sqlinsight-pro/deploy/community/docker-compose.prod.yml
Claude 69fa641f26
Some checks are pending
CI / Integration (mcr.microsoft.com/mssql/server:2017-latest) (push) Blocked by required conditions
CI / Integration (mcr.microsoft.com/mssql/server:2019-latest) (push) Blocked by required conditions
CI / Integration (mcr.microsoft.com/mssql/server:2022-latest) (push) Blocked by required conditions
CI / Integration (mcr.microsoft.com/mssql/server:2025-latest) (push) Blocked by required conditions
deploy hub / deploy (push) Successful in 24s
CI / Build og unit tests (push) Successful in 56s
deploy community / deploy (push) Successful in 1s
CI / MSI-installer (push) Successful in 33s
Websted og forum bag SEOSofts reverse proxy på appserveren
- deploy-community.yml: bygger og starter webstedet ved push (som hubben),
  bundet til DMZ-adressen. Springes over, indtil COMMUNITY_PORT er sat.
  Feedet læses skrivebeskyttet fra hubbens feed-mappe; download-links går
  til hub.sqlinsight.seosoft.dk/updates/ (ny indstilling DownloadUrl).
- deploy-forum.yml (manuel): kører discourse_docker-launcheren i en
  helper-container med /var/discourse og docker.sock fra værten.
  app.yml er en skabelon, som render.py udfylder fra secrets.
- Discourse uden egen TLS: lytter på DMZ-adressen, tvinger https-links og
  tager klient-IP fra X-Forwarded-For fra proxyen (ellers rammer rate
  limiting alle brugere samlet).
- Caddy-opsætningen er fjernet; docs/community.md beskriver secrets og
  proxy-opsætning.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E3EExwndy8Z22EK2Qpt6BK
2026-09-29 13:59:53 +00:00

31 lines
1.2 KiB
YAML

# SQLInsight Pro-webstedet (sqlinsight.seosoft.dk) i SEOSofts drift (appserver). Kopieres til INSTALL_DIR af
# .forgejo/workflows/deploy-community.yml sammen med en .env, der genereres fra Forgejo repo-secrets.
# Reverse proxyen terminerer TLS, som for hubben.
#
# Feedet læses direkte fra hubbens feed-mappe (skrivebeskyttet), så webstedet viser præcis det, agenterne får.
# Download-links går til hubbens offentlige /updates/.
#
# Manuel drift på appserveren:
# cd /opt/sqlinsight-community && docker compose ps | logs -f | restart
services:
community:
image: sqlinsight-community:latest
container_name: sqlinsight-community
restart: unless-stopped
env_file:
- .env
environment:
SQLInsight__Community__Feed: /feed
SQLInsight__Community__DownloadUrl: https://hub.sqlinsight.seosoft.dk/updates/
SQLInsight__Community__ForumUrl: https://forum.sqlinsight.seosoft.dk/
volumes:
- /opt/sqlinsight-hub/data/feed:/feed:ro
ports:
# Bind til DMZ-IP (HOST_BIND i .env). Reverse proxyen terminerer TLS.
- "${HOST_BIND}:${COMMUNITY_PORT}:8080"
logging:
driver: json-file
options:
max-size: "10m"
max-file: "3"