ARCH - TASKER DEPLOY: закрепление live baseline и env-driven сборки

2026-05-14 18:07:48 +03:00
parent c455ce3c34
commit 533f8c6356
17 changed files with 448 additions and 71 deletions
@@ -0,0 +1,67 @@
+# NODE.DC Tasker deploy model
+
+## Source of truth
+
+`NODEDC_TASKMANAGER` is the source repository for Tasker code and Docker build inputs.
+
+The NAS directory `/volume1/docker/nodedc-platform/tasker/plane-src` is a deploy checkout/copy only. It must not become the long-term source of truth.
+
+Runtime state stays outside the repository:
+
+- PostgreSQL data: Docker volume `nodedc-tasker_pgdata`
+- Redis data: Docker volume `nodedc-tasker_redisdata`
+- RabbitMQ data: Docker volume `nodedc-tasker_rabbitmq_data`
+- MinIO uploads: Docker volume `nodedc-tasker_uploads`
+- NAS environment files: `/volume1/docker/nodedc-platform/tasker/plane-app/.env.synology`
+
+## Environment contract
+
+The same codebase supports local and production-like runs. The deployment mode is selected by environment variables and Docker build args, not by branching the code.
+
+Frontend brand and launcher integration:
+
+- `VITE_NODEDC_LAUNCHER_URL` points the web/admin bundles to Launcher.
+- Production default for NAS builds: `https://hub.nodedc.ru`
+- Local default in source helpers: `http://launcher.local.nodedc`
+
+Backend integration:
+
+- `PLANE_NODEDC_LAUNCHER_URL`
+- `PLANE_NODEDC_LAUNCHER_PUBLIC_URL`
+- `PLANE_NODEDC_HANDOFF_URL`
+- `PLANE_NODEDC_WORKSPACE_POLICY_URL`
+- `PLANE_NODEDC_ACCESS_CHECK_URL`
+- `PLANE_NODEDC_ACCESS_TOKEN`
+
+Production secrets remain in NAS env files or a secret store. They must not be committed.
+
+## NAS legacy rebuild
+
+The current NAS-compatible script lives in `plane-src/rebuild-nas-legacy.sh`.
+
+Default production-style web rebuild:
+
+```sh
+cd /volume1/docker/nodedc-platform/tasker/plane-src
+BUILD_BACKEND=0 BUILD_WEB=1 BUILD_ADMIN=0 sh rebuild-nas-legacy.sh
+```
+
+Local/staging-style rebuild can override integration endpoints:
+
+```sh
+VITE_NODEDC_LAUNCHER_URL=http://launcher.local.nodedc \
+SMOKE_BASE_URL=http://task.local.nodedc:18080 \
+SMOKE_RESOLVE= \
+BUILD_BACKEND=0 BUILD_WEB=1 BUILD_ADMIN=0 \
+sh rebuild-nas-legacy.sh
+```
+
+The script recreates only services whose images were rebuilt. It must not remove Docker volumes.
+
+## Safety rules
+
+- Do not run `docker compose down -v` on production/staging data.
+- Do not delete `nodedc-tasker_*` Docker volumes without a verified backup.
+- Run database backups before backend migrations.
+- Frontend-only rebuilds do not modify PostgreSQL or MinIO data.
+- Backend image rebuilds are safe only when no destructive migration or data command is included.