first version of traefik setup and deploy to containers-dev

Author: jtgorman

.github/workflows/build-and-deploy-dev.yml

@@ -0,0 +1,49 @@
+name: Build and Deploy (Docker Linux) - Development
+on:
+  workflow_dispatch:
+
+env:
+  REMOTE_HOST: containers-dev.library.illinois.edu
+  REMOTE_USER: container-user
+  COMPOSE_FILE: docker-compose-traefik.yml
+  REMOTE_PATH: /home/container-user/getmarc-dev
+
+  #Environment Specific
+  FQDN: getmarc-dev.library.illinois.edu
+
+jobs:
+  deploy:
+    runs-on: [self-hosted, linux]
+    environment:
+      name: development
+      url: https://${{ env.FQDN }}
+    steps:
+      - name: Checkout the repo
+        uses: actions/checkout@v2
+
+      - name: Make api.cfg file
+        run: |
+          echo "[ALMA_API]" > ./api.cfg
+          echo "API_DOMAIN=${{ vars.API_DOMAIN }}" >> ./api.cfg
+          echo "API_KEY=${{ secrets.API_KEY }}" >> ./api.cfg
+
+      - name: rsync deployments
+        uses: burnett01/rsync-deployments@5.2
+        with:
+          switches: -avzr --delete --exclude public/system/imports
+          path: .
+          remote_path: "${{ env.REMOTE_PATH }}"
+          remote_host: "${{ env.REMOTE_HOST }}"
+          remote_user: "${{ env.REMOTE_USER }}"
+          remote_key: ${{ secrets.DOCKER_SSH_PRIVATE_KEY }}
+
+      - name: Update containers
+        uses: fifsky/ssh-action@master
+        with:
+          command: |
+            cd "${{ env.REMOTE_PATH }}"
+            docker compose -f "${{ env.COMPOSE_FILE }}" build --no-cache
+            docker compose -f "${{ env.COMPOSE_FILE }}" up --force-recreate --pull always -d
+          host: "${{ env.REMOTE_HOST }}"
+          user: "${{ env.REMOTE_USER }}"
+          key: "${{ secrets.DOCKER_SSH_PRIVATE_KEY }}"

docker-compose-traefik.yml

@@ -0,0 +1,31 @@
+services:
+  getmarc:
+    build:
+      context: .
+      args:
+        - FQDN=${FQDN}
+        - BACKEND_SERVICE=${BACKEND_SERVICE}
+        - ENTITY_ID=${ENTITY_ID}
+    restart: unless-stopped
+    networks:
+      - proxy
+      - default
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:5000"]
+      interval: 1m30s
+      timeout: 10s
+      retries: 3
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.getmarc-secure.rule=Host(`${FQDN}`)"
+      - "traefik.http.routers.getmarc-secure.entrypoints=websecure"
+      - "traefik.http.routers.getmarc.tls=true"
+      - "traefik.http.services.getmarc.loadbalancer.server.port=443"
+      - "traefik.http.services.getmarc.loadbalancer.server.scheme=https"
+      - "traefik.http.services.getmarc.loadbalancer.serversTransport=${TRAEFIK_SERVER_TRANSPORT}"
+      - "traefik.http.routers.getmarc-secure.middlewares=campus-ips-whitelist@file"
+
+networks:
+  proxy:
+    external: true

docker-compose.yml

@@ -0,0 +1,5 @@
+services:
+  getmarc:
+    build: .
+    ports:
+      - "5000:5000"