configucci/DEPLOYMENT.md

Configucci Docker Deployment Guide

Quick Start

Local Deployment (Windows/Linux/Mac)

# Make script executable (Linux/Mac only)
chmod +x deploy-docker.sh

# Deploy locally
./deploy-docker.sh

# Or on Windows (PowerShell)
bash deploy-docker.sh

Remote Deployment (Linux Server)

# Deploy to remote server
./deploy-docker.sh user@your-server.com

# Example
./deploy-docker.sh root@192.168.1.100

---

Manual Deployment

1. Build and Run Locally

# Build image
docker-compose build

# Start container
docker-compose up -d

# View logs
docker-compose logs -f

# Stop
docker-compose down

2. Deploy to Linux Server

Option A: Using Deployment Script (Recommended)

# From your local machine
./deploy-docker.sh user@your-server.com

Option B: Manual Steps on Server

# SSH to server
ssh user@your-server.com

# Install Docker (if not installed)
curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
sudo usermod -aG docker $USER
exit

# SSH again (to apply group changes)
ssh user@your-server.com

# Clone repository
git clone https://git.six83.ru/ssa/configucci.git
cd configucci

# Build and run
docker-compose build
docker-compose up -d

# View logs
docker-compose logs -f

---

Accessing the Application

After deployment, access the app at:

• Local: http://localhost:11088
• Server: http://your-server-ip:11088

---

Useful Docker Commands

# View running containers
docker-compose ps

# View logs
docker-compose logs -f

# Restart application
docker-compose restart

# Stop application
docker-compose down

# Rebuild and restart
docker-compose build --no-cache
docker-compose up -d

# View resource usage
docker stats configucci-app

# Execute command in container
docker exec -it configucci-app sh

# Remove everything (container + image)
docker-compose down --rmi all

---

Production Setup with SSL

1. Install Nginx Proxy Manager (Recommended)

# Add to docker-compose.yml
version: '3.8'

services:
  proxy:
    image: jc21/nginx-proxy-manager:latest
    ports:
      - "80:80"
      - "81:81"
      - "443:443"
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt
    restart: unless-stopped

  configucci:
    # ... existing configucci config

Then access http://your-server:81 to configure SSL via web UI.

2. Or Use Certbot Directly

# On host server (not in Docker)
sudo apt install certbot -y

# Get certificate
sudo certbot certonly --standalone -d your-domain.com

# Mount certificates in docker-compose.yml
volumes:
  - /etc/letsencrypt:/etc/letsencrypt:ro

---

Environment Variables

You can customize the build by setting environment variables:

# In docker-compose.yml or .env file
GIT_URL=https://git.six83.ru/ssa/configucci.git
GIT_BRANCH=ai

---

Troubleshooting

Container Won't Start

# Check logs
docker-compose logs

# Check if port 80 is in use
sudo netstat -tlnp | grep :80

# Use different port
# Edit docker-compose.yml: ports: - "8080:80"

Build Fails

# Clean build cache
docker-compose build --no-cache

# Remove all Docker resources
docker system prune -a

Can't Access Application

# Check firewall
sudo ufw status
sudo ufw allow 80/tcp

# Check container is running
docker-compose ps

# Test from server
curl http://localhost

---

Automated Deployment with CI/CD

Create .gitlab-ci.yml or GitHub Actions workflow:

# Example: GitHub Actions
name: Deploy

on:
  push:
    branches: [ai]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      
      - name: Deploy to server
        uses: appleboy/ssh-action@master
        with:
          host: ${{ secrets.SERVER_HOST }}
          username: ${{ secrets.SERVER_USER }}
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          script: |
            cd /opt/configucci
            git pull
            docker-compose build --no-cache
            docker-compose up -d

---

Backup and Restore

Backup

# Backup configuration
tar -czf configucci-backup.tar.gz docker-compose.yml nginx.conf

Restore

tar -xzf configucci-backup.tar.gz
docker-compose up -d

---

Monitoring

Install Docker Monitoring

# Install cAdvisor for container monitoring
docker run \
  --volume=/:/rootfs:ro \
  --volume=/var/run:/var/run:ro \
  --volume=/sys:/sys:ro \
  --volume=/var/lib/docker/:/var/lib/docker:ro \
  --volume=/dev/disk/:/dev/disk:ro \
  --publish=8080:8080 \
  --name=cadvisor \
  google/cadvisor:latest

Access at: http://your-server:8080

---

Security Recommendations

1. Use HTTPS - Always use SSL in production
2. Firewall - Only open necessary ports
3. Regular Updates - Keep Docker and system updated
4. Non-root User - Run container as non-root
5. Resource Limits - Set CPU/memory limits in docker-compose.yml

# Add resource limits
deploy:
  resources:
    limits:
      cpus: '0.5'
      memory: 512M

---

Support

For issues, check:

• Docker logs: docker-compose logs
• Nginx logs: docker exec configucci-app cat /var/log/nginx/error.log
• Application health: docker inspect --format='{{.State.Health.Status}}' configucci-app