Guia de implantação em Produção do AirysChat com Docker

$ docker --version
Docker version 20.10.10, build b485636
$ docker compose version
Docker Compose version v2.14.1

# exemplo no ubuntu
apt-get update
apt-get upgrade
curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
apt install docker-compose-plugin

# Baixar o template do arquivo de ambiente
wget -O .env https://raw.githubusercontent.com/airyschat/airyschat/develop/.env.example
# Baixar o template do Docker compose
wget -O docker-compose.yaml https://raw.githubusercontent.com/airyschat/airyschat/develop/docker-compose.production.yaml

# atualizar senhas do redis e postgres
nano .env
# atualizar docker-compose.yaml com a mesma senha do postgres
nano docker-compose.yaml

docker compose run --rm rails bundle exec rails db:airyschat_prepare

docker compose up -d

sudo apt-get install nginx
cd /etc/nginx/sites-enabled
nano yourdomain.com.conf

server {
  server_name <yourdomain.com>;

  # Aponta o upstream para o Servidor de Aplicativo AirysChat
  set $upstream 127.0.0.1:3000;

  # Nginx remove o sublinhado nos cabeçalhos por padrão
  # AirysChat depende de sublinhado nos cabeçalhos para a API
  # Certifique-se de que a configuração esteja definida como on.
  underscores_in_headers on;
  location /.well-known {
    alias /var/www/ssl-proof/airyschat/.well-known;
  }

  location / {
    proxy_pass_header Authorization;
    proxy_pass http://$upstream;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Ssl on; # Opcional

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    proxy_http_version 1.1;
    proxy_buffering off;

    client_max_body_size 0;
    proxy_read_timeout 36000s;
    proxy_redirect off;
  }
  listen 80;
}

nginx -t
systemctl reload nginx

apt install certbot
apt-get install python3-certbot-nginx
mkdir -p /var/www/ssl-proof/airyschat/.well-known
certbot --webroot -w /var/www/ssl-proof/airyschat/ -d yourdomain.com -i nginx

FROM airyschat/airyschat:latest
RUN chmod +x docker/entrypoints/rails.sh
ENTRYPOINT ["docker/entrypoints/rails.sh"]
CMD bundle exec bundle exec rails s -b 0.0.0.0 -p 3000

FROM airyschat/airyschat:latest
RUN chmod +x docker/entrypoints/rails.sh
ENTRYPOINT ["docker/entrypoints/rails.sh"]
CMD bundle exec sidekiq -C config/sidekiq.yml

docker compose pull
docker compose up -d

docker compose run --rm rails bundle exec rails db:airyschat_prepare

docker exec -it $(basename $(pwd))-rails-1 sh -c 'RAILS_ENV=production bundle exec rails c'