mirror of
http://172.20.10.11:3000/gitadmin/INSIGHT-MVP.git
synced 2026-06-24 23:56:40 +02:00
10f291cdda
Docker Infrastructure:
- docker-compose.yml with Traefik 3, PostgreSQL 16, PgBouncer, Redis 7, step-ca
- docker-compose.observability.yml with Prometheus, Grafana, Loki, Tempo, Promtail
- Traefik dynamic config (TLS, security headers, CORS, compression)
- PostgreSQL init script (uuid-ossp, pgcrypto, pg_trgm extensions)
- Grafana auto-provisioned datasources (Prometheus, Loki, Tempo)
NestJS Core-Service:
- Auth module: Login (email/password), TOTP 2FA, JWT RS256, token refresh/revocation
- Users module: CRUD, bcrypt cost 12, pagination, role-based access
- Tenants module: CRUD, member management, slug validation
- Prisma schemas: core (Users, AuthProviders, Tenants, Modules, AuditLog)
tenant (Contacts, Activities - CRM reference for Sprint 2)
- TenantPrismaService: Dynamic per-tenant DB connections with caching
- RedisService: Token blocklist, refresh token families, generic cache
- Global JwtAuthGuard with @Public() decorator, RolesGuard, GlobalExceptionFilter
- Health endpoint with DB + Redis status checks
- Swagger API documentation (dev only)
- Multi-stage Dockerfile (dev + production)
React Frontend:
- Vite 6 + React 18 + TypeScript strict
- AuthContext with silent refresh (access token in memory, NOT localStorage)
- Login page with TOTP 2FA support
- App shell with sidebar navigation
- Admin pages: Users + Tenants management tables
- API client with automatic token refresh interceptor
- Multi-stage Dockerfile (dev + nginx production)
CI/CD Pipelines:
- ci.yml: Lint, type-check, test, build on all branches
- deploy.yml: Docker build, push to Forgejo registry, SSH deploy
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
56 lines
1.3 KiB
Docker
56 lines
1.3 KiB
Docker
# ============================================================
|
|
# INSIGHT Core-Service - Multi-Stage Dockerfile
|
|
# ============================================================
|
|
|
|
# --- Base Stage ---
|
|
FROM node:20-alpine AS base
|
|
WORKDIR /app
|
|
RUN apk add --no-cache openssl
|
|
|
|
# --- Dependencies Stage ---
|
|
FROM base AS deps
|
|
COPY package.json package-lock.json* ./
|
|
RUN npm ci --ignore-scripts
|
|
# Prisma Generate braucht die Schema-Dateien
|
|
COPY prisma ./prisma
|
|
RUN npx prisma generate --schema=prisma/core.schema.prisma
|
|
|
|
# --- Development Stage ---
|
|
FROM base AS development
|
|
WORKDIR /app
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
RUN npx prisma generate --schema=prisma/core.schema.prisma
|
|
EXPOSE 3000
|
|
CMD ["npm", "run", "start:dev"]
|
|
|
|
# --- Build Stage ---
|
|
FROM base AS build
|
|
WORKDIR /app
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
RUN npm run build
|
|
|
|
# --- Production Stage ---
|
|
FROM base AS production
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
|
|
# Nur Produktions-Dependencies
|
|
COPY package.json package-lock.json* ./
|
|
RUN npm ci --omit=dev --ignore-scripts
|
|
|
|
# Prisma Client generieren
|
|
COPY prisma ./prisma
|
|
RUN npx prisma generate --schema=prisma/core.schema.prisma
|
|
|
|
# Kompilierter Code
|
|
COPY --from=build /app/dist ./dist
|
|
|
|
# Non-root User
|
|
RUN addgroup -g 1001 -S nodejs && \
|
|
adduser -S nestjs -u 1001 -G nodejs
|
|
USER nestjs
|
|
|
|
EXPOSE 3000
|
|
CMD ["node", "dist/main"]
|