Merge branch 'main' of https://github.com/cloudmosa/authenticator-backend

Author: Tombarr

.github/workflows/deploy-production.yaml

@@ -0,0 +1,47 @@
+name: Deploy with Docker Compose
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  deploy:
+    runs-on: authenticator-backend
+
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up Docker
+        uses: docker/setup-buildx-action@v3
+
+      - name: Deploy containers
+        env:
+          ALLOWED_ORIGINS: ${{ secrets.ALLOWED_ORIGINS }}
+        run: |
+          echo "🔍 Checking redis container status..."
+          if docker ps --filter "name=redis" --filter "health=healthy" --format '{{.Names}}' | grep -q '^redis$'; then
+            echo "✅ Redis container is already healthy. Skipping redis restart."
+            REDIS_RUNNING=true
+          else
+            echo "⚠️ Redis not running or unhealthy. It will be (re)started."
+            REDIS_RUNNING=false
+          fi
+
+          echo "🚀 Starting deployment..."
+          if [ "$REDIS_RUNNING" = true ]; then
+            docker compose -f docker-compose-prod.yml up -d --build --no-deps app
+          else
+            docker compose -f docker-compose-prod.yml up -d --build
+          fi
+
+          echo "🧹 Cleaning up unused resources..."
+          docker system prune -f
+
+      - name: Verify containers
+        run: |
+          docker ps
+          echo
+          echo "📋 Container health statuses:"
+          docker ps --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}"

docker-compose-prod.yml

@@ -0,0 +1,39 @@
+services:
+  app:
+    build: .
+    container_name: mfa-service
+    environment:
+      - NODE_ENV=production
+      - REDIS_URL=redis://redis:6379
+      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS:-*}
+    depends_on:
+      redis:
+        condition: service_healthy
+    restart: unless-stopped
+    networks:
+      - mfa-network
+      - traefik-net
+
+  redis:
+    image: redis:7-alpine
+    command: redis-server --maxmemory 256mb --maxmemory-policy allkeys-lru
+    volumes:
+      - redis-data:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+    restart: unless-stopped
+    networks:
+      - mfa-network
+
+volumes:
+  redis-data:
+
+networks:
+  mfa-network:
+    driver: bridge
+
+  traefik-net:
+    external: true