"use strict"; const {Fragment: _Fragment, jsxDEV: _jsxDEV} = arguments[0]; const {useMDXComponents: _provideComponents} = arguments[0]; function _createMdxContent(props) { const _components = { h1: "h1", h2: "h2", h3: "h3", h4: "h4", input: "input", li: "li", p: "p", strong: "strong", ul: "ul", ..._provideComponents(), ...props.components }, {CH} = _components; if (!CH) _missingMdxReference("CH", false, "10:1-38:4"); if (!CH.Code) _missingMdxReference("CH.Code", true, "10:1-38:4"); return _jsxDEV(_Fragment, { children: [_jsxDEV("style", { dangerouslySetInnerHTML: { __html: "[data-ch-theme=\"assistance\"] { --ch-t-colorScheme: var(--ch-0);--ch-t-foreground: var(--ch-4);--ch-t-background: var(--ch-16);--ch-t-editor-background: var(--ch-16);--ch-t-editor-foreground: var(--ch-4);--ch-t-editor-rangeHighlightBackground: var(--ch-19);--ch-t-editor-infoForeground: var(--ch-18);--ch-t-editor-selectionBackground: var(--ch-17);--ch-t-tab-activeBackground: var(--ch-16);--ch-t-tab-activeForeground: var(--ch-4);--ch-t-tab-inactiveBackground: var(--ch-21);--ch-t-tab-inactiveForeground: var(--ch-15);--ch-t-tab-border: var(--ch-22);--ch-t-tab-activeBorder: var(--ch-16);--ch-t-editorGroupHeader-tabsBackground: var(--ch-21);--ch-t-editorLineNumber-foreground: var(--ch-20);--ch-t-input-foreground: var(--ch-4);--ch-t-sideBar-foreground: var(--ch-4);--ch-t-list-hoverBackground: var(--ch-25);--ch-t-list-hoverForeground: var(--ch-4); }" } }, undefined, false, { fileName: "" }, this), "\n", _jsxDEV(_components.h1, { id: "docker-containerization-complete-best-practices-guide", children: "Docker Containerization: Complete Best Practices Guide" }, undefined, false, { fileName: "", lineNumber: 2, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Docker has revolutionized application deployment by providing a consistent, portable, and efficient way to package and run applications. This comprehensive guide covers Docker best practices for building secure, optimized, and production-ready containers." }, undefined, false, { fileName: "", lineNumber: 4, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "docker-fundamentals", children: "Docker Fundamentals" }, undefined, false, { fileName: "", lineNumber: 6, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "container-vs-virtual-machine", children: "Container vs Virtual Machine" }, undefined, false, { fileName: "", lineNumber: 8, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "┌─────────────────────────────────────┐", "props": {} }] }, { "tokens": [{ "content": "│ Virtual Machine │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Application Layer │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Guest Operating System │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Hypervisor │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Host Operating System │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Hardware │", "props": {} }] }, { "tokens": [{ "content": "└─────────────────────────────────────┘", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "┌─────────────────────────────────────┐", "props": {} }] }, { "tokens": [{ "content": "│ Docker Container │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Application Layer │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Binaries/Libraries │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Docker Engine │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Host Operating System │", "props": {} }] }, { "tokens": [{ "content": "├─────────────────────────────────────┤", "props": {} }] }, { "tokens": [{ "content": "│ Hardware │", "props": {} }] }, { "tokens": [{ "content": "└─────────────────────────────────────┘", "props": {} }] }], "lang": "text" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 10, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "image-optimization", children: "Image Optimization" }, undefined, false, { fileName: "", lineNumber: 40, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "1-multi-stage-builds", children: "1. Multi-Stage Builds" }, undefined, false, { fileName: "", lineNumber: 42, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "optimized-multi-stage-dockerfile", children: "Optimized Multi-Stage Dockerfile" }, undefined, false, { fileName: "", lineNumber: 44, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# Build stage", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " golang:1.21-alpine ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " builder", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Install build dependencies", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " apk add --no-cache git ca-certificates tzdata", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy dependency files", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " go.mod go.sum ./", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " go mod download", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy source code", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " . .", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Build application", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " CGO_ENABLED=0 GOOS=linux go build \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " -ldflags=", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'-w -s -extldflags \"-static\"'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " -a -installsuffix cgo \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " -o main .", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Final stage", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " scratch ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " final", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy CA certificates from builder", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy timezone data", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=builder /usr/share/zoneinfo /usr/share/zoneinfo", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy binary", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=builder /app/main /main", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Use non-root user", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "USER", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 65534:65534", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Expose port", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 8080", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Health check", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "HEALTHCHECK", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --interval=30s --timeout=3s --start-period=5s --retries=3 \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"/main\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"healthcheck\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Set entrypoint", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "ENTRYPOINT", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"/main\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 45, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "nodejs-multi-stage-build", children: "Node.js Multi-Stage Build" }, undefined, false, { fileName: "", lineNumber: 92, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# Dependencies stage", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " node:18-alpine ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " deps", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy package files", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " package*.json ./", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " npm ci --only=production && npm cache clean --force", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Build stage", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " node:18-alpine ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " builder", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy dependencies", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=deps /app/node_modules ./node_modules", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy source code", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " . .", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Build application", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " npm run build", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Production stage", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " node:18-alpine ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " runner", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Create non-root user", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " addgroup --system --gid 1001 nodejs", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " adduser --system --uid 1001 nextjs", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy built application", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=builder /app/public ./public", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=builder --chown=nextjs:nodejs /app/.next/standalone ./", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Switch to non-root user", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "USER", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " nextjs", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Expose port", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 3000", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Set environment", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "ENV", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " NODE_ENV=production", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "ENV", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " PORT=3000", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Start application", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"node\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"server.js\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 93, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "2-layer-optimization", children: "2. Layer Optimization" }, undefined, false, { fileName: "", lineNumber: 142, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "efficient-layer-caching", children: "Efficient Layer Caching" }, undefined, false, { fileName: "", lineNumber: 144, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# Bad example - breaks layer cache frequently", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " ubuntu:22.04", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " apt-get update && apt-get install -y python3 python3-pip", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " . /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " pip install -r /app/requirements.txt", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"python3\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"/app/app.py\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Good example - optimizes layer cache", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " ubuntu:22.04", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Install dependencies (changes rarely)", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " apt-get update && apt-get install -y python3 python3-pip && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " apt-get clean && rm -rf /var/lib/apt/lists/*", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy requirements first (changes less frequently)", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " requirements.txt /tmp/", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " pip install --no-cache-dir -r /tmp/requirements.txt", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy application code (changes frequently)", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " . /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Set working directory", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Run application", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"python3\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"app.py\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 145, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "dockerignore-for-optimization", children: ".dockerignore for Optimization" }, undefined, false, { fileName: "", lineNumber: 174, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# Git", "props": {} }] }, { "tokens": [{ "content": ".git", "props": {} }] }, { "tokens": [{ "content": ".gitignore", "props": {} }] }, { "tokens": [{ "content": ".gitattributes", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "# Documentation", "props": {} }] }, { "tokens": [{ "content": "README.md", "props": {} }] }, { "tokens": [{ "content": "docs/", "props": {} }] }, { "tokens": [{ "content": "*.md", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "# Dependencies", "props": {} }] }, { "tokens": [{ "content": "node_modules/", "props": {} }] }, { "tokens": [{ "content": "__pycache__/", "props": {} }] }, { "tokens": [{ "content": "*.pyc", "props": {} }] }, { "tokens": [{ "content": "*.pyo", "props": {} }] }, { "tokens": [{ "content": "*.pyd", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "# IDE", "props": {} }] }, { "tokens": [{ "content": ".vscode/", "props": {} }] }, { "tokens": [{ "content": ".idea/", "props": {} }] }, { "tokens": [{ "content": "*.swp", "props": {} }] }, { "tokens": [{ "content": "*.swo", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "# OS", "props": {} }] }, { "tokens": [{ "content": ".DS_Store", "props": {} }] }, { "tokens": [{ "content": "Thumbs.db", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "# Logs", "props": {} }] }, { "tokens": [{ "content": "*.log", "props": {} }] }, { "tokens": [{ "content": "logs/", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "# Environment", "props": {} }] }, { "tokens": [{ "content": ".env", "props": {} }] }, { "tokens": [{ "content": ".env.local", "props": {} }] }, { "tokens": [{ "content": ".env.*.local", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "# Test", "props": {} }] }, { "tokens": [{ "content": "coverage/", "props": {} }] }, { "tokens": [{ "content": ".nyc_output/", "props": {} }] }, { "tokens": [{ "content": "test/", "props": {} }] }, { "tokens": [{ "content": "tests/", "props": {} }] }, { "tokens": [{ "content": "*.test.js", "props": {} }] }, { "tokens": [{ "content": "*.spec.js", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "# Build artifacts", "props": {} }] }, { "tokens": [{ "content": "dist/", "props": {} }] }, { "tokens": [{ "content": "build/", "props": {} }] }, { "tokens": [{ "content": "target/", "props": {} }] }, { "tokens": [{ "content": "", "props": {} }] }, { "tokens": [{ "content": "# Temporary files", "props": {} }] }, { "tokens": [{ "content": "tmp/", "props": {} }] }, { "tokens": [{ "content": "temp/", "props": {} }] }, { "tokens": [{ "content": "*.tmp", "props": {} }] }], "lang": "text" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 175, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "security-best-practices", children: "Security Best Practices" }, undefined, false, { fileName: "", lineNumber: 231, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "1-minimal-base-images", children: "1. Minimal Base Images" }, undefined, false, { fileName: "", lineNumber: 233, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "alpine-linux-security", children: "Alpine Linux Security" }, undefined, false, { fileName: "", lineNumber: 235, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# Use minimal Alpine image", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " alpine:3.18", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Install security updates and required packages", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " apk update && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " apk upgrade && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " apk add --no-cache \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " ca-certificates \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " tzdata \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " rm -rf /var/cache/apk/*", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Create non-root user", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " addgroup -g 1001 -S appgroup && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " adduser -u 1001 -S appuser -G appgroup", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Set working directory", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy application", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --chown=appuser:appgroup . .", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Switch to non-root user", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "USER", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " appuser", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Health check", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "HEALTHCHECK", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --interval=30s --timeout=3s --retries=3 \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " wget --no-verbose --tries=1 --spider http://localhost:8080/health || exit 1", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Expose port", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 8080", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Run application", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"./app\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 236, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "distroless-security", children: "Distroless Security" }, undefined, false, { fileName: "", lineNumber: 273, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# Use distroless image for maximum security", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " gcr.io/distroless/static-debian11 ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " runtime", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Build stage", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " golang:1.21-alpine ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " builder", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " go.mod go.sum ./", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " go mod download", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " . .", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " CGO_ENABLED=0 GOOS=linux go build -o /app/server .", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy binary to runtime image", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " runtime", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=builder /app/server /server", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "USER", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 65534:65534", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 8080", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "ENTRYPOINT", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"/server\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 274, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "2-runtime-security", children: "2. Runtime Security" }, undefined, false, { fileName: "", lineNumber: 294, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "read-only-filesystem", children: "Read-Only Filesystem" }, undefined, false, { fileName: "", lineNumber: 296, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " alpine:3.18", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " addgroup -g 1001 -S appgroup && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " adduser -u 1001 -S appuser -G appgroup", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Install application", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --chown=appuser:appgroup . /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Create temporary directory for write operations", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " mkdir -p /tmp && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " chown appuser:appgroup /tmp", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Run with read-only filesystem", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "USER", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " appuser", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 8080", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "HEALTHCHECK", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " CMD wget --spider http://localhost:8080/health", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"./app\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 297, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "docker-compose-security-configuration", children: "Docker Compose Security Configuration" }, undefined, false, { fileName: "", lineNumber: 317, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "version", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'3.8'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "services", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " web", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " build", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": ".", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " security_opt", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "no-new-privileges:true", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " read_only", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "true", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " tmpfs", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "/tmp:noexec,nosuid,size=100m", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " cap_drop", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "ALL", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " cap_add", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "NET_BIND_SERVICE", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " user", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"1001:1001\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " environment", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "NODE_ENV=production", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " networks", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app-network", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " depends_on", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "db", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " restart", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "unless-stopped", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " db", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " image", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "postgres:15-alpine", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " security_opt", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "no-new-privileges:true", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " environment", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "POSTGRES_DB=app", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "POSTGRES_USER=appuser", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "POSTGRES_PASSWORD_FILE=/run/secrets/db_password", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " volumes", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "postgres_data:/var/lib/postgresql/data", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " networks", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app-network", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " secrets", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "db_password", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " restart", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "unless-stopped", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "networks", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " app-network", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " driver", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "bridge", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "volumes", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " postgres_data", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "secrets", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " db_password", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " file", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "./secrets/db_password.txt", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 318, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "3-container-scanning", children: "3. Container Scanning" }, undefined, false, { fileName: "", lineNumber: 370, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "trivy-integration", children: "Trivy Integration" }, undefined, false, { fileName: "", lineNumber: 372, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "#!/bin/bash", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "# scan-images.sh", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Scan Docker image with Trivy", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "echo ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"Scanning Docker image: ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$1", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Run Trivy scan", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "trivy ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "image ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--format ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "json ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--output ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "report.json \"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$1", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Check for high/critical vulnerabilities", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "HIGH_VULNS", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "$(", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "jq ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-r", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": " '.Results[]?.Vulnerabilities[]? | select(.Severity == \"HIGH\" or .Severity == \"CRITICAL\") | .VulnerabilityID' report.json ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "| ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "wc ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-l", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": ")", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "if", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [ ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$HIGH_VULNS", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\" ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-gt ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "0", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": " ]; ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "then", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": " echo ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"❌ Found ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$HIGH_VULNS", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": " high/critical vulnerabilities\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " exit 1", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": "else", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": " echo ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"✅ No high/critical vulnerabilities found\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " exit 0", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": "fi", "props": { "style": { "color": "var(--ch-7)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 373, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "docker-security-scan-in-cicd", children: "Docker Security Scan in CI/CD" }, undefined, false, { fileName: "", lineNumber: 395, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# GitHub Actions example", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "Docker Security Scan", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "on", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " push", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " branches", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": [ ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "main", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " ]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " pull_request", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " branches", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": [ ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "main", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " ]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "jobs", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " security-scan", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " runs-on", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "ubuntu-latest", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " steps", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "uses", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "actions/checkout@v3", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "Build Docker image", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " run", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "docker build -t myapp:${{ github.sha }} .", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "Run Trivy vulnerability scanner", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " uses", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "aquasecurity/trivy-action@master", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " with", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " image-ref", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'myapp:${{ github.sha }}'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " format", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'sarif'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " output", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'trivy-results.sarif'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "Upload Trivy scan results", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " uses", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "github/codeql-action/upload-sarif@v2", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " with", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " sarif_file", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'trivy-results.sarif'", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 396, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "production-deployment", children: "Production Deployment" }, undefined, false, { fileName: "", lineNumber: 428, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "1-environment-configuration", children: "1. Environment Configuration" }, undefined, false, { fileName: "", lineNumber: 430, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "environment-specific-configuration", children: "Environment-Specific Configuration" }, undefined, false, { fileName: "", lineNumber: 432, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# Multi-environment Dockerfile", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " node:18-alpine ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " base", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " package*.json ./", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " npm ci --only=production && npm cache clean --force", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Development environment", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " base ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " development", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " npm ci", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " . .", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 3000", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"npm\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"run\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"dev\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Production environment", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " base ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " production", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --chown=node:node . .", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "USER", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " node", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 3000", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "HEALTHCHECK", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --interval=30s --timeout=3s --start-period=5s --retries=3 \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " curl -f http://localhost:3000/health || exit 1", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"node\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"server.js\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 433, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "configuration-management", children: "Configuration Management" }, undefined, false, { fileName: "", lineNumber: 457, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# docker-compose.prod.yml", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "version", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'3.8'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "services", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " app", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " image", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "myapp:${VERSION}", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " environment", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "NODE_ENV=production", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "PORT=3000", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "DATABASE_URL=${DATABASE_URL}", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "REDIS_URL=${REDIS_URL}", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "JWT_SECRET=${JWT_SECRET}", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " env_file", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": ".env.production", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " configs", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "source", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app_config", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " target", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "/app/config/production.json", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " secrets", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "db_password", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "jwt_secret", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " deploy", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " replicas", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "3", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " restart_policy", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " condition", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "on-failure", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " delay", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "5s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " max_attempts", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "3", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " resources", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " limits", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " cpus", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'0.5'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " memory", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "512M", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " reservations", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " cpus", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'0.25'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " memory", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "256M", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "configs", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " app_config", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " file", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "./config/production.json", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "secrets", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " db_password", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " external", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "true", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " jwt_secret", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " external", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "true", "props": { "style": { "color": "var(--ch-2)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 458, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "2-orchestration-with-docker-swarm", children: "2. Orchestration with Docker Swarm" }, undefined, false, { fileName: "", lineNumber: 504, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "docker-stack-configuration", children: "Docker Stack Configuration" }, undefined, false, { fileName: "", lineNumber: 506, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# stack.yml", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "version", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'3.8'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "services", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " web", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " image", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "myapp:${VERSION}", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " ports", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"80:3000\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " deploy", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " replicas", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "3", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " update_config", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " parallelism", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "1", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " delay", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "10s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " failure_action", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "rollback", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " monitor", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "60s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " max_failure_ratio", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "0.3", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " rollback_config", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " parallelism", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "1", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " delay", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "10s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " failure_action", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "pause", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " monitor", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "60s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " max_failure_ratio", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "0.3", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " restart_policy", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " condition", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "on-failure", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " delay", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "5s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " max_attempts", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "3", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " resources", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " limits", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " cpus", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'0.5'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " memory", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "512M", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " reservations", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " cpus", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'0.25'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " memory", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "256M", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " networks", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app-network", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " healthcheck", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " test", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"CMD\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"curl\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"-f\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"http://localhost:3000/health\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " interval", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "30s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " timeout", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "10s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " retries", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "3", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " start_period", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "40s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " nginx", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " image", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "nginx:alpine", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " ports", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"443:443\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " volumes", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "./nginx.conf:/etc/nginx/nginx.conf:ro", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "./ssl:/etc/nginx/ssl:ro", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " deploy", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " replicas", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "2", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " networks", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app-network", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " depends_on", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "web", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "networks", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " app-network", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " driver", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "overlay", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " attachable", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "true", "props": { "style": { "color": "var(--ch-2)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 507, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "rolling-updates", children: "Rolling Updates" }, undefined, false, { fileName: "", lineNumber: 570, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "#!/bin/bash", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "# rolling-update.sh", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Deploy new version with rolling update", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "docker ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "stack deploy ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-c ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "stack.yml ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--with-registry-auth ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "myapp", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Monitor service health", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "echo ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"Monitoring service health...\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "while ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "true", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "; ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "do", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": " HEALTHY", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "$(", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "docker", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": " service ps ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--format", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": " \"{{.CurrentState}}\" myapp_web ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "| ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "grep ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-c", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": " \"Running\")", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " TOTAL", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "$(", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "docker", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": " service ps ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--format", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": " \"{{.CurrentState}}\" myapp_web ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "| ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "wc ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-l", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": ")", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " echo ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"Healthy: ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$HEALTHY", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "/", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$TOTAL", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " if", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [ ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$HEALTHY", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\" ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-eq ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$TOTAL", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " ]; ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "then", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": " echo ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"✅ All replicas are healthy\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " break", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": " fi", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " sleep ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "10", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": "done", "props": { "style": { "color": "var(--ch-7)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 571, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "monitoring-and-logging", children: "Monitoring and Logging" }, undefined, false, { fileName: "", lineNumber: 595, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "1-health-checks", children: "1. Health Checks" }, undefined, false, { fileName: "", lineNumber: 597, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "comprehensive-health-check", children: "Comprehensive Health Check" }, undefined, false, { fileName: "", lineNumber: 599, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " python:3.11-slim", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Install health check dependencies", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " apt-get update && apt-get install -y curl && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " apt-get clean && rm -rf /var/lib/apt/lists/*", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Create health check script", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " healthcheck.py /healthcheck.py", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " chmod +x /healthcheck.py", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Application health check", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "HEALTHCHECK", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --interval=30s --timeout=10s --start-period=5s --retries=3 \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " python /healthcheck.py", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 8000", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"python\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"app.py\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 600, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "health-check-script", children: "Health Check Script" }, undefined, false, { fileName: "", lineNumber: 619, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "#!/usr/bin/env python3", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "# healthcheck.py", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "import", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " sys", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "import", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " requests", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "import", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " subprocess", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "import", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " os", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "def ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "check_application", "props": { "style": { "color": "var(--ch-5)" } } }, { "content": "():", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " \"\"\"Check application health\"\"\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " try", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " response ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " requests.get(", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'http://localhost:8000/health'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "timeout", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "5", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": ")", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " return", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " response.status_code ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "== ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "200", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " except", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " return ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "False", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "def ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "check_database", "props": { "style": { "color": "var(--ch-5)" } } }, { "content": "():", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " \"\"\"Check database connectivity\"\"\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " try", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " # Implement database health check", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": " return ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "True", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " except", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " return ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "False", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "def ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "check_disk_space", "props": { "style": { "color": "var(--ch-5)" } } }, { "content": "():", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " \"\"\"Check disk space\"\"\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " try", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " stat ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " os.statvfs(", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'/'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ")", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " free_space ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " stat.f_bavail ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "*", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " stat.f_frsize", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " total_space ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " stat.f_blocks ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "*", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " stat.f_frsize", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " free_percent ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " (free_space ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "/", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " total_space) ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "* ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "100", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " return", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " free_percent ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "> ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "10 ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "# At least 10% free space", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": " except", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " return ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "False", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "def ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "main", "props": { "style": { "color": "var(--ch-5)" } } }, { "content": "():", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " \"\"\"Main health check\"\"\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " checks ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " (", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"Application\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", check_application),", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " (", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"Database\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", check_database),", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " (", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"Disk Space\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", check_disk_space),", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " ]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " all_healthy ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "= ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "True", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " for", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " name, check_func ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "in", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " checks:", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " if not", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " check_func():", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " print", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "(", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "f", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "\"❌ ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "{", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "name", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "}", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": " check failed\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ")", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " all_healthy ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "= ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "False", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " else", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " print", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "(", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "f", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "\"✅ ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "{", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "name", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "}", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": " check passed\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ")", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " sys.exit(", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "0 ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "if", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " all_healthy ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "else ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "1", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": ")", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "if ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "__name__ ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "== ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "\"__main__\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " main()", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "python" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 620, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "2-logging-configuration", children: "2. Logging Configuration" }, undefined, false, { fileName: "", lineNumber: 678, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "structured-logging", children: "Structured Logging" }, undefined, false, { fileName: "", lineNumber: 680, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " node:18-alpine", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Create log directory", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " mkdir -p /app/logs", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Configure logging", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "ENV", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " NODE_ENV=production", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "ENV", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " LOG_LEVEL=info", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "ENV", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " LOG_FORMAT=json", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Volume for logs", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "VOLUME", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"/app/logs\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Log rotation configuration", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " logrotate.conf /etc/logrotate.d/app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Run logrotate", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " echo ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"0 */6 * * * /usr/sbin/logrotate /etc/logrotate.d/app\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " | crontab -", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 3000", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"npm\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"start\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 681, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "log-rotation-configuration", children: "Log Rotation Configuration" }, undefined, false, { fileName: "", lineNumber: 705, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# logrotate.conf", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "/app/logs/*.log ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "{", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " daily", "props": { "style": { "color": "var(--ch-3)" } } }] }, { "tokens": [{ "content": " missingok", "props": { "style": { "color": "var(--ch-3)" } } }] }, { "tokens": [{ "content": " rotate ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "7", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " compress", "props": { "style": { "color": "var(--ch-3)" } } }] }, { "tokens": [{ "content": " delaycompress", "props": { "style": { "color": "var(--ch-3)" } } }] }, { "tokens": [{ "content": " notifempty", "props": { "style": { "color": "var(--ch-3)" } } }] }, { "tokens": [{ "content": " create ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "644 ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "nodejs nodejs", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " postrotate", "props": { "style": { "color": "var(--ch-3)" } } }] }, { "tokens": [{ "content": " kill -USR1 ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "$(", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "cat", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": " /app/logs/app.pid)", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " endscript", "props": { "style": { "color": "var(--ch-3)" } } }] }, { "tokens": [{ "content": "}", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 706, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "3-metrics-collection", children: "3. Metrics Collection" }, undefined, false, { fileName: "", lineNumber: 722, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "prometheus-metrics", children: "Prometheus Metrics" }, undefined, false, { fileName: "", lineNumber: 724, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " prom/prometheus:latest", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Prometheus configuration", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " prometheus.yml /etc/prometheus/prometheus.yml", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " rules/ /etc/prometheus/rules/", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Data volume", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "VOLUME", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"/prometheus\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 9090", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"--config.file=/etc/prometheus/prometheus.yml\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " \"--storage.tsdb.path=/prometheus\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " \"--web.console.libraries=/etc/prometheus/console_libraries\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " \"--web.console.templates=/etc/prometheus/consoles\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 725, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "prometheus-configuration", children: "Prometheus Configuration" }, undefined, false, { fileName: "", lineNumber: 743, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# prometheus.yml", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "global", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " scrape_interval", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "15s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " evaluation_interval", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "15s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "rule_files", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"rules/*.yml\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "scrape_configs", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "job_name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'docker-containers'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " static_configs", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "targets", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'localhost:9323'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "job_name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'myapp'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " static_configs", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "targets", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'app:3000'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " metrics_path", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'/metrics'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " scrape_interval", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "10s", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "alerting", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " alertmanagers", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "static_configs", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "targets", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "alertmanager:9093", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 744, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "performance-optimization", children: "Performance Optimization" }, undefined, false, { fileName: "", lineNumber: 771, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "1-resource-management", children: "1. Resource Management" }, undefined, false, { fileName: "", lineNumber: 773, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "resource-limits", children: "Resource Limits" }, undefined, false, { fileName: "", lineNumber: 775, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# docker-compose.prod.yml", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "version", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'3.8'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "services", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " app", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " image", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "myapp:latest", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " deploy", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " resources", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " limits", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " cpus", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'1.0'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " memory", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "1G", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " pids", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "100", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " reservations", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " cpus", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'0.5'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " memory", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "512M", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " ulimits", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " nofile", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " soft", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "65536", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " hard", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "65536", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " sysctls", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "net.core.somaxconn=65535", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "net.ipv4.tcp_max_syn_backlog=65535", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 776, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "performance-tuning", children: "Performance Tuning" }, undefined, false, { fileName: "", lineNumber: 801, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " ubuntu:22.04", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# System optimization", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " echo ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'net.core.somaxconn = 65535'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " >> /etc/sysctl.conf && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " echo ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'net.ipv4.tcp_max_syn_backlog = 65535'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " >> /etc/sysctl.conf && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " echo ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'net.ipv4.tcp_fin_timeout = 30'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " >> /etc/sysctl.conf && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " echo ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'net.ipv4.tcp_keepalive_time = 1200'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " >> /etc/sysctl.conf && \\", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " echo ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'net.ipv4.tcp_max_tw_buckets = 5000'", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " >> /etc/sysctl.conf", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Application optimization", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "ENV", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " NODE_OPTIONS=", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"--max-old-space-size=1024\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "ENV", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " UV_THREADPOOL_SIZE=128", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 3000", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"node\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"server.js\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 802, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "2-caching-strategies", children: "2. Caching Strategies" }, undefined, false, { fileName: "", lineNumber: 820, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "multi-layer-caching", children: "Multi-Layer Caching" }, undefined, false, { fileName: "", lineNumber: 822, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " node:18-alpine", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Build cache layer", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " node:18-alpine ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " cache", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " package*.json ./", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " npm ci --only=production", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Application layer", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " cache ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " . .", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "RUN", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " npm run build", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Production layer", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "FROM", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " node:18-alpine ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "AS", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " production", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "WORKDIR", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " /app", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Copy from cache layer", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=cache /app/node_modules ./node_modules", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "COPY", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " --from=app /app/dist ./dist", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Runtime optimization", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "ENV", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " NODE_ENV=production", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "ENV", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " NODE_OPTIONS=", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"--max-old-space-size=512\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "EXPOSE", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " 3000", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "CMD", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"node\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": ", ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"dist/server.js\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "]", "props": { "style": { "color": "var(--ch-4)" } } }] }], "lang": "dockerfile" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 823, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "backup-and-recovery", children: "Backup and Recovery" }, undefined, false, { fileName: "", lineNumber: 853, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "1-data-persistence", children: "1. Data Persistence" }, undefined, false, { fileName: "", lineNumber: 855, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "volume-backup-strategy", children: "Volume Backup Strategy" }, undefined, false, { fileName: "", lineNumber: 857, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "#!/bin/bash", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "# backup-volumes.sh", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "BACKUP_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "\"/backup/$(", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "date", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": " +%Y%m%d)\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "CONTAINER_NAME", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "\"myapp_db\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Create backup directory", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "mkdir ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-p ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$BACKUP_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Backup database volume", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "docker ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "run ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--rm \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " -v ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "myapp_postgres_data:/data ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " -v ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$BACKUP_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\":/backup ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " alpine:latest ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " tar czf /backup/postgres_data.tar.gz ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-C ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "/data .", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Backup application data", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "docker ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "run ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--rm \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " -v ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "myapp_app_data:/data ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " -v ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$BACKUP_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\":/backup ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " alpine:latest ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " tar czf /backup/app_data.tar.gz ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-C ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "/data .", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Clean old backups (keep last 7 days)", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "find ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "/backup ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-type ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "d ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-mtime ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "+", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "7 -exec ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "rm ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-rf ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "{} +", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "echo ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"Backup completed: ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$BACKUP_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 858, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "automated-backup", children: "Automated Backup" }, undefined, false, { fileName: "", lineNumber: 888, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "# docker-compose.backup.yml", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "version", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "'3.8'", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "services", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " backup", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " image", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "alpine:latest", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " volumes", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "postgres_data:/data/postgres:ro", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app_data:/data/app:ro", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "./backups:/backup", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " environment", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "BACKUP_DIR=/backup/$(date +%Y%m%d)", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " command", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": ">", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": " sh -c \"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " mkdir -p $$BACKUP_DIR &&", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " tar czf $$BACKUP_DIR/postgres.tar.gz -C /data/postgres . &&", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " tar czf $$BACKUP_DIR/app.tar.gz -C /data/app . &&", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " find /backup -type d -mtime +7 -exec rm -rf {} +", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " \"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " deploy", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " restart_policy", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " condition", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "none", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "volumes", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " postgres_data", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " external", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "true", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " app_data", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " external", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "true", "props": { "style": { "color": "var(--ch-2)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 889, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "2-disaster-recovery", children: "2. Disaster Recovery" }, undefined, false, { fileName: "", lineNumber: 920, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h4, { id: "recovery-script", children: "Recovery Script" }, undefined, false, { fileName: "", lineNumber: 922, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "#!/bin/bash", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "# recovery.sh", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "BACKUP_FILE", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "$1", "props": { "style": { "color": "var(--ch-3)" } } }] }, { "tokens": [{ "content": "RESTORE_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "=", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "\"/tmp/restore\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "if", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": " [ ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "-z ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$BACKUP_FILE", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": " ]; ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "then", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": " echo ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"Usage: ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$0", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": " \"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " exit 1", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": "fi", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Create restore directory", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "mkdir ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-p ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$RESTORE_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Extract backup", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "tar ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "xzf \"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$BACKUP_FILE", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\" ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-C ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$RESTORE_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Stop services", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "docker-compose ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "down", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Restore volumes", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "docker ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "run ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--rm \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " -v ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "myapp_postgres_data:/data ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " -v ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$RESTORE_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\":/backup ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " alpine:latest ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " tar xzf /backup/postgres_data.tar.gz ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-C ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "/data", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "docker ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "run ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--rm \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " -v ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "myapp_app_data:/data ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " -v ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$RESTORE_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\":/backup ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " alpine:latest ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " tar xzf /backup/app_data.tar.gz ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-C ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "/data", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Start services", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "docker-compose ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "up ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-d", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "# Clean up", "props": { "style": { "color": "var(--ch-1)" } } }] }, { "tokens": [{ "content": "rm ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-rf ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$RESTORE_DIR", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "echo ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "\"Recovery completed from: ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "$BACKUP_FILE", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 923, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "best-practices-checklist", children: "Best Practices Checklist" }, undefined, false, { fileName: "", lineNumber: 966, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "image-building", children: "Image Building" }, undefined, false, { fileName: "", lineNumber: 968, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { className: "contains-task-list", children: ["\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Use multi-stage builds"] }, undefined, true, { fileName: "", lineNumber: 969, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Optimize layer caching"] }, undefined, true, { fileName: "", lineNumber: 970, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Use minimal base images"] }, undefined, true, { fileName: "", lineNumber: 971, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Implement .dockerignore"] }, undefined, true, { fileName: "", lineNumber: 972, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Remove unnecessary dependencies"] }, undefined, true, { fileName: "", lineNumber: 973, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Set appropriate permissions"] }, undefined, true, { fileName: "", lineNumber: 974, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Use specific image tags"] }, undefined, true, { fileName: "", lineNumber: 975, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Implement health checks"] }, undefined, true, { fileName: "", lineNumber: 976, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 969, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "security", children: "Security" }, undefined, false, { fileName: "", lineNumber: 978, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { className: "contains-task-list", children: ["\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Run as non-root user"] }, undefined, true, { fileName: "", lineNumber: 979, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Use read-only filesystem"] }, undefined, true, { fileName: "", lineNumber: 980, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Scan images for vulnerabilities"] }, undefined, true, { fileName: "", lineNumber: 981, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Implement secrets management"] }, undefined, true, { fileName: "", lineNumber: 982, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Use resource limits"] }, undefined, true, { fileName: "", lineNumber: 983, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Enable security scanning in CI/CD"] }, undefined, true, { fileName: "", lineNumber: 984, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Regularly update base images"] }, undefined, true, { fileName: "", lineNumber: 985, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Implement network segmentation"] }, undefined, true, { fileName: "", lineNumber: 986, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 979, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "production-deployment-1", children: "Production Deployment" }, undefined, false, { fileName: "", lineNumber: 988, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { className: "contains-task-list", children: ["\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Use environment-specific configurations"] }, undefined, true, { fileName: "", lineNumber: 989, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Implement proper logging"] }, undefined, true, { fileName: "", lineNumber: 990, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Set up monitoring and alerting"] }, undefined, true, { fileName: "", lineNumber: 991, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Configure health checks"] }, undefined, true, { fileName: "", lineNumber: 992, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Implement backup strategies"] }, undefined, true, { fileName: "", lineNumber: 993, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Use orchestration tools"] }, undefined, true, { fileName: "", lineNumber: 994, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Implement rolling updates"] }, undefined, true, { fileName: "", lineNumber: 995, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Set up disaster recovery"] }, undefined, true, { fileName: "", lineNumber: 996, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 989, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "performance", children: "Performance" }, undefined, false, { fileName: "", lineNumber: 998, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { className: "contains-task-list", children: ["\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Optimize image size"] }, undefined, true, { fileName: "", lineNumber: 999, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Implement caching strategies"] }, undefined, true, { fileName: "", lineNumber: 1000, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Set resource limits"] }, undefined, true, { fileName: "", lineNumber: 1001, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Tune system parameters"] }, undefined, true, { fileName: "", lineNumber: 1002, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Monitor resource usage"] }, undefined, true, { fileName: "", lineNumber: 1003, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Implement load balancing"] }, undefined, true, { fileName: "", lineNumber: 1004, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Optimize application code"] }, undefined, true, { fileName: "", lineNumber: 1005, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Use appropriate storage drivers"] }, undefined, true, { fileName: "", lineNumber: 1006, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 999, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "conclusion", children: "Conclusion" }, undefined, false, { fileName: "", lineNumber: 1008, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Docker containerization requires careful attention to security, performance, and operational concerns. By following these best practices, you can build robust, secure, and efficient containerized applications that scale effectively in production environments." }, undefined, false, { fileName: "", lineNumber: 1010, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Key takeaways:" }, undefined, false, { fileName: "", lineNumber: 1012, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Security First" }, undefined, false, { fileName: "", lineNumber: 1013, columnNumber: 3 }, this), ": Always prioritize security in container design"] }, undefined, true, { fileName: "", lineNumber: 1013, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Optimize Continuously" }, undefined, false, { fileName: "", lineNumber: 1014, columnNumber: 3 }, this), ": Regularly review and optimize container configurations"] }, undefined, true, { fileName: "", lineNumber: 1014, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Monitor Everything" }, undefined, false, { fileName: "", lineNumber: 1015, columnNumber: 3 }, this), ": Implement comprehensive monitoring and logging"] }, undefined, true, { fileName: "", lineNumber: 1015, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Plan for Recovery" }, undefined, false, { fileName: "", lineNumber: 1016, columnNumber: 3 }, this), ": Have solid backup and disaster recovery procedures"] }, undefined, true, { fileName: "", lineNumber: 1016, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Automate Everything" }, undefined, false, { fileName: "", lineNumber: 1017, columnNumber: 3 }, this), ": Use CI/CD pipelines for consistent deployments"] }, undefined, true, { fileName: "", lineNumber: 1017, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 1013, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Remember that containerization is an ongoing process of improvement and optimization. Stay updated with Docker best practices and security recommendations to maintain a secure and efficient container infrastructure." }, undefined, false, { fileName: "", lineNumber: 1019, columnNumber: 1 }, this)] }, undefined, true, { fileName: "", lineNumber: 1, columnNumber: 1 }, this); } function MDXContent(props = {}) { const {wrapper: MDXLayout} = { ..._provideComponents(), ...props.components }; return MDXLayout ? _jsxDEV(MDXLayout, { ...props, children: _jsxDEV(_createMdxContent, { ...props }, undefined, false, { fileName: "" }, this) }, undefined, false, { fileName: "" }, this) : _createMdxContent(props); } return { default: MDXContent }; function _missingMdxReference(id, component, place) { throw new Error("Expected " + (component ? "component" : "object") + " `" + id + "` to be defined: you likely forgot to import, pass, or provide it." + (place ? "\nIt’s referenced in your code at `" + place + "`" : "")); }