cryptorugmunch
8d25702eca
Squashed from chore/license-relicense. Full message preserved in the original branch commitbb77eb5. See ADR-0002 for the decision rationale. Refs: ADR-0002, commitbb77eb5
77 lines
1.7 KiB
Markdown
77 lines
1.7 KiB
Markdown
[//]: # (SPDX-License-Identifier: MIT)
|
|
[//]: # (Copyright (c) 2026 Rug Munch Media LLC)
|
|
# DEPLOYMENT.md — PryScraper
|
|
|
|
> How to deploy. Build, push, restart, rollback.
|
|
|
|
## Architecture
|
|
- Container: Docker
|
|
- Image registry: local (Talos)
|
|
- Orchestration: docker-compose on Talos
|
|
- Reverse proxy: nginx on Talos
|
|
- Auto-deploy: forgejo webhook → Talos deploy script
|
|
|
|
## Deploy
|
|
|
|
### Automatic (CI/CD)
|
|
On merge to `main`:
|
|
1. forgejo webhook fires
|
|
2. Talos deploy script pulls latest commit
|
|
3. Rebuilds Docker image
|
|
4. Stops old container, starts new
|
|
5. Runs health check
|
|
6. Rolls back on failure
|
|
|
|
### Manual
|
|
```bash
|
|
ssh netcup
|
|
cd /srv/pryscraper
|
|
git pull origin main
|
|
docker build -t pryscraper:latest .
|
|
docker stop pryscraper
|
|
docker rm pryscraper
|
|
docker run -d --name pryscraper --restart unless-stopped --network host -p 8005:8005 pryscraper:latest
|
|
```
|
|
|
|
## Health Check
|
|
```bash
|
|
curl -fsS http://localhost:8005/health
|
|
```
|
|
|
|
## Rollback
|
|
```bash
|
|
ssh netcup
|
|
cd /srv/pryscraper
|
|
git log --oneline -5 # find last good commit
|
|
git checkout <commit-hash>
|
|
docker build -t pryscraper:latest .
|
|
docker restart pryscraper
|
|
```
|
|
|
|
## Logs
|
|
```bash
|
|
docker logs pryscraper --tail 100 -f
|
|
```
|
|
|
|
## Monitoring
|
|
- Prometheus: `/metrics` endpoint
|
|
- Grafana: dashboards in fleet-infra
|
|
- Loki: log aggregation
|
|
|
|
## Secrets
|
|
All secrets in gopass:
|
|
- `rmi/pryscraper/admin_key`
|
|
- `rmi/pryscraper/db_password`
|
|
- _see AGENTS.md for full list_
|
|
|
|
Loaded via docker `--env-file` or systemd `EnvironmentFile`.
|
|
|
|
## Firewall
|
|
- Public: 80, 443 (nginx)
|
|
- Internal: 8005 (localhost only, behind nginx)
|
|
- Tailscale: 8005 for admin access
|
|
|
|
## Backup
|
|
- Code: forgejo (source of truth) + Hydra bare mirror (daily 04:00)
|
|
- Data: DB snapshot to R2 (daily)
|
|
- Config: gopass
|