OleksandrPoltavets · July 4, 2024 18:37
diff --git a/.env b/.env
 POSTGRES_DB=myapp_production
 POSTGRES_USER=postgres
 POSTGRES_PASSWORD=password
 POSTGRES_HOST=db
 RAILS_ENV=production
 RAILS_MASTER_KEY=your_master_key_here
diff --git a/README.MD b/README.MD
diff --git a/deploy.yml b/deploy.yml
 name: Deploy to EC2

 on:
  push:
    branches:
      - main  # Change to your main branch name if different

 jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Set up SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.EC2_SSH_KEY }}" > ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa
          echo "Host ec2-instance" >> ~/.ssh/config
          echo "  HostName ${{ secrets.EC2_HOST }}" >> ~/.ssh/config
          echo "  User ${{ secrets.EC2_USER }}" >> ~/.ssh/config
          echo "  IdentityFile ~/.ssh/id_rsa" >> ~/.ssh/config
          echo "  StrictHostKeyChecking no" >> ~/.ssh/config

      - name: Archive the repository contents
        run: |
          mkdir -p /tmp/repo
          cp -r . /tmp/repo
          tar -czf /tmp/repo.tar.gz -C /tmp repo

      - name: Copy archive to EC2
        run: scp -o StrictHostKeyChecking=no /tmp/repo.tar.gz ec2-instance:/home/ubuntu/dockerable.tar.gz

      - name: Deploy on EC2
        run: |
          ssh ec2-instance << 'EOF'
            cd /home/ubuntu
            mkdir -p dockerable
            tar -xzf dockerable.tar.gz -C dockerable --strip-components=1
            cd dockerable
            docker-compose down
            docker-compose build
            docker-compose up -d
            sudo systemctl restart nginx
          EOF
diff --git a/docker-compose.yml b/docker-compose.yml
 services:
  db:
    image: postgres:14.2-alpine
    container_name: demo-postgres-14.2
    volumes:
      - postgres_data:/var/lib/postgresql/data
    command:
      "postgres -c 'max_connections=500'"
    environment:
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
    ports:
      - "5432:5432"
  demo-web:
    build: .
    command: "./bin/rails server"
    environment:
      - RAILS_ENV=${RAILS_ENV}
      - POSTGRES_HOST=${POSTGRES_HOST}
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - RAILS_MASTER_KEY=${RAILS_MASTER_KEY}
    volumes:
      - app-storage:/rails/storage
    depends_on:
      - db
    ports:
      - "3000:3000"

 volumes:
  postgres_data: {}
  app-storage: {}
diff --git a/Dockerfile b/Dockerfile
 # syntax = docker/dockerfile:1

 ARG RUBY_VERSION=3.3.0
 FROM registry.docker.com/library/ruby:$RUBY_VERSION-slim as base

 # Rails app lives here
 WORKDIR /rails

 # Set production environment
 ENV RAILS_ENV="production" \
    BUNDLE_DEPLOYMENT="1" \
    BUNDLE_PATH="/usr/local/bundle" \
    BUNDLE_WITHOUT="development"

 # Throw-away build stage to reduce size of final image
 FROM base as build

 # Install packages needed to build gems
 RUN apt-get update -qq && \
    apt-get install --no-install-recommends -y build-essential git libpq-dev libvips pkg-config

 # Install application gems
 COPY Gemfile Gemfile.lock ./
 RUN gem install rails && \
    bundle install && \
    rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \
    bundle exec bootsnap precompile --gemfile

 # Copy application code
 COPY . .

 # Precompile bootsnap code for faster boot times
 RUN bundle exec bootsnap precompile app/ lib/

 # Final stage for app image
 FROM base

 # Install packages needed for deployment
 RUN apt-get update -qq && \
    apt-get install --no-install-recommends -y curl libvips postgresql-client && \
    rm -rf /var/lib/apt/lists /var/cache/apt/archives

 # Copy built artifacts: gems, application
 COPY --from=build /usr/local/bundle /usr/local/bundle
 COPY --from=build /rails /rails

 # Run and own only the runtime files as a non-root user for security
 RUN useradd rails --create-home --shell /bin/bash && \
    chown -R rails:rails db log storage tmp
 USER rails:rails

 # Ensure the Rails bin directory is in the PATH
 ENV PATH="/rails/bin:/usr/local/bundle/bin:${PATH}"

 # Entrypoint prepares the database.
 ENTRYPOINT ["/rails/bin/docker-entrypoint"]

 # Start the server by default, this can be overwritten at runtime
 EXPOSE 3000
 CMD ["./bin/rails", "server"]
diff --git a/nginx.config b/nginx.config
 server {
    listen 80;
    server_name _;

    location / {
        proxy_pass http://localhost:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
 }
	POSTGRES_DB=myapp_production
	POSTGRES_USER=postgres
	POSTGRES_PASSWORD=password
	POSTGRES_HOST=db
	RAILS_ENV=production
	RAILS_MASTER_KEY=your_master_key_here
	name: Deploy to EC2

	on:
	push:
	branches:
	- main # Change to your main branch name if different

	jobs:
	deploy:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v2

	- name: Set up SSH
	run: \|
	mkdir -p ~/.ssh
	echo "${{ secrets.EC2_SSH_KEY }}" > ~/.ssh/id_rsa
	chmod 600 ~/.ssh/id_rsa
	echo "Host ec2-instance" >> ~/.ssh/config
	echo " HostName ${{ secrets.EC2_HOST }}" >> ~/.ssh/config
	echo " User ${{ secrets.EC2_USER }}" >> ~/.ssh/config
	echo " IdentityFile ~/.ssh/id_rsa" >> ~/.ssh/config
	echo " StrictHostKeyChecking no" >> ~/.ssh/config

	- name: Archive the repository contents
	run: \|
	mkdir -p /tmp/repo
	cp -r . /tmp/repo
	tar -czf /tmp/repo.tar.gz -C /tmp repo

	- name: Copy archive to EC2
	run: scp -o StrictHostKeyChecking=no /tmp/repo.tar.gz ec2-instance:/home/ubuntu/dockerable.tar.gz

	- name: Deploy on EC2
	run: \|
	ssh ec2-instance << 'EOF'
	cd /home/ubuntu
	mkdir -p dockerable
	tar -xzf dockerable.tar.gz -C dockerable --strip-components=1
	cd dockerable
	docker-compose down
	docker-compose build
	docker-compose up -d
	sudo systemctl restart nginx
	EOF
	services:
	db:
	image: postgres:14.2-alpine
	container_name: demo-postgres-14.2
	volumes:
	- postgres_data:/var/lib/postgresql/data
	command:
	"postgres -c 'max_connections=500'"
	environment:
	- POSTGRES_DB=${POSTGRES_DB}
	- POSTGRES_USER=${POSTGRES_USER}
	- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
	ports:
	- "5432:5432"
	demo-web:
	build: .
	command: "./bin/rails server"
	environment:
	- RAILS_ENV=${RAILS_ENV}
	- POSTGRES_HOST=${POSTGRES_HOST}
	- POSTGRES_DB=${POSTGRES_DB}
	- POSTGRES_USER=${POSTGRES_USER}
	- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
	- RAILS_MASTER_KEY=${RAILS_MASTER_KEY}
	volumes:
	- app-storage:/rails/storage
	depends_on:
	- db
	ports:
	- "3000:3000"

	volumes:
	postgres_data: {}
	app-storage: {}
	# syntax = docker/dockerfile:1

	ARG RUBY_VERSION=3.3.0
	FROM registry.docker.com/library/ruby:$RUBY_VERSION-slim as base

	# Rails app lives here
	WORKDIR /rails

	# Set production environment
	ENV RAILS_ENV="production" \
	BUNDLE_DEPLOYMENT="1" \
	BUNDLE_PATH="/usr/local/bundle" \
	BUNDLE_WITHOUT="development"

	# Throw-away build stage to reduce size of final image
	FROM base as build

	# Install packages needed to build gems
	RUN apt-get update -qq && \
	apt-get install --no-install-recommends -y build-essential git libpq-dev libvips pkg-config

	# Install application gems
	COPY Gemfile Gemfile.lock ./
	RUN gem install rails && \
	bundle install && \
	rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby//cache "${BUNDLE_PATH}"/ruby//bundler/gems/*/.git && \
	bundle exec bootsnap precompile --gemfile

	# Copy application code
	COPY . .

	# Precompile bootsnap code for faster boot times
	RUN bundle exec bootsnap precompile app/ lib/

	# Final stage for app image
	FROM base

	# Install packages needed for deployment
	RUN apt-get update -qq && \
	apt-get install --no-install-recommends -y curl libvips postgresql-client && \
	rm -rf /var/lib/apt/lists /var/cache/apt/archives

	# Copy built artifacts: gems, application
	COPY --from=build /usr/local/bundle /usr/local/bundle
	COPY --from=build /rails /rails

	# Run and own only the runtime files as a non-root user for security
	RUN useradd rails --create-home --shell /bin/bash && \
	chown -R rails:rails db log storage tmp
	USER rails:rails

	# Ensure the Rails bin directory is in the PATH
	ENV PATH="/rails/bin:/usr/local/bundle/bin:${PATH}"

	# Entrypoint prepares the database.
	ENTRYPOINT ["/rails/bin/docker-entrypoint"]

	# Start the server by default, this can be overwritten at runtime
	EXPOSE 3000
	CMD ["./bin/rails", "server"]
	server {
	listen 80;
	server_name _;

	location / {
	proxy_pass http://localhost:3000;
	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	proxy_set_header X-Forwarded-Proto $scheme;
	}
	}