diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..f06defb --- /dev/null +++ b/.gitignore @@ -0,0 +1,4 @@ +# Credenciais - NAO commitar +credentials/* +!credentials/.gitignore +!credentials/README.md diff --git a/CONNECTIONS.md b/CONNECTIONS.md index a0e24d1..430c9f5 100644 --- a/CONNECTIONS.md +++ b/CONNECTIONS.md @@ -6,19 +6,24 @@ Documentacao completa de todas as conexoes utilizadas na infraestrutura Rede5. Todas as credenciais estao armazenadas em: `C:\Users\Administrator\.ssh\` +Copia de backup no repositorio: `credentials/` + ``` .ssh/ ├── lh-zeus / lh-zeus.pub # Redbull (antigo NC1) +├── civo / civo.pub # Echo VPS + Civo Object Storage ├── github / github.pub # GitHub ├── ic-ad / ic-ad.pub # Azure DevOps ├── forgejo-gohorsejobs / .pub # Forgejo (Gitea) -├── civo / civo.pub # Civo Cloud ├── bionexo / bionexo.pub # Bionexo ├── cloudflare-token # Cloudflare API Token ├── coolify-redbull-token # Coolify API Token ├── github-token # GitHub PAT ├── absam-db-novo # Absam Database Credentials -└── absam-token # Absam Cloud API Tokens +├── absam-token # Absam Cloud API Tokens +├── civo-object-storage # Civo S3 Object Storage +├── cpanel-valueserver # cPanel Valueserver +└── app01-rabbitmq-beecare-origin # Beecare RabbitMQ ``` --- @@ -173,6 +178,12 @@ Host redbull IdentityFile C:/Users/Administrator/.ssh/lh-zeus IdentitiesOnly yes +Host echo + HostName 152.53.120.181 + User root + IdentityFile C:/Users/Administrator/.ssh/civo + IdentitiesOnly yes + Host vim HostName 38.19.201.52 User root diff --git a/README.md b/README.md index 87e41e1..d441e34 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,8 @@ Este repositorio contem a documentacao e os manifestos de Infraestrutura como Co Servidores standalone gerenciados individualmente. - [**Redbull**](./vps/redbull/README.md): Servidor DEV (Coolify PaaS). IP: 185.194.141.70 -- [**Vim**](./vps/vim/README.md): Servidor de Producao (Dokku PaaS). IP: 38.19.201.52 +- [**Echo**](./vps/echo/README.md): Servidor PROD (Dokku PaaS). IP: 152.53.120.181 +- [**Vim**](./vps/vim/README.md): Servidor PROD (Dokku PaaS). IP: 38.19.201.52 ### Cloud Databases @@ -20,6 +21,7 @@ Bancos de dados gerenciados. ### Conexoes - [**Guia de Conexoes**](./CONNECTIONS.md): Cloudflare, GitHub, Coolify, SSH Keys, etc. +- [**Credenciais**](./credentials/): Backup local das credenciais SSH e tokens ### Azure DevOps diff --git a/credentials/.gitignore b/credentials/.gitignore new file mode 100644 index 0000000..eca6baf --- /dev/null +++ b/credentials/.gitignore @@ -0,0 +1,28 @@ +# NAO COMMITAR CHAVES PRIVADAS +# Este arquivo lista as credenciais que NAO devem ser enviadas para repositorios + +# Chaves privadas SSH +lh-zeus +civo +bionexo +github +ic-ad +forgejo-gohorsejobs +forgejo-gru +app01-rabbitmq-beecare-origin + +# Tokens com senhas +absam-db-novo +absam-token +cloudflare-token +coolify-redbull-token +github-token +civo-object-storage +cpanel-valueserver + +# Known hosts +known_hosts +known_hosts.old + +# Authorized keys +authorized_keys diff --git a/vps/echo/README.md b/vps/echo/README.md new file mode 100644 index 0000000..2324332 --- /dev/null +++ b/vps/echo/README.md @@ -0,0 +1,129 @@ +# Echo - Servidor de Producao + +Servidor de producao utilizando a plataforma Dokku para deploy de aplicacoes. + +## Visao Geral + +O servidor Echo e uma infraestrutura de producao que hospeda multiplas aplicacoes web, seguindo uma arquitetura baseada em containers. A plataforma Dokku serve como camada de gerenciamento de aplicacoes, similar a um Heroku self-hosted, permitindo deploys rapidos atraves de Git pushes. O Nginx atua como proxy reverso, roteando o trafego baseado em dominios para as aplicacoes corretas. + +## Especificacoes do Servidor + +| Recurso | Especificacao | +|---------|---------------| +| **Hostname** | v2202501247812309542 | +| **IP Publico** | 152.53.120.181 | +| **OS** | Ubuntu 24.04.3 LTS (Noble Numbat) | +| **Kernel** | 6.8.0-90-generic | +| **CPU** | AMD EPYC (Virtual) | +| **RAM** | 7.8 GB | +| **Disco** | 251 GB (7.1 GB usado) | +| **Uptime** | 19+ dias | +| **Plataforma** | Dokku (PaaS self-hosted) | +| **Container Runtime** | Docker | +| **Proxy Reverso** | Nginx | + +## Dominios + +| Dominio | Uso | +|---------|-----| +| echo.rede5.com.br | Dominio global | +| photum.rede5.com.br | Photum API | +| api-hml.q1food.com | Food Backend | + +## Projetos Hospedados + +| Aplicacao | Porta | Dominio | Status | +|-----------|:-----:|---------|:------:| +| **photum** | 5000 | photum.rede5.com.br | Running | +| **food-backend** | 8000 | api-hml.q1food.com | Running | +| **q1agenda-backend** | 8000 | 152.53.120.181 | Running | + +## Bancos de Dados + +| Servico | Versao | Container | Porta | +|---------|:------:|-----------|:-----:| +| **photum-db** | PostgreSQL 18.1 | dokku.postgres.photum-db | 5432 | +| **q1agenda-db** | PostgreSQL 18.1 | dokku.postgres.q1agenda-db | 5432 | + +## Acesso SSH + +```bash +# Conectar via SSH +ssh echo + +# Ou diretamente +ssh -i C:\Users\Administrator\.ssh\civo root@152.53.120.181 +``` + +## Comandos Dokku + +```bash +# Listar aplicacoes +dokku apps:list + +# Listar bancos PostgreSQL +dokku postgres:list + +# Ver logs de uma app +dokku logs photum + +# Deploy de uma app +git remote add dokku dokku@echo.rede5.com.br:photum +git push dokku main:master + +# Ver config de uma app +dokku config:show photum + +# Adicionar variavel de ambiente +dokku config:set photum KEY=VALUE + +# Restart app +dokku ps:restart photum +``` + +## Detalhes das Aplicacoes + +### Photum +- **Dominio**: photum.rede5.com.br +- **Porta**: 5000 +- **Banco**: photum-db (PostgreSQL 18.1) +- **Storage**: Civo Object Storage (S3 compativel) +- **Stack**: Go + +#### Civo Object Storage +| Propriedade | Valor | +|-------------|-------| +| access_key | `0UZ69TH03Q292DMTB82B` | +| secret_key | `JJ5XXZYvoWdnqBCNP5oREjACyrXeH6EgSqeSybT7` | +| region | nyc1 | +| endpoint | https://objectstore.nyc1.civo.com | +| bucket | rede5 | + +**Pastas do bucket:** +- `ghorsejobs-dev/` - Resumes GoHorseJobs +- `photum-dev/` - Imagens Photum +- `obramarket-dev/` - Uploads ObraMarket +- `rodiziosdaqui-dev/` - Uploads Rodizios +- `q1-dev/`, `q1-hml/`, `q1/` - Uploads Q1 +- `virtual-fashion-dev/` - Uploads Virtual Fashion + +### Food Backend +- **Dominio**: api-hml.q1food.com +- **Porta**: 8000 +- **Banco**: Supabase (externo) +- **Stack**: Python/FastAPI + +### Q1 Agenda Backend +- **Dominio**: 152.53.120.181 +- **Porta**: 8000 +- **Banco**: q1agenda-db (PostgreSQL 18.1) +- **Stack**: Python/FastAPI +- **Integracao**: Appwrite + +## Comparacao com Outros Servidores + +| Servidor | Uso | Plataforma | +|----------|-----|------------| +| **Redbull** | Desenvolvimento (DEV) | Coolify | +| **Echo** | Producao (PROD) | Dokku | +| **Vim** | Producao (PROD) | Dokku |