Fail-fast secrets in stage/prod via EVENTHUB_ENV. Refs EventHub/EventHubBack#25

2026-07-07 19:52:04 +03:00
parent 018bf85b87
commit cf8e6bcc07
10 changed files with 855 additions and 583 deletions
@@ -1,81 +1,87 @@
-version: "3.8"
-
-services:
-  # ================== Балансировщик ==================
-  traefik:
-    image: traefik:latest
-    command:
-      - "--log.level=DEBUG"
-      - "--api.insecure=true"
-      - "--providers.docker=true"
-      - "--providers.docker.exposedbydefault=false"
-      - "--entrypoints.web.address=:80"
-    ports:
-      - "80:80"
-    volumes:
-      - "/var/run/docker.sock:/var/run/docker.sock:ro"
-    networks:
-      - eventhub-net
-    deploy:
-      replicas: 1
-      restart_policy:
-        condition: any
-
-  # ================== Кластер EventHub ==================
-  eventhub:
-    image: git.sabilin.com/eventhub/eventhub:stage
-    hostname: "eventhub-node{{.Task.Slot}}"
-    environment:
-      - NODE_NAME=eventhub-node{{.Task.Slot}}
-      - RELEASE_COOKIE=${RELEASE_COOKIE}
-      - JWT_SECRET=${JWT_SECRET}
-      - ADMIN_SUPER_EMAIL=${ADMIN_SUPER_EMAIL}
-      - ADMIN_SUPER_PASSWORD=${ADMIN_SUPER_PASSWORD}
-      - ADMIN_EMAIL=${ADMIN_EMAIL}
-      - ADMIN_PASSWORD=${ADMIN_PASSWORD}
-      - CLUSTER_MODE=true
-      - DNS_NAME=eventhub-node
-    networks:
-      eventhub-net:
-        aliases:
-          - eventhub-node
-    volumes:
-      - eventhub-data:/app/data
-    healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
-      interval: 10s
-      timeout: 5s
-      retries: 3
-      start_period: 30s
-    deploy:
-      replicas: 1
-      endpoint_mode: dnsrr
-      restart_policy:
-        condition: any
-
-  # ================== Эмулятор ботов ==================
-  bot-emulator-users:
-    image: git.sabilin.com/eventhub/bot-emulator-users:stage
-    environment:
-      - ADMIN_API_HOST=http://eventhub-node:8445
-      - CLIENT_API_HOST=http://eventhub-node:8080
-      - ADMIN_EMAIL=${ADMIN_EMAIL}
-      - ADMIN_PASSWORD=${ADMIN_PASSWORD}
-      - BOT_PASSWORD=${BOT_PASSWORD}
-      - STARTUP_DELAY=30
-      - DEBUG=true
-    networks:
-      - eventhub-net
-    depends_on:
-      - eventhub
-    deploy:
-      replicas: 0
-      restart_policy:
-        condition: any
-
-networks:
-  eventhub-net:
-    driver: overlay
-
-volumes:
+version: "3.8"
+
+services:
+  # ================== Балансировщик ==================
+  traefik:
+    image: traefik:latest
+    command:
+      - "--log.level=DEBUG"
+      - "--api.insecure=true"
+      - "--providers.docker=true"
+      - "--providers.docker.exposedbydefault=false"
+      - "--entrypoints.web.address=:80"
+    ports:
+      - "80:80"
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock:ro"
+    networks:
+      - eventhub-net
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: any
+
+  # ================== Кластер EventHub ==================
+  eventhub:
+    image: git.sabilin.com/eventhub/eventhub:stage
+    hostname: "eventhub-node{{.Task.Slot}}"
+    environment:
+      - EVENTHUB_ENV=stage
+      - NODE_NAME=eventhub-node{{.Task.Slot}}
+      - RELEASE_COOKIE=${RELEASE_COOKIE}
+      - JWT_SECRET=${JWT_SECRET}
+      - ADMIN_JWT_SECRET=${ADMIN_JWT_SECRET}
+      - ADMIN_SUPER_EMAIL=${ADMIN_SUPER_EMAIL}
+      - ADMIN_SUPER_PASSWORD=${ADMIN_SUPER_PASSWORD}
+      - ADMIN_EMAIL=${ADMIN_EMAIL}
+      - ADMIN_PASSWORD=${ADMIN_PASSWORD}
+      - ADMIN_MODER_EMAIL=${ADMIN_MODER_EMAIL}
+      - ADMIN_MODER_PASSWORD=${ADMIN_MODER_PASSWORD}
+      - ADMIN_SUPPORT_EMAIL=${ADMIN_SUPPORT_EMAIL}
+      - ADMIN_SUPPORT_PASSWORD=${ADMIN_SUPPORT_PASSWORD}
+      - CLUSTER_MODE=true
+      - DNS_NAME=eventhub-node
+    networks:
+      eventhub-net:
+        aliases:
+          - eventhub-node
+    volumes:
+      - eventhub-data:/app/data
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
+      start_period: 30s
+    deploy:
+      replicas: 1
+      endpoint_mode: dnsrr
+      restart_policy:
+        condition: any
+
+  # ================== Эмулятор ботов ==================
+  bot-emulator-users:
+    image: git.sabilin.com/eventhub/bot-emulator-users:stage
+    environment:
+      - ADMIN_API_HOST=http://eventhub-node:8445
+      - CLIENT_API_HOST=http://eventhub-node:8080
+      - ADMIN_EMAIL=${ADMIN_EMAIL}
+      - ADMIN_PASSWORD=${ADMIN_PASSWORD}
+      - BOT_PASSWORD=${BOT_PASSWORD}
+      - STARTUP_DELAY=30
+      - DEBUG=true
+    networks:
+      - eventhub-net
+    depends_on:
+      - eventhub
+    deploy:
+      replicas: 0
+      restart_policy:
+        condition: any
+
+networks:
+  eventhub-net:
+    driver: overlay
+
+volumes:
  eventhub-data: