root +logfile=/dev/null +logfile_maxbytes=0 +pidfile=/var/run/supervisord.pid + +[program:php-fpm] +command=php-fpm -F +autostart=true +autorestart=true +stdout_logfile=/dev/stdout +stdout_logfile_maxbytes=0 +stderr_logfile=/dev/stderr +stderr_logfile_maxbytes=0 +stopasgroup=true +stopsignal=QUIT + +[program:nginx] +command=nginx -g "daemon off;" +autostart=true +autorestart=true +stdout_logfile=/dev/stdout +stdout_logfile_maxbytes=0 +stderr_logfile=/dev/stderr +stderr_logfile_maxbytes=0 +stopasgroup=true +stopsignal=QUIT diff --git a/deploy/nginx/inventory-docker.conf b/deploy/nginx/inventory-docker.conf new file mode 100644 index 0000000..d65a824 --- /dev/null +++ b/deploy/nginx/inventory-docker.conf @@ -0,0 +1,13 @@ +server { + listen 80; + listen [::]:80; + server_name inventory.malio-dev.fr; + + location / { + proxy_pass http://127.0.0.1:8080; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +} diff --git a/doc/deployment-docker.md b/doc/deployment-docker.md new file mode 100644 index 0000000..c50502b --- /dev/null +++ b/doc/deployment-docker.md @@ -0,0 +1,299 @@ +# Deploiement Docker — Inventory + +## Pre-requis + +### Docker + +```bash +# Ubuntu +sudo apt update +sudo apt install -y ca-certificates curl gnupg +sudo install -m 0755 -d /etc/apt/keyrings +curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg +echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null +sudo apt update +sudo apt install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin +sudo usermod -aG docker $USER +``` + +Se deconnecter/reconnecter pour que le groupe `docker` prenne effet. + +### Nginx + +```bash +sudo apt install -y nginx +sudo systemctl enable nginx +sudo systemctl start nginx +``` + +### PostgreSQL + +PostgreSQL tourne dans un conteneur Docker separe (voir le repo `infra-postgres`). +Il doit etre installe et accessible avant de deployer Inventory. + +Creer la base de donnees pour Inventory : + +```bash +cd /var/www/postgres +docker compose exec postgres psql -U admin +``` + +```sql +-- Si le user n'existe pas encore +CREATE USER malio WITH PASSWORD 'motdepasse'; + +-- Creer la base +CREATE DATABASE inventory_prod OWNER malio; +\q +``` + +--- + +## Premiere installation (nouvelle machine) + +Guide complet pour mettre en ligne Inventory sur une machine vierge. Inclut les pre-requis, la BDD et l'app. + +### 1. Installer les pre-requis + +Installer Docker, Nginx et PostgreSQL (voir section Pre-requis ci-dessus). + +### 2. Creer le dossier de deploiement + +```bash +sudo mkdir -p /var/www/inventory +sudo chown -R $(whoami):$(whoami) /var/www/inventory +cd /var/www/inventory +``` + +### 3. Se connecter au registry Docker de Gitea + +```bash +docker login gitea.malio.fr +``` + +- **Username** : le nom d'utilisateur du compte organisation Gitea `MALIO` +- **Password** : le token REGISTRY_TOKEN dispo dans le bitwarden + +Le login est sauvegarde dans `~/.docker/config.json`, pas besoin de le refaire a chaque deploiement. + +### 4. Creer les fichiers de deploiement + +Creer `docker-compose.yml` : + +```yaml +services: + app: + image: gitea.malio.fr/malio-dev/inventory:${INVENTORY_IMAGE_TAG:-latest} + container_name: inventory-app + env_file: .env + ports: + - "8080:80" + volumes: + - ./uploads:/var/www/html/var/uploads + extra_hosts: + - "host.docker.internal:host-gateway" + restart: unless-stopped +``` + +Creer `deploy.sh` : + +```bash +#!/usr/bin/env bash +set -euo pipefail + +cd "$(dirname "$0")" + +TAG="${1:-latest}" +export INVENTORY_IMAGE_TAG="$TAG" + +echo "==> Deploying inventory:${TAG}..." + +echo "==> Pulling image..." +docker compose pull + +echo "==> Starting container..." +docker compose up -d + +echo "==> Waiting for container to be ready..." +sleep 3 + +echo "==> Running migrations..." +docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate --no-interaction + +echo "==> Clearing cache..." +docker compose exec -T -u www-data app php bin/console cache:clear --env=prod +docker compose exec -T -u www-data app php bin/console cache:warmup --env=prod + +VERSION=$(docker compose exec -T app cat VERSION) +echo "==> Deployed v${VERSION}" +``` + +Rendre executable : + +```bash +chmod +x deploy.sh +``` + +### 5. Configurer l'environnement + +Creer `.env` avec les variables suivantes : + +```env +# Symfony +APP_ENV=prod +APP_DEBUG=0 +APP_SECRET= + +# Database (host.docker.internal = la machine hote, ou le PG tourne en Docker) +DATABASE_URL="postgresql://malio:password@host.docker.internal:5432/inventory_prod?serverVersion=16&charset=utf8" + +# CORS +CORS_ALLOW_ORIGIN='^https?://inventory\.malio-dev\.fr$' +``` + +### 6. Creer le dossier uploads + +```bash +mkdir -p uploads +``` + +### 7. Configurer Nginx systeme + +Creer `/etc/nginx/sites-available/inventory.conf` : + +```nginx +server { + listen 80; + server_name inventory.malio-dev.fr; + + location / { + proxy_pass http://127.0.0.1:8080; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +} +``` + +Activer le site : + +```bash +sudo ln -sf /etc/nginx/sites-available/inventory.conf /etc/nginx/sites-enabled/inventory.conf +sudo nginx -t && sudo systemctl reload nginx +``` + +### 8. Deployer + +```bash +./deploy.sh +``` + +### 9. Importer les donnees (optionnel) + +Si tu as un dump SQL a importer : + +```bash +# Depuis ton PC, envoyer le dump vers le serveur +scp inventory.sql user@serveur:/tmp/inventory.sql + +# Sur le serveur, vider la base puis importer +cd /var/www/postgres +docker compose exec -T postgres psql -U malio inventory_prod -c "DROP SCHEMA public CASCADE; CREATE SCHEMA public;" +docker compose exec -T postgres psql -U malio inventory_prod < /tmp/inventory.sql + +# Creer les tables manquantes (si le dump a des erreurs de syntaxe) +cd /var/www/inventory +docker compose exec -u www-data app php bin/console doctrine:schema:update --force --env=prod + +# Nettoyer +rm /tmp/inventory.sql +``` + +### Structure finale du dossier + +``` +/var/www/inventory/ +├── docker-compose.yml +├── deploy.sh +├── .env +└── uploads/ +``` + +--- + +## Deployer une nouvelle version + +Quand l'app est deja installee, deployer une mise a jour : + +```bash +cd /var/www/inventory +./deploy.sh # deploie la derniere version (latest) +./deploy.sh v1.9.4 # deploie une version specifique +``` + +C'est tout. Le script pull l'image, redemarre le conteneur, lance les migrations et vide le cache. + +--- + +## Rollback + +### Image seule (pas de changement de schema BDD) + +```bash +./deploy.sh v1.9.3 +``` + +### Avec rollback de migration + +```bash +# 1. Rollback schema (pendant que la version actuelle tourne encore) +docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate prev --no-interaction +# 2. Deployer l'ancienne version +./deploy.sh v1.9.3 +``` + +--- + +## CI/CD + +Le workflow `.gitea/workflows/build-docker.yml` se declenche automatiquement sur push de tag `v*` : +1. Build l'image multi-stage (inclut checkout des submodules pour le frontend) +2. Push vers `gitea.malio.fr/malio-dev/inventory:` et `:latest` + +--- + +## Voir les logs + +```bash +cd /var/www/inventory +docker compose logs -f # tous les logs +docker compose logs -f --tail=100 # 100 dernieres lignes +``` + +Logs Symfony : + +```bash +docker compose exec app cat var/log/prod.log +``` + +--- + +## Migration depuis l'ancien deploiement (bare-metal) + +Si l'application tourne deja en bare metal : + +1. Installer Docker (voir pre-requis) +2. Creer le dossier `/var/www/inventory-docker/` (ne pas ecraser l'ancien) +3. Copier les fichiers existants : + ```bash + cp /var/www/inventory/.env /var/www/inventory-docker/.env + cp -a /var/www/inventory/var/uploads /var/www/inventory-docker/uploads + ``` +4. Creer `docker-compose.yml` et `deploy.sh` dans `/var/www/inventory-docker/` (voir etape 4 ci-dessus) +5. Editer `/var/www/inventory-docker/.env` : changer `DATABASE_URL` pour utiliser `host.docker.internal` au lieu de `127.0.0.1` +6. Se connecter au registry Gitea (voir etape 3 ci-dessus) +7. Mettre a jour Nginx systeme avec la conf reverse proxy (voir etape 7 ci-dessus) +8. Arreter l'ancien PHP-FPM/Apache : `sudo systemctl stop php8.4-fpm` ou `sudo systemctl stop apache2` +9. Deployer : `cd /var/www/inventory-docker && ./deploy.sh` +10. Verifier que tout marche, puis renommer le dossier : `mv /var/www/inventory-docker /var/www/inventory`