🚀 CI/CD Pipeline

Pipeline Features: GitHub Actions • Docker Containerization • DigitalOcean Droplet • SSL/TLS Security

🏗️ Architecture Overview

graph TD
    A["👨‍💻 Developer"] -->|git push| B["📦 GitHub Repository"]
    B -->|Trigger| C["🔄 GitHub Actions"]

    C --> D["🏗️ Build Stage"]
    D --> E["📦 Docker Build"]
    E --> F["📤 Push to Docker Hub"]

    F --> G["🚀 Deploy Stage"]
    G --> H["🔐 SSH to DigitalOcean"]
    H --> I["⬇️ Pull Latest Image"]
    I --> J["🐳 Docker Compose Up"]

    J --> K["🌐 Nginx Reverse Proxy"]
    K --> L["🔒 SSL/TLS Termination"]
    L --> M["🎯 Production Site"]

    N["🗄️ PostgreSQL Database"] --> J
    O["⚡ Redis Cache"] --> J

🔧 Infrastructure Components

🔄 GitHub Actions Workflow

📋 Build & Deploy Process

- name: Build and push Docker image
  uses: docker/build-push-action@v5
  with:
    context: .
    push: true
    tags: arafat6462/resumate:master

# SSH to production server
ssh root@arafat2.me

# Pull latest image and deploy
docker pull arafat6462/resumate:master
IMAGE_TAG=master docker compose -f docker-compose.prod.yml up -d

# Cleanup old images
docker image prune -f

🔒 Security & Secrets

🐳 Docker Configuration

📦 Production Setup

FROM python:3.11-slim-buster
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY . .
RUN python manage.py collectstatic --noinput
EXPOSE 8000
CMD ["/app/entrypoint.sh"]

services:
  backend:
    image: arafat6462/resumate:${IMAGE_TAG:-latest}
    restart: always
    ports:
      - "8000:8000"
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_started

  db:
    image: postgres:16
    restart: always
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DB_USER} -d ${DB_NAME}"]
      interval: 5s
      timeout: 5s
      retries: 5

  redis:
    image: redis:alpine
    container_name: resumate_redis_prod
    restart: always
    command: redis-server --maxmemory 256mb --maxmemory-policy allkeys-lru
    volumes:
      - redis_data_prod:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 3

volumes:
  postgres_data_prod:
  redis_data_prod:

🌐 Nginx & SSL Configuration

🔒 Production Web Server

server {
    server_name arafat2.me www.arafat2.me;

    location / {
        proxy_pass http://127.0.0.1:8000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    listen 443 ssl;
    ssl_certificate /etc/letsencrypt/live/arafat2.me/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/arafat2.me/privkey.pem;
}

# HTTP to HTTPS redirect
server {
    listen 80;
    server_name arafat2.me www.arafat2.me;
    return 301 https://$host$request_uri;
}

📊 Deployment Timeline

gantt
    title Production Deployment Process
    dateFormat YYYY-MM-DD

    section Build
    Code Checkout    :checkout, 2025-01-01, 30s
    Docker Build     :build, after checkout, 150s
    Registry Push    :push, after build, 60s

    section Deploy
    SSH Connection   :ssh, after push, 10s
    Image Pull       :pull, after ssh, 60s
    Container Deploy :deploy, after pull, 30s
    Health Check     :health, after deploy, 20s

📋 Deployment Checklist

🔧 Key Features

⚡ Production Highlights

📈 Quick Commands