chore: add draft prod deploy

Author: emptybutton

.gitignore

@@ -174,4 +174,4 @@ cython_debug/
 .python-version
 .ruff_cache
 .uv_cache
-/deploy/dev/ttt/secrets.yaml
+secrets.yaml

deploy/dev/docker-compose.yaml

@@ -18,12 +18,17 @@ services:
         condition: service_healthy
     environment:
       TTT_POSTGRES_URL: postgresql+psycopg://root:root@postgres/root
+      TTT_POSTGRES_POOL_SIZE: 8
+      TTT_POSTGRES_POOL_TIMEOUT_SECONDS: 30
+      TTT_POSTGRES_POOL_RECYCLE_SECONDS: 1800
+      TTT_POSTGRES_POOL_PRE_PING: false
       TTT_POSTGRES_ECHO: true
+
       TTT_REDIS_URL: redis://redis:6379/0
       TTT_REDIS_POOL_SIZE: 16
+
       TTT_GAME_WAITING_QUEUE_PULLING_TIMEOUT_MIN_MS: 100
       TTT_GAME_WAITING_QUEUE_PULLING_TIMEOUT_SALT_MS: 100
-      TTT_MESSAGE_SENDING_RETRIES: 3
     secrets:
       - secrets
     command: ttt-dev
@@ -50,13 +55,14 @@ services:
     container_name: ttt-redis
     volumes:
       - redis-data:/data
-      - ./redis:/mnt
+      - ./redis:/mnt/dev
+      - ../common/redis:/mnt/common
     healthcheck:
-      test: bash /mnt/is-server-ok.sh
+      test: echo PING | redis-cli | grep -qF PONG
       start_period: 2m
       start_interval: 0.5s
       interval: 3s
-    command: bash /mnt/start-server.sh
+    command: redis-server /mnt/dev/redis.conf
 
 volumes:
   backend-data: null

deploy/dev/redis/is-server-ok.sh

@@ -0,0 +1 @@
+.env.template

deploy/dev/redis/start-server.sh

@@ -0,0 +1,122 @@
+name: ttt
+
+services:
+  ttt:
+    build:
+      context: ../../
+      dockerfile: deploy/prod/ttt/Dockerfile
+      tags:
+        - "ttt:prod"
+    container_name: ttt
+    depends_on:
+      postgres_master:
+        condition: service_healthy
+      postgres_replica1:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    environment:
+      TTT_POSTGRES_URL: postgresql+psycopg://ttt:${POSTGRES_MASTER_TTT_PASSWORD}@postgres_master:5432/ttt
+      TTT_POSTGRES_POOL_SIZE: 8
+      TTT_POSTGRES_POOL_TIMEOUT_SECONDS: 45
+      TTT_POSTGRES_POOL_RECYCLE_SECONDS: 1800
+      TTT_POSTGRES_POOL_PRE_PING: false
+      TTT_POSTGRES_ECHO: true
+
+      TTT_REDIS_URL: redis://${REDIS_PASSWORD}@redis:6379/0
+      TTT_REDIS_POOL_SIZE: 16
+
+      TTT_GAME_WAITING_QUEUE_PULLING_TIMEOUT_MIN_MS: 100
+      TTT_GAME_WAITING_QUEUE_PULLING_TIMEOUT_SALT_MS: 200
+    secrets:
+      - secrets
+    networks:
+      - postgres
+      - redis
+    command: ttt
+
+  redis:
+    image: redis:8.0.2-bookworm
+    container_name: ttt-redis
+    volumes:
+      - redis-data:/data
+      - ./redis:/mnt/dev
+      - ../common/redis:/mnt/common
+    networks:
+      - redis
+    healthcheck:
+      test: echo PING | redis-cli -a ${REDIS_PASSWORD} | grep -qF PONG
+      start_period: 2m
+      start_interval: 1s
+      interval: 3s
+    command: [
+      "redis-server", "/mnt/dev/redis.conf", "--requirepass", "$REDIS_PASSWORD"
+    ]
+
+  postgres_master:
+    image: postgres:16.3-alpine3.19
+    container_name: ttt-postgres-master
+    volumes:
+      - ./postgres_master/postgres.conf:/mnt/postgres.conf
+      - ./postgres/common-postgres.conf:/mnt/common-postgres.conf
+      - ./postgres_master/init.sql:/docker-entrypoint-initdb.d/init.sql
+      - postgres-master-data:/var/lib/postgresql/data
+    networks:
+      - postgres
+    environment:
+      POSTGRES_MASTER_REPLICA_PASSWORD: ${POSTGRES_MASTER_REPLICA_PASSWORD}
+      POSTGRES_MASTER_TTT_PASSWORD: ${POSTGRES_MASTER_TTT_PASSWORD}
+      POSTGRES_DB: root
+      POSTGRES_USER: root
+      POSTGRES_PASSWORD: root
+    command: ["postgres", "-c", "config_file=/mnt/postgres.conf"]
+    healthcheck:
+      test: pg_isready -d postgres -U root
+      start_period: 1m
+      start_interval: 1s
+      interval: 5s
+
+  postgres_replica1:
+    image: postgres:16.3-alpine3.19
+    container_name: ttt-postgres-replica1
+    depends_on:
+      postgres_master:
+        condition: service_healthy
+    volumes:
+      - ./postgres_replica/postgres.conf:/mnt/postgres.conf
+      - ./postgres/common-postgres.conf:/mnt/common-postgres.conf
+      - postgres-replica1-data:/var/lib/postgresql/data
+    networks:
+      - postgres
+    environment:
+      POSTGRES_DB: root
+      POSTGRES_USER: root
+      POSTGRES_PASSWORD: root
+    command: [
+      "postgres",
+      "-c",
+      "config_file=/mnt/postgres.conf",
+      "-c",
+      "primary_conninfo='host=postgres_master user=replica password=${POSTGRES_MASTER_REPLICA_PASSWORD} application_name=replica1\'",
+    ]
+    healthcheck:
+      test: pg_isready -d postgres -U root
+      start_period: 1m
+      start_interval: 1s
+      interval: 5s
+
+volumes:
+  postgres-replica1-data:
+    name: "ttt-prod-postgres-replica1-data"
+  postgres-master-data:
+    name: "ttt-prod-postgres-master-data"
+  redis-data:
+    name: "ttt-prod-redis-data"
+
+networks:
+  postgres: null
+  redis: null
+
+secrets:
+  secrets:
+    file: ttt/secrets.yaml

deploy/prod/.env.template

@@ -0,0 +1,8 @@
+# RESOURCES
+shared_buffers = 8MB
+huge_pages = off
+work_mem = 4MB
+maintenance_work_mem = 16MB
+
+# WAL
+wal_level = replica

deploy/prod/docker-compose.yaml

@@ -0,0 +1,7 @@
+\set replica_password `echo $POSTGRES_MASTER_REPLICA_PASSWORD`
+\set ttt_password `echo $POSTGRES_MASTER_TTT_PASSWORD`
+
+CREATE ROLE replica WITH LOGIN PASSWORD ':replica_password' REPLICATION;
+CREATE ROLE ttt WITH LOGIN PASSWORD ':ttt_password';
+
+CREATE DATABASE ttt;

deploy/prod/postgres/common-postgres.conf

@@ -0,0 +1,5 @@
+include '/mnt/common-postgres.conf'
+
+# REPLICATION
+synchronous_standby_names = 'replica1'
+synchronous_commit = remote_apply

deploy/prod/postgres_master/init.sql

@@ -0,0 +1,4 @@
+include '/mnt/common-postgres.conf'
+
+# REPLICATION
+hot_standby = on