1.0.0a1

.devcontainer/devcontainer.json

@@ -14,7 +14,7 @@
       "version": "3.14"
     },
     "ghcr.io/devcontainers/features/node:1": {
-      "version": "24.12"
+      "version": "24"
     },
     "ghcr.io/devcontainers/features/docker-outside-of-docker:1": {
       "version": "latest",

.devcontainer/setup_commands.sh

@@ -19,7 +19,7 @@ install_deps() {
     npm install -g npm && npm install -g pnpm
     pnpm config set global-bin-dir "$HOME/.local/bin"
     pnpm config set store-dir "$HOME/.pnpm-store"
-    pnpm install
+    pnpm install -r
 }
 
 genarate_ssl_key() {

.github/workflows/ci.yml

@@ -0,0 +1,70 @@
+# ci.yml
+
+name: CI
+
+on:
+  push:
+    branches: [main]
+    paths: &target_paths
+      - "src/**"
+      - "tests/**"
+      - "pyproject.toml"
+      - "uv.lock"
+  pull_request:
+    branches: [main, develop]
+    paths: *target_paths
+
+jobs:
+  checks:
+    name: ${{ matrix.task.name }}
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        task:
+          - name: Test
+            command: "task test"
+          - name: Lint
+            command: "task lint"
+          - name: Typecheck
+            command: "task typecheck"
+
+    env:
+      UV_CACHE_DIR: /tmp/.uv-cache
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          version: "latest"
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version-file: ".python-version"
+
+      - name: Install dependencies
+        run: |
+          uv sync --locked --all-extras --dev
+          uv pip install .
+
+      - name: Restore uv cache
+        uses: actions/cache@v5
+        with:
+          path: /tmp/.uv-cache
+          key: uv-${{ runner.os }}-${{ hashFiles('uv.lock') }}
+          restore-keys: |
+            uv-${{ runner.os }}-${{ hashFiles('uv.lock') }}
+            uv-${{ runner.os }}
+
+      - name: Run Task
+        run: |
+          export PYTHONPATH=$(pwd)
+          uv run ${{ matrix.task.command }}
+
+      - name: Minimize uv cache
+        run: uv cache prune --ci

.husky/pre-commit

@@ -0,0 +1,5 @@
+task lint
+task format
+task typecheck
+
+pnpm run lint

.nuxtrc

@@ -0,0 +1 @@
+setups.@nuxt/test-utils="4.0.0"

Dockerfile

@@ -16,6 +16,9 @@ ENV VIRTUAL_ENV="/code/.venv"
 ENV PATH="$VIRTUAL_ENV/bin:$PATH"
 
 WORKDIR /code
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
 RUN pip install -U pip && pip install uv
 
 RUN groupadd -g ${GID} ${GROUPNAME} && \
@@ -44,3 +47,32 @@ ENV FLASK_DEBUG=1
 
 EXPOSE 5050
 CMD ["flask", "run", "--reload"]
+
+# ==============================
+# Production stage:
+#   install only prod dependencies and start prod server
+# ==============================
+FROM base AS prod
+
+USER root
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        build-essential \
+        python3-dev \
+        libssl-dev \
+        libpcre2-dev \
+        supervisor && \
+    rm -rf /var/lib/apt/lists/*
+RUN uv pip install uwsgi --system
+
+
+COPY pyproject.toml uv.lock ./
+RUN uv sync --no-dev --frozen
+
+COPY . .
+RUN uv pip install .
+
+ENV FLASK_ENV=production
+ENV FLASK_APP="server.app"
+
+CMD ["/usr/bin/supervisord", "-c", "supervisord.web.conf"]

Dockerfile.vite

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-ARG NODE_VERSION=24.12
+ARG NODE_VERSION=24
 
 # ==============================
 # Base stage: common setup

certs/.gitignore

@@ -0,0 +1,2 @@
+*.crt
+*.key

compose.prod.yaml

@@ -0,0 +1,158 @@
+# Docker Compose configuration for development environment
+
+services:
+  web:
+    restart: "always"
+    build:
+      context: .
+      target: prod
+    image: jc-groups-manager-prod
+    container_name: web
+    ports:
+      - "5050:5050"
+    networks:
+      - default
+
+  worker:
+    restart: "always"
+    build:
+      context: .
+      target: prod
+    image: jc-groups-manager-prod
+    container_name: worker
+    command: "/usr/bin/supervisord -c supervisord.worker.conf"
+    depends_on:
+      - sentinel-1
+      - sentinel-2
+      - sentinel-3
+      - rabbitmq
+    networks:
+      - default
+
+
+  nginx:
+    build:
+      context: .
+      dockerfile: nginx/Dockerfile
+      target: prod
+    image: jc-groups-manager-nginx-prod
+    container_name: nginx
+    ports:
+      - "80:80"
+      - "443:443"
+    depends_on:
+      - web
+    networks:
+      - default
+
+  postgres:
+    restart: "always"
+    image: postgres:12
+    environment:
+      POSTGRES_USER: jcgroups
+      POSTGRES_DB: jcgroups
+      POSTGRES_PASSWORD: jcpass
+    ports:
+      - "5432:5432"
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    networks:
+      - default
+
+
+  redis-master:
+    image: redis:7.4.1
+    container_name: redis-master
+    command: >
+      redis-server
+      --appendonly yes
+      --replica-announce-ip redis-master
+      --replica-announce-port 6379
+    ports:
+      - "6379:6379"
+    networks:
+      - default
+
+  redis-replica-1:
+    image: redis:7.4.1
+    container_name: redis-replica-1
+    command: >
+      redis-server
+      --replicaof redis-master 6379
+      --appendonly yes
+      --replica-announce-ip redis-replica-1
+      --replica-announce-port 6379
+    depends_on:
+      - redis-master
+    networks:
+      - default
+
+  redis-replica-2:
+    image: redis:7.4.1
+    container_name: redis-replica-2
+    command: >
+      redis-server
+      --replicaof redis-master 6379
+      --appendonly yes
+      --replica-announce-ip redis-replica-2
+      --replica-announce-port 6379
+    depends_on:
+      - redis-master
+    networks:
+      - default
+
+  sentinel-1:
+    image: redis:7.4.1
+    container_name: sentinel-1
+    depends_on: &sentinel-depends-on
+      - redis-master
+      - redis-replica-1
+      - redis-replica-2
+    ports:
+      - "26379:26379"
+    command: &sentinel-command >
+      sh -c "
+      sleep 3 &&
+      echo 'port 26379' > /tmp/sentinel.conf &&
+      echo 'sentinel monitor mymaster redis-master 6379 2' >> /tmp/sentinel.conf &&
+      echo 'sentinel down-after-milliseconds mymaster 5000' >> /tmp/sentinel.conf &&
+      echo 'sentinel failover-timeout mymaster 10000' >> /tmp/sentinel.conf &&
+      echo 'sentinel parallel-syncs mymaster 1' >> /tmp/sentinel.conf &&
+      echo 'sentinel resolve-hostnames yes' >> /tmp/sentinel.conf &&
+      echo 'sentinel announce-hostnames yes' >> /tmp/sentinel.conf &&
+      redis-sentinel /tmp/sentinel.conf
+      "
+    networks:
+      - default
+
+  sentinel-2:
+    image: redis:7.4.1
+    container_name: sentinel-2
+    depends_on: *sentinel-depends-on
+    command: *sentinel-command
+    networks:
+      - default
+
+  sentinel-3:
+    image: redis:7.4.1
+    container_name: sentinel-3
+    depends_on: *sentinel-depends-on
+    command: *sentinel-command
+    networks:
+      - default
+
+
+  rabbitmq:
+    restart: "always"
+    image: rabbitmq:4.0.2
+    environment:
+      RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS: "-rabbit consumer_timeout 10800000"
+
+
+volumes:
+  pgdata:
+
+networks:
+  default:
+    external: true
+    name: jairocloud-groups-manager_default

compose.yaml

@@ -99,7 +99,7 @@ services:
       context: .
       dockerfile: nginx/Dockerfile
       target: dev
-    image: jc-groups-manager-nginx
+    image: jc-groups-manager-nginx-dev
     container_name: nginx
     ports:
       - "80:80"