feat(services): add unified Docker deployment system
- Add docker-compose.yml for all 11 backend services - Add deploy.sh automation script with install/build/up/down commands - Add init-databases.sh for PostgreSQL multi-database initialization - Add .env.example template with secure key placeholders - Fix empty Dockerfiles for admin/referral/reporting/wallet services Services included: - identity-service (:3000) - wallet-service (:3001) - backup-service (:3002) - planting-service (:3003) - referral-service (:3004) - reward-service (:3005) - mpc-service (:3006) - leaderboard-service (:3007) - reporting-service (:3008) - authorization-service (:3009) - admin-service (:3010) Infrastructure: PostgreSQL, Redis, Kafka/Zookeeper 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Developer
parent
7d257cd35f
commit
f99cac21cf
|
|
@ -0,0 +1,32 @@
|
||||||
|
# =============================================================================
|
||||||
|
# RWA Backend Services - Environment Configuration Template
|
||||||
|
# =============================================================================
|
||||||
|
# Copy this file to .env and fill in the values
|
||||||
|
# WARNING: Never commit .env to version control!
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# PostgreSQL Database
|
||||||
|
POSTGRES_USER=rwa_user
|
||||||
|
POSTGRES_PASSWORD=your_secure_password_here
|
||||||
|
|
||||||
|
# Redis (leave empty for no password)
|
||||||
|
REDIS_PASSWORD=
|
||||||
|
|
||||||
|
# JWT Configuration (generate with: openssl rand -base64 32)
|
||||||
|
JWT_SECRET=your_jwt_secret_here
|
||||||
|
|
||||||
|
# Service-to-Service Authentication
|
||||||
|
SERVICE_JWT_SECRET=your_service_jwt_secret_here
|
||||||
|
|
||||||
|
# Wallet Encryption Salt
|
||||||
|
WALLET_ENCRYPTION_SALT=your_wallet_salt_here
|
||||||
|
|
||||||
|
# Backup Encryption Key (256-bit hex: openssl rand -hex 32)
|
||||||
|
BACKUP_ENCRYPTION_KEY=your_64_char_hex_key_here
|
||||||
|
|
||||||
|
# MPC Share Master Key (256-bit hex: openssl rand -hex 32)
|
||||||
|
SHARE_MASTER_KEY=your_64_char_hex_key_here
|
||||||
|
|
||||||
|
# MPC System Address (running on 192.168.1.100)
|
||||||
|
MPC_COORDINATOR_URL=http://192.168.1.100:8081
|
||||||
|
MPC_MESSAGE_ROUTER_URL=ws://192.168.1.100:8082
|
||||||
|
|
@ -0,0 +1,16 @@
|
||||||
|
# Environment files (contain secrets)
|
||||||
|
.env
|
||||||
|
.env.local
|
||||||
|
.env.production.local
|
||||||
|
|
||||||
|
# Docker volumes (if local)
|
||||||
|
postgres_data/
|
||||||
|
redis_data/
|
||||||
|
|
||||||
|
# Logs
|
||||||
|
*.log
|
||||||
|
logs/
|
||||||
|
|
||||||
|
# OS files
|
||||||
|
.DS_Store
|
||||||
|
Thumbs.db
|
||||||
|
|
@ -0,0 +1,173 @@
|
||||||
|
# RWA Backend Services
|
||||||
|
|
||||||
|
统一部署管理 RWA 后端微服务。
|
||||||
|
|
||||||
|
## 架构概览
|
||||||
|
|
||||||
|
```
|
||||||
|
┌─────────────────────────────────────────────────────────────────┐
|
||||||
|
│ 192.168.1.100 (Gateway) │
|
||||||
|
│ ┌─────────────┐ ┌─────────────────────────────────────────┐ │
|
||||||
|
│ │ Nginx │ │ MPC-System (Go) │ │
|
||||||
|
│ │ (Reverse │ │ - session-coordinator (:8081) │ │
|
||||||
|
│ │ Proxy) │ │ - message-router (:8082) │ │
|
||||||
|
│ │ │ │ - server-party-1/2/3 (:8083-8085) │ │
|
||||||
|
│ └─────────────┘ │ - account-service (:8080) │ │
|
||||||
|
│ └─────────────────────────────────────────────┘ │
|
||||||
|
└─────────────────────────────────────────────────────────────────┘
|
||||||
|
│
|
||||||
|
│ Internal Network
|
||||||
|
▼
|
||||||
|
┌─────────────────────────────────────────────────────────────────┐
|
||||||
|
│ 192.168.1.111 (Backend) │
|
||||||
|
│ ┌─────────────────────────────────────────────────────────┐ │
|
||||||
|
│ │ Docker Compose Services │ │
|
||||||
|
│ │ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ │ │
|
||||||
|
│ │ │ PostgreSQL │ │ Redis │ │ Kafka │ │ │
|
||||||
|
│ │ │ (:5432) │ │ (:6379) │ │ (:9092) │ │ │
|
||||||
|
│ │ └─────────────┘ └─────────────┘ └─────────────┘ │ │
|
||||||
|
│ │ │ │
|
||||||
|
│ │ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ │ │
|
||||||
|
│ │ │ identity │ │ wallet │ │ backup │ │ │
|
||||||
|
│ │ │ (:3000) │ │ (:3001) │ │ (:3002) │ │ │
|
||||||
|
│ │ └─────────────┘ └─────────────┘ └─────────────┘ │ │
|
||||||
|
│ │ │ │
|
||||||
|
│ │ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ │ │
|
||||||
|
│ │ │ planting │ │ referral │ │ reward │ │ │
|
||||||
|
│ │ │ (:3003) │ │ (:3004) │ │ (:3005) │ │ │
|
||||||
|
│ │ └─────────────┘ └─────────────┘ └─────────────┘ │ │
|
||||||
|
│ │ │ │
|
||||||
|
│ │ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ │ │
|
||||||
|
│ │ │ mpc │ │ leaderboard │ │ reporting │ │ │
|
||||||
|
│ │ │ (:3006) │ │ (:3007) │ │ (:3008) │ │ │
|
||||||
|
│ │ └─────────────┘ └─────────────┘ └─────────────┘ │ │
|
||||||
|
│ │ │ │
|
||||||
|
│ │ ┌─────────────┐ ┌─────────────┐ │ │
|
||||||
|
│ │ │authorization│ │ admin │ │ │
|
||||||
|
│ │ │ (:3009) │ │ (:3010) │ │ │
|
||||||
|
│ │ └─────────────┘ └─────────────┘ │ │
|
||||||
|
│ └─────────────────────────────────────────────────────────┘ │
|
||||||
|
└─────────────────────────────────────────────────────────────────┘
|
||||||
|
```
|
||||||
|
|
||||||
|
## 快速开始
|
||||||
|
|
||||||
|
### 1. 首次安装
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 进入服务目录
|
||||||
|
cd ~/rwadurian/backend/services
|
||||||
|
|
||||||
|
# 运行安装（自动生成安全密钥）
|
||||||
|
./deploy.sh install
|
||||||
|
```
|
||||||
|
|
||||||
|
### 2. 构建镜像
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./deploy.sh build
|
||||||
|
```
|
||||||
|
|
||||||
|
### 3. 启动服务
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./deploy.sh up
|
||||||
|
```
|
||||||
|
|
||||||
|
### 4. 检查状态
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./deploy.sh status
|
||||||
|
./deploy.sh health
|
||||||
|
```
|
||||||
|
|
||||||
|
## 常用命令
|
||||||
|
|
||||||
|
| 命令 | 说明 |
|
||||||
|
|------|------|
|
||||||
|
| `./deploy.sh install` | 首次安装，生成配置 |
|
||||||
|
| `./deploy.sh build` | 构建所有 Docker 镜像 |
|
||||||
|
| `./deploy.sh up` | 启动所有服务 |
|
||||||
|
| `./deploy.sh down` | 停止所有服务 |
|
||||||
|
| `./deploy.sh restart` | 重启所有服务 |
|
||||||
|
| `./deploy.sh status` | 查看服务状态 |
|
||||||
|
| `./deploy.sh health` | 检查服务健康 |
|
||||||
|
| `./deploy.sh logs` | 查看所有日志 |
|
||||||
|
| `./deploy.sh logs <service>` | 查看指定服务日志 |
|
||||||
|
| `./deploy.sh migrate` | 运行数据库迁移 |
|
||||||
|
| `./deploy.sh rebuild-svc <name>` | 重建指定服务 |
|
||||||
|
|
||||||
|
## 服务列表
|
||||||
|
|
||||||
|
| 服务 | 端口 | 说明 |
|
||||||
|
|------|------|------|
|
||||||
|
| identity-service | 3000 | 身份认证服务 |
|
||||||
|
| wallet-service | 3001 | 钱包账本服务 |
|
||||||
|
| backup-service | 3002 | MPC 备份服务 |
|
||||||
|
| planting-service | 3003 | 认种服务 |
|
||||||
|
| referral-service | 3004 | 推荐系统服务 |
|
||||||
|
| reward-service | 3005 | 奖励服务 |
|
||||||
|
| mpc-service | 3006 | MPC 中间层服务 |
|
||||||
|
| leaderboard-service | 3007 | 排行榜服务 |
|
||||||
|
| reporting-service | 3008 | 报表服务 |
|
||||||
|
| authorization-service | 3009 | 授权服务 |
|
||||||
|
| admin-service | 3010 | 管理后台服务 |
|
||||||
|
|
||||||
|
## 基础设施
|
||||||
|
|
||||||
|
| 服务 | 端口 | 说明 |
|
||||||
|
|------|------|------|
|
||||||
|
| PostgreSQL | 5432 | 主数据库 |
|
||||||
|
| Redis | 6379 | 缓存/会话 |
|
||||||
|
| Kafka | 9092 | 消息队列 |
|
||||||
|
| Zookeeper | 2181 | Kafka 协调 |
|
||||||
|
|
||||||
|
## 环境配置
|
||||||
|
|
||||||
|
配置文件 `.env` 由 `./deploy.sh install` 自动生成，包含：
|
||||||
|
|
||||||
|
- 数据库密码
|
||||||
|
- JWT 密钥
|
||||||
|
- 加密密钥
|
||||||
|
- MPC 系统地址
|
||||||
|
|
||||||
|
**重要**: `.env` 文件包含敏感信息，请勿提交到 Git！
|
||||||
|
|
||||||
|
## 与 MPC-System 集成
|
||||||
|
|
||||||
|
mpc-service 需要连接到运行在 192.168.1.100 上的 MPC-System：
|
||||||
|
|
||||||
|
- Session Coordinator: `http://192.168.1.100:8081`
|
||||||
|
- Message Router: `ws://192.168.1.100:8082`
|
||||||
|
|
||||||
|
确保 192.168.1.111 能够访问 192.168.1.100 的这些端口。
|
||||||
|
|
||||||
|
## 故障排除
|
||||||
|
|
||||||
|
### 查看服务日志
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./deploy.sh logs identity-service
|
||||||
|
```
|
||||||
|
|
||||||
|
### 重建单个服务
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./deploy.sh rebuild-svc mpc-service
|
||||||
|
```
|
||||||
|
|
||||||
|
### 数据库连接问题
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 进入 postgres 容器
|
||||||
|
docker exec -it rwa-postgres psql -U rwa_user -d rwa_identity
|
||||||
|
```
|
||||||
|
|
||||||
|
### 清理重新开始
|
||||||
|
|
||||||
|
```bash
|
||||||
|
./deploy.sh clean # 删除所有容器和数据
|
||||||
|
./deploy.sh install
|
||||||
|
./deploy.sh build
|
||||||
|
./deploy.sh up
|
||||||
|
```
|
||||||
|
|
@ -0,0 +1,61 @@
|
||||||
|
# =============================================================================
|
||||||
|
# Admin Service Dockerfile
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Build stage
|
||||||
|
FROM node:20-alpine AS builder
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Copy package files
|
||||||
|
COPY package*.json ./
|
||||||
|
COPY tsconfig*.json ./
|
||||||
|
COPY nest-cli.json ./
|
||||||
|
|
||||||
|
# Copy Prisma schema if exists
|
||||||
|
COPY prisma ./prisma/ 2>/dev/null || true
|
||||||
|
|
||||||
|
# Install dependencies
|
||||||
|
RUN npm ci
|
||||||
|
|
||||||
|
# Generate Prisma client if schema exists
|
||||||
|
RUN if [ -f "prisma/schema.prisma" ]; then npx prisma generate; fi
|
||||||
|
|
||||||
|
# Copy source code
|
||||||
|
COPY src ./src
|
||||||
|
|
||||||
|
# Build TypeScript
|
||||||
|
RUN npm run build
|
||||||
|
|
||||||
|
# Production stage
|
||||||
|
FROM node:20-alpine
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Install production dependencies only
|
||||||
|
COPY package*.json ./
|
||||||
|
RUN npm ci --only=production
|
||||||
|
|
||||||
|
# Copy Prisma schema and generate client if exists
|
||||||
|
COPY prisma ./prisma/ 2>/dev/null || true
|
||||||
|
RUN if [ -f "prisma/schema.prisma" ]; then npx prisma generate; fi
|
||||||
|
|
||||||
|
# Copy built files
|
||||||
|
COPY --from=builder /app/dist ./dist
|
||||||
|
|
||||||
|
# Create non-root user
|
||||||
|
RUN addgroup -g 1001 -S nodejs && \
|
||||||
|
adduser -S nestjs -u 1001
|
||||||
|
|
||||||
|
# Switch to non-root user
|
||||||
|
USER nestjs
|
||||||
|
|
||||||
|
# Expose port
|
||||||
|
EXPOSE 3010
|
||||||
|
|
||||||
|
# Health check
|
||||||
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=40s --retries=3 \
|
||||||
|
CMD wget -q --spider http://localhost:3010/health || exit 1
|
||||||
|
|
||||||
|
# Start service
|
||||||
|
CMD ["node", "dist/main.js"]
|
||||||
|
|
@ -0,0 +1,470 @@
|
||||||
|
#!/bin/bash
|
||||||
|
#
|
||||||
|
# RWA Backend Services - Deployment Script
|
||||||
|
# =========================================
|
||||||
|
#
|
||||||
|
# Usage:
|
||||||
|
# ./deploy.sh install # First time setup (generate secrets, init databases)
|
||||||
|
# ./deploy.sh up # Start all services
|
||||||
|
# ./deploy.sh down # Stop all services
|
||||||
|
# ./deploy.sh restart # Restart all services
|
||||||
|
# ./deploy.sh status # Show service status
|
||||||
|
# ./deploy.sh logs [svc] # View logs (optional: specific service)
|
||||||
|
# ./deploy.sh build # Rebuild all images
|
||||||
|
# ./deploy.sh migrate # Run database migrations
|
||||||
|
# ./deploy.sh health # Check health of all services
|
||||||
|
#
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Configuration
|
||||||
|
# ===========================================================================
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
ENV_FILE="$SCRIPT_DIR/.env"
|
||||||
|
COMPOSE_FILE="$SCRIPT_DIR/docker-compose.yml"
|
||||||
|
|
||||||
|
# Colors
|
||||||
|
RED='\033[0;31m'
|
||||||
|
GREEN='\033[0;32m'
|
||||||
|
YELLOW='\033[1;33m'
|
||||||
|
BLUE='\033[0;34m'
|
||||||
|
NC='\033[0m'
|
||||||
|
|
||||||
|
log_info() { echo -e "${GREEN}[INFO]${NC} $1"; }
|
||||||
|
log_warn() { echo -e "${YELLOW}[WARN]${NC} $1"; }
|
||||||
|
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }
|
||||||
|
log_step() { echo -e "${BLUE}[STEP]${NC} $1"; }
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Helper Functions
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
generate_random_password() {
|
||||||
|
openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c 32
|
||||||
|
}
|
||||||
|
|
||||||
|
generate_hex_key() {
|
||||||
|
openssl rand -hex 32
|
||||||
|
}
|
||||||
|
|
||||||
|
check_docker() {
|
||||||
|
if ! command -v docker &> /dev/null; then
|
||||||
|
log_error "Docker is not installed. Please install Docker first."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! docker compose version &> /dev/null; then
|
||||||
|
log_error "Docker Compose is not installed. Please install Docker Compose first."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
log_info "Docker version: $(docker --version)"
|
||||||
|
log_info "Docker Compose version: $(docker compose version --short)"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Install / Initialize
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
install() {
|
||||||
|
log_step "Installing RWA Backend Services..."
|
||||||
|
|
||||||
|
check_docker
|
||||||
|
|
||||||
|
# Generate .env file if not exists
|
||||||
|
if [ ! -f "$ENV_FILE" ]; then
|
||||||
|
log_step "Generating secure configuration..."
|
||||||
|
|
||||||
|
POSTGRES_PASSWORD=$(generate_random_password)
|
||||||
|
JWT_SECRET=$(generate_random_password)
|
||||||
|
SERVICE_JWT_SECRET=$(generate_random_password)
|
||||||
|
WALLET_ENCRYPTION_SALT=$(generate_random_password)
|
||||||
|
BACKUP_ENCRYPTION_KEY=$(generate_hex_key)
|
||||||
|
SHARE_MASTER_KEY=$(generate_hex_key)
|
||||||
|
|
||||||
|
cat > "$ENV_FILE" << EOF
|
||||||
|
# =============================================================================
|
||||||
|
# RWA Backend Services - Production Environment Configuration
|
||||||
|
# =============================================================================
|
||||||
|
# Generated: $(date)
|
||||||
|
# WARNING: Keep this file secure! Do not commit to version control!
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# PostgreSQL Database
|
||||||
|
POSTGRES_USER=rwa_user
|
||||||
|
POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
||||||
|
|
||||||
|
# Redis (leave empty for no password)
|
||||||
|
REDIS_PASSWORD=
|
||||||
|
|
||||||
|
# JWT Configuration
|
||||||
|
JWT_SECRET=${JWT_SECRET}
|
||||||
|
|
||||||
|
# Service-to-Service Authentication
|
||||||
|
SERVICE_JWT_SECRET=${SERVICE_JWT_SECRET}
|
||||||
|
|
||||||
|
# Wallet Encryption
|
||||||
|
WALLET_ENCRYPTION_SALT=${WALLET_ENCRYPTION_SALT}
|
||||||
|
|
||||||
|
# Backup Encryption (256-bit hex key)
|
||||||
|
BACKUP_ENCRYPTION_KEY=${BACKUP_ENCRYPTION_KEY}
|
||||||
|
|
||||||
|
# MPC Share Master Key (256-bit hex key)
|
||||||
|
SHARE_MASTER_KEY=${SHARE_MASTER_KEY}
|
||||||
|
|
||||||
|
# MPC System Address (on 192.168.1.100)
|
||||||
|
MPC_COORDINATOR_URL=http://192.168.1.100:8081
|
||||||
|
MPC_MESSAGE_ROUTER_URL=ws://192.168.1.100:8082
|
||||||
|
EOF
|
||||||
|
|
||||||
|
chmod 600 "$ENV_FILE"
|
||||||
|
log_info "Environment file created: $ENV_FILE"
|
||||||
|
log_info "Secrets have been auto-generated"
|
||||||
|
else
|
||||||
|
log_info "Environment file already exists: $ENV_FILE"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Create scripts directory
|
||||||
|
mkdir -p "$SCRIPT_DIR/scripts"
|
||||||
|
|
||||||
|
# Create database init script
|
||||||
|
create_db_init_script
|
||||||
|
|
||||||
|
log_info "Installation complete!"
|
||||||
|
log_info ""
|
||||||
|
log_info "Next steps:"
|
||||||
|
log_info " 1. Review and edit .env if needed"
|
||||||
|
log_info " 2. Run: ./deploy.sh build"
|
||||||
|
log_info " 3. Run: ./deploy.sh up"
|
||||||
|
}
|
||||||
|
|
||||||
|
create_db_init_script() {
|
||||||
|
cat > "$SCRIPT_DIR/scripts/init-databases.sh" << 'DBSCRIPT'
|
||||||
|
#!/bin/bash
|
||||||
|
set -e
|
||||||
|
|
||||||
|
# Function to create database if not exists
|
||||||
|
create_database() {
|
||||||
|
local database=$1
|
||||||
|
echo "Creating database: $database"
|
||||||
|
psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" <<-EOSQL
|
||||||
|
SELECT 'CREATE DATABASE $database'
|
||||||
|
WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = '$database')\gexec
|
||||||
|
EOSQL
|
||||||
|
}
|
||||||
|
|
||||||
|
# Create all required databases
|
||||||
|
for db in rwa_identity rwa_wallet rwa_mpc rwa_backup rwa_planting rwa_referral rwa_reward rwa_leaderboard rwa_reporting rwa_authorization; do
|
||||||
|
create_database "$db"
|
||||||
|
done
|
||||||
|
|
||||||
|
echo "All databases created successfully!"
|
||||||
|
DBSCRIPT
|
||||||
|
|
||||||
|
chmod +x "$SCRIPT_DIR/scripts/init-databases.sh"
|
||||||
|
log_info "Database init script created"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Docker Compose Operations
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
up() {
|
||||||
|
log_step "Starting RWA Backend Services..."
|
||||||
|
|
||||||
|
if [ ! -f "$ENV_FILE" ]; then
|
||||||
|
log_error "Environment file not found. Run './deploy.sh install' first."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Start infrastructure first
|
||||||
|
log_info "Starting infrastructure services..."
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d postgres redis zookeeper kafka
|
||||||
|
|
||||||
|
# Wait for infrastructure
|
||||||
|
log_info "Waiting for infrastructure to be ready..."
|
||||||
|
sleep 10
|
||||||
|
|
||||||
|
# Start application services
|
||||||
|
log_info "Starting application services..."
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d
|
||||||
|
|
||||||
|
log_info "All services started!"
|
||||||
|
log_info ""
|
||||||
|
log_info "Check status with: ./deploy.sh status"
|
||||||
|
log_info "View logs with: ./deploy.sh logs"
|
||||||
|
}
|
||||||
|
|
||||||
|
down() {
|
||||||
|
log_step "Stopping RWA Backend Services..."
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" down
|
||||||
|
log_info "All services stopped"
|
||||||
|
}
|
||||||
|
|
||||||
|
restart() {
|
||||||
|
log_step "Restarting RWA Backend Services..."
|
||||||
|
down
|
||||||
|
sleep 3
|
||||||
|
up
|
||||||
|
}
|
||||||
|
|
||||||
|
build() {
|
||||||
|
log_step "Building Docker images..."
|
||||||
|
|
||||||
|
if [ ! -f "$ENV_FILE" ]; then
|
||||||
|
log_error "Environment file not found. Run './deploy.sh install' first."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" build --parallel
|
||||||
|
log_info "All images built successfully"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Status and Monitoring
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
status() {
|
||||||
|
echo ""
|
||||||
|
echo "============================================"
|
||||||
|
echo "RWA Backend Services Status"
|
||||||
|
echo "============================================"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" ps
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo "============================================"
|
||||||
|
echo "Service Health Check"
|
||||||
|
echo "============================================"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
health
|
||||||
|
}
|
||||||
|
|
||||||
|
health() {
|
||||||
|
local services=(
|
||||||
|
"identity-service:3000"
|
||||||
|
"wallet-service:3001"
|
||||||
|
"backup-service:3002"
|
||||||
|
"planting-service:3003"
|
||||||
|
"referral-service:3004"
|
||||||
|
"reward-service:3005"
|
||||||
|
"mpc-service:3006"
|
||||||
|
"leaderboard-service:3007"
|
||||||
|
"reporting-service:3008"
|
||||||
|
"authorization-service:3009"
|
||||||
|
"admin-service:3010"
|
||||||
|
)
|
||||||
|
|
||||||
|
for svc in "${services[@]}"; do
|
||||||
|
name="${svc%%:*}"
|
||||||
|
port="${svc##*:}"
|
||||||
|
|
||||||
|
if curl -s -o /dev/null -w "%{http_code}" "http://localhost:$port/health" 2>/dev/null | grep -q "200"; then
|
||||||
|
echo -e "${GREEN}[OK]${NC} $name (port $port)"
|
||||||
|
else
|
||||||
|
echo -e "${RED}[FAIL]${NC} $name (port $port)"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
# Infrastructure health
|
||||||
|
echo "Infrastructure:"
|
||||||
|
|
||||||
|
if docker exec rwa-postgres pg_isready -U rwa_user &>/dev/null; then
|
||||||
|
echo -e " ${GREEN}[OK]${NC} PostgreSQL"
|
||||||
|
else
|
||||||
|
echo -e " ${RED}[FAIL]${NC} PostgreSQL"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if docker exec rwa-redis redis-cli ping &>/dev/null; then
|
||||||
|
echo -e " ${GREEN}[OK]${NC} Redis"
|
||||||
|
else
|
||||||
|
echo -e " ${RED}[FAIL]${NC} Redis"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if docker exec rwa-kafka kafka-topics --bootstrap-server localhost:9092 --list &>/dev/null; then
|
||||||
|
echo -e " ${GREEN}[OK]${NC} Kafka"
|
||||||
|
else
|
||||||
|
echo -e " ${RED}[FAIL]${NC} Kafka"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
logs() {
|
||||||
|
local service="$1"
|
||||||
|
|
||||||
|
if [ -n "$service" ]; then
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" logs -f "$service"
|
||||||
|
else
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" logs -f
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Database Operations
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
migrate() {
|
||||||
|
log_step "Running database migrations..."
|
||||||
|
|
||||||
|
local services=(
|
||||||
|
"identity-service"
|
||||||
|
"wallet-service"
|
||||||
|
"backup-service"
|
||||||
|
"planting-service"
|
||||||
|
"referral-service"
|
||||||
|
"reward-service"
|
||||||
|
"mpc-service"
|
||||||
|
"leaderboard-service"
|
||||||
|
"reporting-service"
|
||||||
|
"authorization-service"
|
||||||
|
)
|
||||||
|
|
||||||
|
for svc in "${services[@]}"; do
|
||||||
|
log_info "Running migrations for $svc..."
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" exec "$svc" npx prisma migrate deploy 2>/dev/null || \
|
||||||
|
log_warn "Migration skipped for $svc (no migrations or service not running)"
|
||||||
|
done
|
||||||
|
|
||||||
|
log_info "Migrations complete"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Cleanup
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
clean() {
|
||||||
|
log_warn "This will remove all containers, volumes, and images!"
|
||||||
|
read -p "Are you sure? (y/N): " confirm
|
||||||
|
|
||||||
|
if [ "$confirm" = "y" ] || [ "$confirm" = "Y" ]; then
|
||||||
|
log_step "Cleaning up..."
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" down -v --rmi all
|
||||||
|
log_info "Cleanup complete"
|
||||||
|
else
|
||||||
|
log_info "Cleanup cancelled"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Single Service Operations
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
start_service() {
|
||||||
|
local service="$1"
|
||||||
|
if [ -z "$service" ]; then
|
||||||
|
log_error "Please specify a service name"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
log_info "Starting $service..."
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d "$service"
|
||||||
|
}
|
||||||
|
|
||||||
|
stop_service() {
|
||||||
|
local service="$1"
|
||||||
|
if [ -z "$service" ]; then
|
||||||
|
log_error "Please specify a service name"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
log_info "Stopping $service..."
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" stop "$service"
|
||||||
|
}
|
||||||
|
|
||||||
|
rebuild_service() {
|
||||||
|
local service="$1"
|
||||||
|
if [ -z "$service" ]; then
|
||||||
|
log_error "Please specify a service name"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
log_info "Rebuilding $service..."
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" build "$service"
|
||||||
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d "$service"
|
||||||
|
}
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Main
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
case "${1:-}" in
|
||||||
|
install)
|
||||||
|
install
|
||||||
|
;;
|
||||||
|
up|start)
|
||||||
|
up
|
||||||
|
;;
|
||||||
|
down|stop)
|
||||||
|
down
|
||||||
|
;;
|
||||||
|
restart)
|
||||||
|
restart
|
||||||
|
;;
|
||||||
|
build)
|
||||||
|
build
|
||||||
|
;;
|
||||||
|
status|ps)
|
||||||
|
status
|
||||||
|
;;
|
||||||
|
health)
|
||||||
|
health
|
||||||
|
;;
|
||||||
|
logs)
|
||||||
|
logs "$2"
|
||||||
|
;;
|
||||||
|
migrate)
|
||||||
|
migrate
|
||||||
|
;;
|
||||||
|
clean)
|
||||||
|
clean
|
||||||
|
;;
|
||||||
|
start-svc)
|
||||||
|
start_service "$2"
|
||||||
|
;;
|
||||||
|
stop-svc)
|
||||||
|
stop_service "$2"
|
||||||
|
;;
|
||||||
|
rebuild-svc)
|
||||||
|
rebuild_service "$2"
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "RWA Backend Services Deployment Script"
|
||||||
|
echo ""
|
||||||
|
echo "Usage: $0 <command> [options]"
|
||||||
|
echo ""
|
||||||
|
echo "Commands:"
|
||||||
|
echo " install - First time setup (generate secrets, create configs)"
|
||||||
|
echo " up/start - Start all services"
|
||||||
|
echo " down/stop - Stop all services"
|
||||||
|
echo " restart - Restart all services"
|
||||||
|
echo " build - Build all Docker images"
|
||||||
|
echo " status/ps - Show service status"
|
||||||
|
echo " health - Check health of all services"
|
||||||
|
echo " logs [svc] - View logs (optionally for specific service)"
|
||||||
|
echo " migrate - Run database migrations"
|
||||||
|
echo " clean - Remove all containers, volumes, and images"
|
||||||
|
echo ""
|
||||||
|
echo "Single Service Commands:"
|
||||||
|
echo " start-svc <name> - Start a specific service"
|
||||||
|
echo " stop-svc <name> - Stop a specific service"
|
||||||
|
echo " rebuild-svc <name> - Rebuild and restart a specific service"
|
||||||
|
echo ""
|
||||||
|
echo "Services:"
|
||||||
|
echo " identity-service, wallet-service, backup-service, planting-service,"
|
||||||
|
echo " referral-service, reward-service, mpc-service, leaderboard-service,"
|
||||||
|
echo " reporting-service, authorization-service, admin-service"
|
||||||
|
echo ""
|
||||||
|
echo "Examples:"
|
||||||
|
echo " $0 install # First time setup"
|
||||||
|
echo " $0 build # Build images"
|
||||||
|
echo " $0 up # Start all services"
|
||||||
|
echo " $0 logs identity-service # View identity-service logs"
|
||||||
|
echo " $0 rebuild-svc mpc-service # Rebuild specific service"
|
||||||
|
echo ""
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
@ -0,0 +1,510 @@
|
||||||
|
# =============================================================================
|
||||||
|
# RWA Backend Services - Docker Compose
|
||||||
|
# =============================================================================
|
||||||
|
# Usage:
|
||||||
|
# ./deploy.sh up # Start all services
|
||||||
|
# ./deploy.sh down # Stop all services
|
||||||
|
# ./deploy.sh logs # View logs
|
||||||
|
# ./deploy.sh status # Check status
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
services:
|
||||||
|
# ===========================================================================
|
||||||
|
# Infrastructure Services
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
postgres:
|
||||||
|
image: postgres:16-alpine
|
||||||
|
container_name: rwa-postgres
|
||||||
|
environment:
|
||||||
|
POSTGRES_USER: ${POSTGRES_USER:-rwa_user}
|
||||||
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-rwa_secure_password}
|
||||||
|
POSTGRES_MULTIPLE_DATABASES: rwa_identity,rwa_wallet,rwa_mpc,rwa_backup,rwa_planting,rwa_referral,rwa_reward,rwa_leaderboard,rwa_reporting,rwa_authorization
|
||||||
|
ports:
|
||||||
|
- "5432:5432"
|
||||||
|
volumes:
|
||||||
|
- postgres_data:/var/lib/postgresql/data
|
||||||
|
- ./scripts/init-databases.sh:/docker-entrypoint-initdb.d/init-databases.sh:ro
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-rwa_user}"]
|
||||||
|
interval: 5s
|
||||||
|
timeout: 5s
|
||||||
|
retries: 10
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
redis:
|
||||||
|
image: redis:7-alpine
|
||||||
|
container_name: rwa-redis
|
||||||
|
command: redis-server --appendonly yes ${REDIS_PASSWORD:+--requirepass $REDIS_PASSWORD}
|
||||||
|
ports:
|
||||||
|
- "6379:6379"
|
||||||
|
volumes:
|
||||||
|
- redis_data:/data
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "redis-cli", "ping"]
|
||||||
|
interval: 5s
|
||||||
|
timeout: 5s
|
||||||
|
retries: 10
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
zookeeper:
|
||||||
|
image: confluentinc/cp-zookeeper:7.5.0
|
||||||
|
container_name: rwa-zookeeper
|
||||||
|
environment:
|
||||||
|
ZOOKEEPER_CLIENT_PORT: 2181
|
||||||
|
ZOOKEEPER_TICK_TIME: 2000
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "nc", "-z", "localhost", "2181"]
|
||||||
|
interval: 10s
|
||||||
|
timeout: 5s
|
||||||
|
retries: 5
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
kafka:
|
||||||
|
image: confluentinc/cp-kafka:7.5.0
|
||||||
|
container_name: rwa-kafka
|
||||||
|
depends_on:
|
||||||
|
zookeeper:
|
||||||
|
condition: service_healthy
|
||||||
|
ports:
|
||||||
|
- "9092:9092"
|
||||||
|
environment:
|
||||||
|
KAFKA_BROKER_ID: 1
|
||||||
|
KAFKA_ZOOKEEPER_CONNECT: zookeeper:2181
|
||||||
|
KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:29092,PLAINTEXT_HOST://localhost:9092
|
||||||
|
KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,PLAINTEXT_HOST:PLAINTEXT
|
||||||
|
KAFKA_LISTENERS: PLAINTEXT://0.0.0.0:29092,PLAINTEXT_HOST://0.0.0.0:9092
|
||||||
|
KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
|
||||||
|
KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
|
||||||
|
KAFKA_AUTO_CREATE_TOPICS_ENABLE: "true"
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "kafka-topics", "--bootstrap-server", "localhost:9092", "--list"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 5
|
||||||
|
start_period: 30s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Application Services
|
||||||
|
# ===========================================================================
|
||||||
|
|
||||||
|
identity-service:
|
||||||
|
build:
|
||||||
|
context: ./identity-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-identity-service
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3000
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_identity?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- JWT_ACCESS_EXPIRES_IN=2h
|
||||||
|
- JWT_REFRESH_EXPIRES_IN=30d
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=0
|
||||||
|
- KAFKA_BROKERS=kafka:29092
|
||||||
|
- KAFKA_CLIENT_ID=identity-service
|
||||||
|
- KAFKA_GROUP_ID=identity-service-group
|
||||||
|
- WALLET_ENCRYPTION_SALT=${WALLET_ENCRYPTION_SALT}
|
||||||
|
- MPC_SERVICE_URL=http://mpc-service:3006
|
||||||
|
- MPC_MODE=remote
|
||||||
|
- BACKUP_SERVICE_URL=http://backup-service:3002
|
||||||
|
- BACKUP_SERVICE_ENABLED=true
|
||||||
|
- SERVICE_JWT_SECRET=${SERVICE_JWT_SECRET}
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
kafka:
|
||||||
|
condition: service_started
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3000/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
wallet-service:
|
||||||
|
build:
|
||||||
|
context: ./wallet-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-wallet-service
|
||||||
|
ports:
|
||||||
|
- "3001:3001"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3001
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_wallet?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=1
|
||||||
|
- KAFKA_BROKERS=kafka:29092
|
||||||
|
- KAFKA_CLIENT_ID=wallet-service
|
||||||
|
- KAFKA_GROUP_ID=wallet-service-group
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
kafka:
|
||||||
|
condition: service_started
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3001/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
backup-service:
|
||||||
|
build:
|
||||||
|
context: ./backup-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-backup-service
|
||||||
|
ports:
|
||||||
|
- "3002:3002"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3002
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_backup?schema=public
|
||||||
|
- SERVICE_JWT_SECRET=${SERVICE_JWT_SECRET}
|
||||||
|
- ALLOWED_SERVICES=identity-service,recovery-service
|
||||||
|
- BACKUP_ENCRYPTION_KEY=${BACKUP_ENCRYPTION_KEY}
|
||||||
|
- BACKUP_ENCRYPTION_KEY_ID=key-v1
|
||||||
|
- MAX_RETRIEVE_PER_DAY=3
|
||||||
|
- MAX_STORE_PER_MINUTE=10
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3002/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
planting-service:
|
||||||
|
build:
|
||||||
|
context: ./planting-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-planting-service
|
||||||
|
ports:
|
||||||
|
- "3003:3003"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3003
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_planting?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=2
|
||||||
|
- KAFKA_BROKERS=kafka:29092
|
||||||
|
- KAFKA_CLIENT_ID=planting-service
|
||||||
|
- KAFKA_GROUP_ID=planting-service-group
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
kafka:
|
||||||
|
condition: service_started
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3003/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
referral-service:
|
||||||
|
build:
|
||||||
|
context: ./referral-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-referral-service
|
||||||
|
ports:
|
||||||
|
- "3004:3004"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3004
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_referral?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=3
|
||||||
|
- KAFKA_BROKERS=kafka:29092
|
||||||
|
- KAFKA_CLIENT_ID=referral-service
|
||||||
|
- KAFKA_GROUP_ID=referral-service-group
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
kafka:
|
||||||
|
condition: service_started
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3004/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
reward-service:
|
||||||
|
build:
|
||||||
|
context: ./reward-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-reward-service
|
||||||
|
ports:
|
||||||
|
- "3005:3005"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3005
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_reward?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=4
|
||||||
|
- KAFKA_BROKERS=kafka:29092
|
||||||
|
- KAFKA_CLIENT_ID=reward-service
|
||||||
|
- KAFKA_GROUP_ID=reward-service-group
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
kafka:
|
||||||
|
condition: service_started
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3005/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
mpc-service:
|
||||||
|
build:
|
||||||
|
context: ./mpc-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-mpc-service
|
||||||
|
ports:
|
||||||
|
- "3006:3006"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3006
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_mpc?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=5
|
||||||
|
- KAFKA_BROKERS=kafka:29092
|
||||||
|
- KAFKA_CLIENT_ID=mpc-service
|
||||||
|
- KAFKA_GROUP_ID=mpc-service-group
|
||||||
|
- MPC_COORDINATOR_URL=http://192.168.1.100:8081
|
||||||
|
- MPC_MESSAGE_ROUTER_WS_URL=ws://192.168.1.100:8082
|
||||||
|
- SHARE_MASTER_KEY=${SHARE_MASTER_KEY}
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
kafka:
|
||||||
|
condition: service_started
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3006/api/v1/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
leaderboard-service:
|
||||||
|
build:
|
||||||
|
context: ./leaderboard-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-leaderboard-service
|
||||||
|
ports:
|
||||||
|
- "3007:3007"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3007
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_leaderboard?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=6
|
||||||
|
- KAFKA_BROKERS=kafka:29092
|
||||||
|
- KAFKA_CLIENT_ID=leaderboard-service
|
||||||
|
- KAFKA_GROUP_ID=leaderboard-service-group
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
kafka:
|
||||||
|
condition: service_started
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3007/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
reporting-service:
|
||||||
|
build:
|
||||||
|
context: ./reporting-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-reporting-service
|
||||||
|
ports:
|
||||||
|
- "3008:3008"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3008
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_reporting?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=7
|
||||||
|
- KAFKA_BROKERS=kafka:29092
|
||||||
|
- KAFKA_CLIENT_ID=reporting-service
|
||||||
|
- KAFKA_GROUP_ID=reporting-service-group
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
kafka:
|
||||||
|
condition: service_started
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3008/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
authorization-service:
|
||||||
|
build:
|
||||||
|
context: ./authorization-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-authorization-service
|
||||||
|
ports:
|
||||||
|
- "3009:3009"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3009
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_authorization?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=8
|
||||||
|
- KAFKA_BROKERS=kafka:29092
|
||||||
|
- KAFKA_CLIENT_ID=authorization-service
|
||||||
|
- KAFKA_GROUP_ID=authorization-service-group
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
kafka:
|
||||||
|
condition: service_started
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3009/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
admin-service:
|
||||||
|
build:
|
||||||
|
context: ./admin-service
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: rwa-admin-service
|
||||||
|
ports:
|
||||||
|
- "3010:3010"
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
|
- APP_PORT=3010
|
||||||
|
- DATABASE_URL=postgresql://${POSTGRES_USER:-rwa_user}:${POSTGRES_PASSWORD:-rwa_secure_password}@postgres:5432/rwa_identity?schema=public
|
||||||
|
- JWT_SECRET=${JWT_SECRET}
|
||||||
|
- REDIS_HOST=redis
|
||||||
|
- REDIS_PORT=6379
|
||||||
|
- REDIS_PASSWORD=${REDIS_PASSWORD:-}
|
||||||
|
- REDIS_DB=9
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
redis:
|
||||||
|
condition: service_healthy
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "wget", "-q", "--spider", "http://localhost:3010/health"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 40s
|
||||||
|
restart: unless-stopped
|
||||||
|
networks:
|
||||||
|
- rwa-network
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Volumes
|
||||||
|
# ===========================================================================
|
||||||
|
volumes:
|
||||||
|
postgres_data:
|
||||||
|
driver: local
|
||||||
|
redis_data:
|
||||||
|
driver: local
|
||||||
|
|
||||||
|
# ===========================================================================
|
||||||
|
# Networks
|
||||||
|
# ===========================================================================
|
||||||
|
networks:
|
||||||
|
rwa-network:
|
||||||
|
driver: bridge
|
||||||
|
|
@ -0,0 +1,61 @@
|
||||||
|
# =============================================================================
|
||||||
|
# Referral Service Dockerfile
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Build stage
|
||||||
|
FROM node:20-alpine AS builder
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Copy package files
|
||||||
|
COPY package*.json ./
|
||||||
|
COPY tsconfig*.json ./
|
||||||
|
COPY nest-cli.json ./
|
||||||
|
|
||||||
|
# Copy Prisma schema
|
||||||
|
COPY prisma ./prisma/
|
||||||
|
|
||||||
|
# Install dependencies
|
||||||
|
RUN npm ci
|
||||||
|
|
||||||
|
# Generate Prisma client
|
||||||
|
RUN npx prisma generate
|
||||||
|
|
||||||
|
# Copy source code
|
||||||
|
COPY src ./src
|
||||||
|
|
||||||
|
# Build TypeScript
|
||||||
|
RUN npm run build
|
||||||
|
|
||||||
|
# Production stage
|
||||||
|
FROM node:20-alpine
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Install production dependencies only
|
||||||
|
COPY package*.json ./
|
||||||
|
RUN npm ci --only=production
|
||||||
|
|
||||||
|
# Copy Prisma schema and generate client
|
||||||
|
COPY prisma ./prisma/
|
||||||
|
RUN npx prisma generate
|
||||||
|
|
||||||
|
# Copy built files
|
||||||
|
COPY --from=builder /app/dist ./dist
|
||||||
|
|
||||||
|
# Create non-root user
|
||||||
|
RUN addgroup -g 1001 -S nodejs && \
|
||||||
|
adduser -S nestjs -u 1001
|
||||||
|
|
||||||
|
# Switch to non-root user
|
||||||
|
USER nestjs
|
||||||
|
|
||||||
|
# Expose port
|
||||||
|
EXPOSE 3004
|
||||||
|
|
||||||
|
# Health check
|
||||||
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=40s --retries=3 \
|
||||||
|
CMD wget -q --spider http://localhost:3004/health || exit 1
|
||||||
|
|
||||||
|
# Start service
|
||||||
|
CMD ["node", "dist/main.js"]
|
||||||
|
|
@ -0,0 +1,61 @@
|
||||||
|
# =============================================================================
|
||||||
|
# Reporting Service Dockerfile
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Build stage
|
||||||
|
FROM node:20-alpine AS builder
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Copy package files
|
||||||
|
COPY package*.json ./
|
||||||
|
COPY tsconfig*.json ./
|
||||||
|
COPY nest-cli.json ./
|
||||||
|
|
||||||
|
# Copy Prisma schema
|
||||||
|
COPY prisma ./prisma/
|
||||||
|
|
||||||
|
# Install dependencies
|
||||||
|
RUN npm ci
|
||||||
|
|
||||||
|
# Generate Prisma client
|
||||||
|
RUN npx prisma generate
|
||||||
|
|
||||||
|
# Copy source code
|
||||||
|
COPY src ./src
|
||||||
|
|
||||||
|
# Build TypeScript
|
||||||
|
RUN npm run build
|
||||||
|
|
||||||
|
# Production stage
|
||||||
|
FROM node:20-alpine
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Install production dependencies only
|
||||||
|
COPY package*.json ./
|
||||||
|
RUN npm ci --only=production
|
||||||
|
|
||||||
|
# Copy Prisma schema and generate client
|
||||||
|
COPY prisma ./prisma/
|
||||||
|
RUN npx prisma generate
|
||||||
|
|
||||||
|
# Copy built files
|
||||||
|
COPY --from=builder /app/dist ./dist
|
||||||
|
|
||||||
|
# Create non-root user
|
||||||
|
RUN addgroup -g 1001 -S nodejs && \
|
||||||
|
adduser -S nestjs -u 1001
|
||||||
|
|
||||||
|
# Switch to non-root user
|
||||||
|
USER nestjs
|
||||||
|
|
||||||
|
# Expose port
|
||||||
|
EXPOSE 3008
|
||||||
|
|
||||||
|
# Health check
|
||||||
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=40s --retries=3 \
|
||||||
|
CMD wget -q --spider http://localhost:3008/health || exit 1
|
||||||
|
|
||||||
|
# Start service
|
||||||
|
CMD ["node", "dist/main.js"]
|
||||||
|
|
@ -0,0 +1,19 @@
|
||||||
|
#!/bin/bash
|
||||||
|
set -e
|
||||||
|
|
||||||
|
# Function to create database if not exists
|
||||||
|
create_database() {
|
||||||
|
local database=$1
|
||||||
|
echo "Creating database: $database"
|
||||||
|
psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" <<-EOSQL
|
||||||
|
SELECT 'CREATE DATABASE $database'
|
||||||
|
WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = '$database')\gexec
|
||||||
|
EOSQL
|
||||||
|
}
|
||||||
|
|
||||||
|
# Create all required databases
|
||||||
|
for db in rwa_identity rwa_wallet rwa_mpc rwa_backup rwa_planting rwa_referral rwa_reward rwa_leaderboard rwa_reporting rwa_authorization; do
|
||||||
|
create_database "$db"
|
||||||
|
done
|
||||||
|
|
||||||
|
echo "All databases created successfully!"
|
||||||
|
|
@ -0,0 +1,61 @@
|
||||||
|
# =============================================================================
|
||||||
|
# Wallet Service Dockerfile
|
||||||
|
# =============================================================================
|
||||||
|
|
||||||
|
# Build stage
|
||||||
|
FROM node:20-alpine AS builder
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Copy package files
|
||||||
|
COPY package*.json ./
|
||||||
|
COPY tsconfig*.json ./
|
||||||
|
COPY nest-cli.json ./
|
||||||
|
|
||||||
|
# Copy Prisma schema
|
||||||
|
COPY prisma ./prisma/
|
||||||
|
|
||||||
|
# Install dependencies
|
||||||
|
RUN npm ci
|
||||||
|
|
||||||
|
# Generate Prisma client
|
||||||
|
RUN npx prisma generate
|
||||||
|
|
||||||
|
# Copy source code
|
||||||
|
COPY src ./src
|
||||||
|
|
||||||
|
# Build TypeScript
|
||||||
|
RUN npm run build
|
||||||
|
|
||||||
|
# Production stage
|
||||||
|
FROM node:20-alpine
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Install production dependencies only
|
||||||
|
COPY package*.json ./
|
||||||
|
RUN npm ci --only=production
|
||||||
|
|
||||||
|
# Copy Prisma schema and generate client
|
||||||
|
COPY prisma ./prisma/
|
||||||
|
RUN npx prisma generate
|
||||||
|
|
||||||
|
# Copy built files
|
||||||
|
COPY --from=builder /app/dist ./dist
|
||||||
|
|
||||||
|
# Create non-root user
|
||||||
|
RUN addgroup -g 1001 -S nodejs && \
|
||||||
|
adduser -S nestjs -u 1001
|
||||||
|
|
||||||
|
# Switch to non-root user
|
||||||
|
USER nestjs
|
||||||
|
|
||||||
|
# Expose port
|
||||||
|
EXPOSE 3001
|
||||||
|
|
||||||
|
# Health check
|
||||||
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=40s --retries=3 \
|
||||||
|
CMD wget -q --spider http://localhost:3001/health || exit 1
|
||||||
|
|
||||||
|
# Start service
|
||||||
|
CMD ["node", "dist/main.js"]
|
||||||
Loading…
Reference in New Issue