nikola
81 lines
2.6 KiB
Markdown
81 lines
2.6 KiB
Markdown
# Codex Work Context (New Pipeline Experiment)
|
|
|
|
## Goal
|
|
|
|
Create a simplified, stable pipeline that provisions a dynamic Integration/Atest
|
|
environment via Terraform and deploys the platform using Docker Compose on a
|
|
single-node VM. This is a PoC to validate the flow end-to-end.
|
|
|
|
## Guiding Principles
|
|
|
|
- Keep everything basic and transparent. No hidden logic or magic variables.
|
|
- Prefer explicit, readable configuration over abstraction.
|
|
- Security hardening is not a priority at this stage.
|
|
- The goal is: it works, and it is easy to see why it works or fails.
|
|
|
|
## Current Plan (High-Level)
|
|
|
|
1. Terraform provisions a VM from Proxmox template `debian12-tf-template`.
|
|
2. Docker Compose is used to deploy the platform on that VM.
|
|
3. HAProxy handles routing for API and frontends (TLS enabled).
|
|
4. Healthcheck confirms readiness via:
|
|
`https://<domain>.wolkabout.com/api/infos/server`
|
|
5. Tear down the VM after the run (if/when automated).
|
|
|
|
## Compose Package Location
|
|
|
|
Prepared in:
|
|
|
|
- `/home/nikola/codex-cli/terraform-vm-docker`
|
|
|
|
Contains:
|
|
|
|
- `docker-compose.yml`
|
|
- `.env`
|
|
- `bring-up.md`
|
|
- `healthcheck.sh`
|
|
- `config/` (wolk config YAMLs + firebase JSON)
|
|
- `haproxy_config/` (haproxy.cfg + options.http)
|
|
- `ssl/2026-SSL-WA-full.pem`
|
|
- `custom-assets/federation.manifest.json`
|
|
- `whiteLabeling/` (generated by backend on first successful start)
|
|
|
|
## Runtime Assumptions (from existing Swarm setup)
|
|
|
|
Images in use:
|
|
|
|
- `629307322585.dkr.ecr.eu-west-1.amazonaws.com/mono-web:150`
|
|
- `629307322585.dkr.ecr.eu-west-1.amazonaws.com/wolkabout:cloudconfig-22.8.2`
|
|
- `629307322585.dkr.ecr.eu-west-1.amazonaws.com/wolkabout:wafels-112.federation-poc-1`
|
|
- `629307322585.dkr.ecr.eu-west-1.amazonaws.com/wolkabout:frontend-federated`
|
|
- `629307322585.dkr.ecr.eu-west-1.amazonaws.com/utils-http2amqp:151`
|
|
- `629307322585.dkr.ecr.eu-west-1.amazonaws.com/utils-mqtt2amqp:151`
|
|
- `629307322585.dkr.ecr.eu-west-1.amazonaws.com/wolkabout:mqtt_ws`
|
|
- `rabbitmq:4.1-management-alpine`
|
|
- `grafana/loki:3.4.1`
|
|
- `haproxy:2.6`
|
|
|
|
Known dependencies:
|
|
|
|
- MySQL: `10.0.50.157:3306` (schema `swarm`, user `wolk`, pass `Test1234`)
|
|
- Cassandra: `10.0.50.163` (keyspace `swarm`)
|
|
|
|
## Healthcheck
|
|
|
|
Use `healthcheck.sh` to verify readiness:
|
|
|
|
- `https://<domain>.wolkabout.com/api/infos/server`
|
|
- Expects HTTP 200 and JSON with `organization` key.
|
|
|
|
## Networking
|
|
|
|
- Compose network name: `core-net`
|
|
- Single-node bridge network (no overlay)
|
|
- Ports exposed: `80`, `443`, `2883`, `8883`, `3100`
|
|
|
|
## Notes
|
|
|
|
- MQTT/HTTP2AMQP config mounts are present but commented in Compose.
|
|
- All secrets are kept inline for now to reduce moving parts.
|
|
- Debugging should be obvious from config + logs without additional tooling.
|