mirror of
http://172.20.10.11:3000/gitadmin/INSIGHT-MVP.git
synced 2026-06-25 00:16:41 +02:00
10f291cdda
Docker Infrastructure:
- docker-compose.yml with Traefik 3, PostgreSQL 16, PgBouncer, Redis 7, step-ca
- docker-compose.observability.yml with Prometheus, Grafana, Loki, Tempo, Promtail
- Traefik dynamic config (TLS, security headers, CORS, compression)
- PostgreSQL init script (uuid-ossp, pgcrypto, pg_trgm extensions)
- Grafana auto-provisioned datasources (Prometheus, Loki, Tempo)
NestJS Core-Service:
- Auth module: Login (email/password), TOTP 2FA, JWT RS256, token refresh/revocation
- Users module: CRUD, bcrypt cost 12, pagination, role-based access
- Tenants module: CRUD, member management, slug validation
- Prisma schemas: core (Users, AuthProviders, Tenants, Modules, AuditLog)
tenant (Contacts, Activities - CRM reference for Sprint 2)
- TenantPrismaService: Dynamic per-tenant DB connections with caching
- RedisService: Token blocklist, refresh token families, generic cache
- Global JwtAuthGuard with @Public() decorator, RolesGuard, GlobalExceptionFilter
- Health endpoint with DB + Redis status checks
- Swagger API documentation (dev only)
- Multi-stage Dockerfile (dev + production)
React Frontend:
- Vite 6 + React 18 + TypeScript strict
- AuthContext with silent refresh (access token in memory, NOT localStorage)
- Login page with TOTP 2FA support
- App shell with sidebar navigation
- Admin pages: Users + Tenants management tables
- API client with automatic token refresh interceptor
- Multi-stage Dockerfile (dev + nginx production)
CI/CD Pipelines:
- ci.yml: Lint, type-check, test, build on all branches
- deploy.yml: Docker build, push to Forgejo registry, SSH deploy
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
47 lines
1.1 KiB
YAML
47 lines
1.1 KiB
YAML
# ============================================================
|
|
# Grafana - Datenquellen (automatisch provisioniert)
|
|
# ============================================================
|
|
|
|
apiVersion: 1
|
|
|
|
datasources:
|
|
# Prometheus - Metriken
|
|
- name: Prometheus
|
|
type: prometheus
|
|
access: proxy
|
|
url: http://prometheus:9090
|
|
isDefault: true
|
|
editable: false
|
|
|
|
# Loki - Logs
|
|
- name: Loki
|
|
type: loki
|
|
access: proxy
|
|
url: http://loki:3100
|
|
editable: false
|
|
jsonData:
|
|
derivedFields:
|
|
- datasourceUid: tempo
|
|
matcherRegex: "traceId=(\\w+)"
|
|
name: TraceID
|
|
url: "$${__value.raw}"
|
|
|
|
# Tempo - Traces
|
|
- name: Tempo
|
|
type: tempo
|
|
access: proxy
|
|
uid: tempo
|
|
url: http://tempo:3200
|
|
editable: false
|
|
jsonData:
|
|
tracesToLogs:
|
|
datasourceUid: loki
|
|
tags: ['service']
|
|
mappedTags: [{ key: 'service.name', value: 'service' }]
|
|
mapTagNamesEnabled: true
|
|
filterByTraceID: true
|
|
tracesToMetrics:
|
|
datasourceUid: prometheus
|
|
tags: [{ key: 'service.name', value: 'service' }]
|
|
serviceMap:
|
|
datasourceUid: prometheus
|