feat: add latest machines configs files - [CU-869aqa222]

model-machine/dozzle.docker-compose.yaml

@@ -0,0 +1,23 @@
+services:
+  models:
+    image: busybox:latest
+    container_name: model
+    command: ['sh', '-c', 'tail -F /logs/uvicorn.log']
+    labels:
+      - 'dozzle=true'
+    volumes:
+      - /var/log/uvicorn.log:/logs/uvicorn.log:ro
+
+  dozzle:
+    image: amir20/dozzle:latest
+    container_name: dozzle
+    command: agent --hostname model
+    ports:
+      - '7007:7007'
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./users/:/data/
+    environment:
+      dozzle_enable_actions: true
+      dozzle_enable_shell: true
+    restart: unless-stopped

production-machine/docker-composes/dozzle-agent/docker-compose.yaml

@@ -0,0 +1,24 @@
+services:
+  watchtower:
+    image: containrrr/watchtower
+    container_name: watchtower
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    env_file:
+      - .env
+    command: --interval 800 --cleanup --label-enable --debug
+    restart: unless-stopped
+
+  dozzle:
+    image: amir20/dozzle:latest
+    container_name: dozzle
+    command: agent --hostname production
+    ports:
+      - '7007:7007'
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./users/:/data/
+    environment:
+      dozzle_enable_actions: true
+      dozzle_enable_shell: true
+    restart: unless-stopped

production-machine/docker-composes/dozzle-agent/users/users.yaml

@@ -0,0 +1,14 @@
+users:
+  admin:
+    email: admin@raven.com
+    name: Admin
+    password: $2a$11$z31zulLD8YwEuRsbzCi.celSe5B/zm0ivMajy6JKb5C4BVdGMLXVS
+    filter:
+    roles: all
+
+  raven:
+    email: dev@raven.com
+    name: Raven User
+    password: $2a$11$updMHwPs/YQ.p70R9wPs0OiNfcvI/1V8Wi.OLNyQVrqDAXxY80z7W
+    filter: label=dozzle=true
+    roles: none

production-machine/docker-composes/production/nginx.conf

@@ -0,0 +1,59 @@
+events {
+    worker_connections 1024;
+}
+
+http {
+    client_max_body_size 15m;
+
+    map $http_x_client_ip $sticky_ip {
+        ""        $remote_addr;     # If header is missing or empty → take $remote_addr
+        default   $http_x_client_ip;
+    }
+
+    upstream backend_upstream {
+        hash $sticky_ip consistent;
+        server production-backend-1:5000;
+        server production-backend-2:5000;
+        server production-backend-3:5000;
+    }
+
+    server {
+        listen 80;
+        server_name api.raven.cmp27.space;
+
+        location / {
+            proxy_pass http://backend_upstream;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            # websocket
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+
+            # prevent timeout?
+            proxy_read_timeout 3600;
+            proxy_send_timeout 3600;
+        }
+
+        location /stream {
+            proxy_pass http://backend_upstream;
+            proxy_http_version 1.1;
+            proxy_set_header Connection '';
+            proxy_buffering off;
+            proxy_cache off;
+            proxy_request_buffering off;
+            proxy_ignore_client_abort on;
+            proxy_read_timeout 3600;
+            proxy_send_timeout 3600;
+            add_header X-Accel-Buffering no;
+            gzip off;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+    }
+}

nginx-configs/raven.cmp27.space.nginx → production-machine/nginx-configs/raven.cmp27.space.nginx

@@ -11,7 +11,6 @@ server {
 }
 
 server {
-
     listen 443 ssl;
     server_name api.raven.cmp27.space;
 
@@ -30,15 +29,14 @@ server {
 
 
         if ($host = www.api.raven.cmp27.space) {
-                return 301 https://api.raven.cmp27.space$request_uri;
+            return 301 https://api.raven.cmp27.space$request_uri;
         }
 
         # websocket stuff
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "upgrade";
     }
-
 }
 
 server {
@@ -55,7 +53,6 @@ server {
         return 301 https://raven.cmp27.space$request_uri;
     }
 
-
     location / {
         proxy_pass http://127.0.0.1:5174;
         proxy_set_header Host $host;

docker-composes/logging/docker-compose.yaml → staging-machine/docker-composes/logging/docker-compose.yaml

@@ -3,22 +3,16 @@ services:
     image: containrrr/watchtower
     container_name: watchtower
     volumes:
-      - /var/run/docker.sock:/var/run/docker.
+      - /var/run/docker.sock:/var/run/docker.sock
     env_file:
       - .env
-    environment:
-      - WATCHTOWER_POLL_INTERVAL=800
-      - WATCHTOWER_CLEANUP=true
-      - WATCHTOWER_LABEL_ENABLE=true
-      - REPO_USER=loayahmed
-      - WATCHTOWER_NOTIFICATIONS=shoutrrr
-      - WATCHTOWER_NOTIFICATION_TITLETAG=Raven
     command: --interval 800 --cleanup --label-enable --debug
     restart: unless-stopped
 
   dozzle:
     image: amir20/dozzle:latest
     container_name: dozzle
+    command: --remote-agent 167.71.53.241:7007 --remote-agent 46.101.236.181:7007
     ports:
       - '6677:8080'
     volumes:

staging-machine/docker-composes/love/docker-compose.yaml

@@ -0,0 +1,51 @@
+services:
+  backend:
+    image: loayahmed/raven-backend:love
+    container_name: backend-love
+    labels:
+      - 'dozzle=true'
+    ports:
+      - ${BACKEND_PORT}:3000
+    logging:
+      driver: json-file
+      options:
+        max-size: '20m'
+        max-file: '3'
+    env_file:
+      - .env
+    depends_on:
+      - redis
+    networks:
+      - love
+    restart: on-failure
+    healthcheck:
+      test: ['CMD', 'wget', '--spider', '-q', 'http://localhost:3000/health']
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+
+  redis:
+    image: redis:8-alpine
+    container_name: redis-love
+    labels:
+      - 'dozzle=true'
+    volumes:
+      - redisdata-love:/data
+    command: ['redis-server', '--appendonly', 'yes']
+    healthcheck:
+      test: ['CMD', 'redis-cli', 'ping']
+      interval: 10s
+      timeout: 5s
+      retries: 3
+    networks:
+      - love
+    restart: unless-stopped
+
+volumes:
+  redisdata-love:
+
+networks:
+  love:
+    driver: bridge
+    name: raven-network-love

staging-machine/docker-composes/temp/docker-compose.yaml

@@ -0,0 +1,52 @@
+services:
+  backend:
+    image: loayahmed/raven-backend:temp-spec
+    container_name: backend-temp
+    labels:
+      - 'dozzle=true'
+    ports:
+      - ${BACKEND_PORT}:3000
+    logging:
+      driver: json-file
+      options:
+        max-size: '20m'
+        max-file: '3'
+    env_file:
+      - .env
+    depends_on:
+      - redis
+    networks:
+      - temp
+    restart: on-failure
+
+    healthcheck:
+      test: ['CMD', 'wget', '--spider', '-q', 'http://localhost:3000/health']
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+
+  redis:
+    image: redis:8-alpine
+    container_name: redis-temp
+    labels:
+      - 'dozzle=true'
+    volumes:
+      - redisdata-temp:/data
+    command: ['redis-server', '--appendonly', 'yes']
+    healthcheck:
+      test: ['CMD', 'redis-cli', 'ping']
+      interval: 10s
+      timeout: 5s
+      retries: 3
+    networks:
+      - temp
+    restart: unless-stopped
+
+volumes:
+  redisdata-temp:
+
+networks:
+  temp:
+    driver: bridge
+    name: raven-network-temp

staging-machine/nginx-configs/love.raven.cmp27.space.nginx

@@ -0,0 +1,58 @@
+server {
+    if ($host = love.raven.cmp27.space) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+    listen 80;
+    server_name love.raven.cmp27.space;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name love.raven.cmp27.space;
+    ssl_certificate /etc/letsencrypt/live/love.raven.cmp27.space/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/love.raven.cmp27.space/privkey.pem; # managed by Certbot
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    gzip off;
+    location / {
+        proxy_pass http://127.0.0.1:6699;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        if ($host = www.love.api.raven.cmp27.space) {
+                return 301 https://love.raven.cmp27.space$request_uri;
+        }
+
+        # websocket stuff
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+
+        proxy_read_timeout 3600;
+        proxy_send_timeout 3600;
+    }
+
+    location /stream {
+        proxy_pass http://127.0.0.1:6699;
+        proxy_http_version 1.1;
+        proxy_set_header Connection '';
+        proxy_buffering off;
+        proxy_cache off;
+        proxy_request_buffering off;
+        proxy_ignore_client_abort on;
+        proxy_read_timeout 3600;
+        proxy_send_timeout 3600;
+        add_header X-Accel-Buffering no;
+        gzip off;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}