soroush.asadi
89d42184a1
Pipeline (.gitea/workflows/ci-cd.yml), all images/packages via Nexus mirror: - CI api-build: dotnet restore/build server/Hokm.slnx + run Hokm.Sim (rules). - CI web-check: npm install + tsc --noEmit + next build (static export). - deploy (self-hosted): pre-deploy pg_dump backup, rollback image tag, build, bring up db -> server -> web with stop+rm+up --no-deps (no force-recreate, no bare compose down), health-wait each, prune. Local stack (docker-compose.yml), ports in 1500-1600 so it coexists with manual dev on 3000/5005: web :1500 (nginx static) -> server :1505 (.NET) -> db :1510 (postgres, named volume + backups). Dockerfiles: server (.NET, NuGet via nuget.docker.config, binds 0.0.0.0, busybox wget healthcheck) + web (Next static export -> nginx, NEXT_PUBLIC_* baked as build args). nginx.conf SPA fallback. Config: server CORS is now config-driven (Cors__Origins) so the deployed web origin is allowed without code edits. deploy/ENV_FILE.example documents the Gitea ENV_FILE secret; DEPLOY.md covers setup/run/LAN-IP/rollback/migrations. Fonts: switch Vazirmatn + Plus Jakarta Sans from next/font/google (build-time Google fetch -> fails on the Iran CI runner) to self-hosted @fontsource-variable packages. Build is offline and ~3x faster; 7 woff2 emitted into out/. Verified locally: dotnet build slnx + Hokm.Sim (300 matches, exit 0); tsc clean; next build clean with self-hosted fonts. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
37 lines
1.8 KiB
Plaintext
37 lines
1.8 KiB
Plaintext
# ──────────────────────────────────────────────────────────────────────────
|
||
# Barg-e Vasat — ENV_FILE
|
||
# Paste the contents of this file (filled in) into the Gitea repo secret:
|
||
# https://git.soroushasadi.com/soroushdes/HokmPlay/settings/secrets → ENV_FILE
|
||
# The deploy job writes it verbatim to `.env`, which docker compose reads.
|
||
#
|
||
# NOTE: NEXT_PUBLIC_SERVER_URL is baked into the web bundle at BUILD time —
|
||
# changing it requires a new CI run (push a commit) to take effect.
|
||
# ──────────────────────────────────────────────────────────────────────────
|
||
|
||
# Host ports (1500–1600 range so the stack coexists with manual dev on 3000/5005)
|
||
WEB_PORT=1500
|
||
API_PORT=1505
|
||
DB_PORT=1510
|
||
|
||
# Database (postgres container)
|
||
POSTGRES_PASSWORD=change-me-strong-password
|
||
|
||
# JWT — generate with: openssl rand -hex 32
|
||
JWT_KEY=CHANGE-ME-to-a-32+char-random-secret
|
||
JWT_ISSUER=hokm
|
||
JWT_AUDIENCE=hokm-clients
|
||
|
||
# Browser-facing API origin (host-mapped api port).
|
||
# If the browser is NOT on the deploy host, use the host LAN IP instead of
|
||
# localhost, e.g. http://172.28.144.1:1505 (localhost can be VPN-hijacked).
|
||
NEXT_PUBLIC_SERVER_URL=http://localhost:1505
|
||
|
||
# Origins allowed by the API's CORS (comma-separated). Must include the web URL.
|
||
CORS_ORIGINS=http://localhost:1500
|
||
|
||
# ZarinPal (sandbox for now — switch in admin/panel later)
|
||
ZARINPAL_MERCHANT_ID=299685fb-cadf-4dfc-98e2-d4af5d81528d
|
||
ZARINPAL_SANDBOX=true
|
||
ZARINPAL_CALLBACK_URL=http://localhost:1505/api/coins/pay/callback
|
||
ZARINPAL_CLIENT_RETURN_URL=http://localhost:1500
|