gohorsejobs/DEVOPS.md

DevOps - GoHorseJobs

Documentação de infraestrutura, CI/CD e deploy do projeto GoHorseJobs.

---

📁 Estrutura

.
├── .drone.yml                 # Pipeline CI/CD (Drone)
├── k8s/
│   ├── dev/                   # Manifests Kubernetes - Desenvolvimento
│   │   ├── backend-deployment.yaml
│   │   └── backend-service.yaml
│   ├── hml/                   # Manifests Kubernetes - Homologação
│   │   ├── backend-deployment.yaml
│   │   └── backend-service.yaml
│   └── prd/                   # Manifests Kubernetes - Produção
│       ├── backend-deployment.yaml
│       └── backend-service.yaml
├── backend/
│   ├── Dockerfile             # Build da API Go
│   └── .env.example           # Variáveis de ambiente
├── frontend/                  # Next.js App
└── seeder-api/                # Seeder Node.js para popular DB

---

🌍 Ambientes

Ambiente	Branch	Namespace K8s	Registry Harbor	Réplicas
DEV	dev	gohorsejobsdev	gohorsejobsdev/gohorsejobs-backend	1
HML	hml	gohorsejobshml	gohorsejobshml/gohorsejobs-backend	2
PRD	main	gohorsejobs	gohorsejobs/gohorsejobs-backend	3

---

🔄 Pipeline CI/CD (Drone)

Fluxo de Deploy

dev branch → build → push (Harbor) → deploy (K8s gohorsejobsdev)
     ↓
hml branch → build → push (Harbor) → deploy (K8s gohorsejobshml)
     ↓
main branch → build → push (Harbor) → deploy (K8s gohorsejobs)

Triggers

• Push na branch dev → executa pipeline deploy-backend-dev
• Push na branch hml → executa pipeline deploy-backend-hml
• Push na branch main → executa pipeline deploy-backend-prd

Etapas do Pipeline

1. build-and-push-backend - Builda imagem Docker e envia para Harbor
2. export-envs-to-k8s - Cria secret backend-secrets no namespace
3. deploy-backend - Aplica manifests K8s e reinicia deployment

---

🔐 Secrets (Drone CI)

Secrets que precisam estar configurados no Drone:

Registry

Secret	Descrição
HARBOR_USERNAME	Usuário do Harbor
HARBOR_PASSWORD	Senha do Harbor

Database

Secret	Ambiente	Descrição
DB_HOST	Todos	Host do PostgreSQL
DB_PORT	Todos	Porta do PostgreSQL
DB_USER	Todos	Usuário do PostgreSQL
DB_PASSWORD	Todos	Senha do PostgreSQL
DB_SSLMODE	Todos	require ou disable
DB_NAME_DEV	DEV	Nome do banco dev
DB_NAME_HML	HML	Nome do banco hml
DB_NAME	PRD	Nome do banco produção

S3/Object Storage

Secret	Descrição
AWS_ACCESS_KEY_ID	Access Key
AWS_SECRET_ACCESS_KEY	Secret Key
AWS_ENDPOINT	Endpoint S3-compatible
AWS_REGION	Região
S3_BUCKET	Nome do bucket

Aplicação

Secret	Descrição
JWT_SECRET	Secret para tokens JWT (min. 32 chars)
PORT	Porta da API (8521)
CORS_ORIGINS_DEV	URLs permitidas CORS (dev)
CORS_ORIGINS_HML	URLs permitidas CORS (hml)
CORS_ORIGINS	URLs permitidas CORS (prd)

---

☸️ Kubernetes

Namespaces

# Criar namespaces
kubectl create namespace gohorsejobsdev
kubectl create namespace gohorsejobshml
kubectl create namespace gohorsejobs

Registry Secret

Criar secret para pull de imagens do Harbor em cada namespace:

kubectl create secret docker-registry harbor-registry \
  --docker-server=in.gohorsejobs.com \
  --docker-username=<user> \
  --docker-password=<pass> \
  -n gohorsejobsdev

# Repetir para gohorsejobshml e gohorsejobs

Deploy Manual

# DEV
kubectl apply -f k8s/dev/backend-deployment.yaml
kubectl apply -f k8s/dev/backend-service.yaml

# HML
kubectl apply -f k8s/hml/backend-deployment.yaml
kubectl apply -f k8s/hml/backend-service.yaml

# PRD
kubectl apply -f k8s/prd/backend-deployment.yaml
kubectl apply -f k8s/prd/backend-service.yaml

Comandos Úteis

# Ver pods
kubectl get pods -n gohorsejobsdev

# Ver logs
kubectl logs -f deployment/gohorse-backend -n gohorsejobsdev

# Restart deployment
kubectl rollout restart deployment/gohorse-backend -n gohorsejobsdev

# Ver secrets
kubectl get secrets -n gohorsejobsdev

# Descrever deployment
kubectl describe deployment gohorse-backend -n gohorsejobsdev

---

🐳 Docker

Build Local

cd backend
docker build -t gohorsejobs-backend:local .

Variáveis de Ambiente

Ver .env.example para lista completa. Principais:

Variável	Descrição	Exemplo
PORT	Porta da API	8521
DB_HOST	Host PostgreSQL	db.example.com
DB_NAME	Nome do banco	gohorsejobs_dev
DB_SSLMODE	Modo SSL	require
JWT_SECRET	Secret JWT	sua-chave-secreta-32-chars

---

🗄️ Banco de Dados

Conexão

Host: db-60059.dc-sp-1.absamcloud.com
Port: 26868
SSL: require

Bancos por Ambiente

Ambiente	Database
DEV	gohorsejobs_dev
HML	gohorsejobs_hml
PRD	gohorsejobs

Seeder

cd seeder-api
npm install
npm run seed        # Popular banco
npm run seed:reset  # Limpar banco

---

🧑‍💻 Usuários de Teste

SuperAdmin

• Login: superadmin
• Senha: Admin@2025!

Company Admins

Login	Senha	Empresa
takeshi_yamamoto	Takeshi@2025	TechCorp
kenji@appmakers.mobile	Takeshi@2025	AppMakers

Recrutadores

Login	Senha	Empresa
maria_santos	User@2025	DesignHub

Candidatos

Login	Senha
paulo_santos	User@2025
maria@email.com	User@2025

---

📋 Checklist Deploy Novo Ambiente

• Criar namespace no K8s
• Criar secret harbor-registry no namespace
• Adicionar secrets no Drone CI
• Criar banco de dados
• Executar seeder (opcional)
• Fazer push na branch correspondente
• Verificar logs do pipeline
• Testar endpoint /health