First Commit

Author: FlaviaMorgulis

.github/workflows/ci-cd.yml

@@ -0,0 +1,39 @@
+name: CI/CD Pipeline
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Set up Python
+        uses: actions/setup-python@v2
+        with:
+          python-version: "3.9"
+
+      - name: Install dependencies
+        run: |
+          pip install -r requirements.txt
+
+      - name: Run tests
+        run: |
+          pytest
+
+      - name: Build Docker image
+        run: |
+          docker build -t myapp .
+
+      - name: Push Docker image
+        run: |
+          docker push myapp
+
+      - name: Deploy to server
+        run: |
+          ssh user@server 'bash -s' < scripts/deploy.sh

README.md

@@ -0,0 +1,61 @@
+# README for DevOps Python Platform
+
+## Overview
+
+This project is a Python API that reads and writes to a database, fully automated on a Linux server, using Bash scripts for operations tasks and CI/CD for deployment.
+
+## Tech Stack
+
+- **Linux (Ubuntu Server)**
+- **Bash** (automation & deployment)
+- **Python** (Flask or FastAPI)
+- **PostgreSQL** (or MySQL)
+- **Docker**
+- **GitHub Actions**
+- **Nginx**
+- **Systemd**
+- **AWS EC2 (or any VPS)**
+
+## Architecture
+
+```
+User
+ ↓
+Nginx (Linux)
+ ↓
+Python API (Docker)
+ ↓
+PostgreSQL
+```
+
+## Core Features
+
+- **REST API (CRUD)**
+- **/health endpoint**
+- **Reads & writes to DB**
+- **Uses env vars (12-factor style)**
+
+## Scripts
+
+- `deploy.sh` – pull image & restart service
+- `backup_db.sh` – scheduled DB backups
+- `health_check.sh` – service monitoring
+- `log_rotate.sh` – clean old logs
+- `setup_server.sh` – one-command server bootstrap
+
+## CI/CD Pipeline
+
+- Run Python tests
+- Lint code
+- Build Docker image
+- Push image to registry
+- SSH into Linux server
+- Run Bash deploy script
+
+## Linux System Design
+
+- systemd service for API
+- Nginx as reverse proxy
+- UFW firewall
+- Non-root user
+- SSH key auth only

TODO.md

@@ -0,0 +1,20 @@
+#
+
+- [ ] Add a minimal API: create `app/main.py` (FastAPI) with a `/health` endpoint and a small CRUD example (SQLite or in-memory for now).
+- [ ] Add `requirements.txt` with `fastapi`, `uvicorn`, `pytest` (and `sqlalchemy`/`psycopg2-binary` Postgres).
+- [ ] Add basic tests in `app/tests/` — a health-check test and one CRUD test so CI has something to run.
+- [ ] Update CI (`.github/workflows/ci-cd.yml`) to install dependencies, run tests, and build/push the Docker image to the registry you choose.
+- [ ] Configure GitHub Secrets for deploy: `DOCKER_USERNAME`, `DOCKER_PASSWORD`, `DEPLOY_SSH_KEY` (or use names you prefer).
+- [ ] Run tests locally, fix any issues, then commit and push.
+- [ ] Optional: add a `systemd` unit file and server bootstrap docs in `scripts/` for automated server setup.
+
+Quick commands I'll run locally once the app exists:
+
+```bash
+python -m venv .venv
+# Windows PowerShell: .venv\\Scripts\\Activate.ps1
+# macOS/Linux: source .venv/bin/activate
+pip install -r requirements.txt
+uvicorn app.main:app --reload
+pytest
+```

docker-compose.yml

@@ -0,0 +1,24 @@
+version: "3.8"
+
+services:
+  app:
+    build:
+      context: ./docker
+    ports:
+      - "5000:5000"
+    environment:
+      - DATABASE_URL=postgresql://user:password@db:5432/mydatabase
+    depends_on:
+      - db
+
+  db:
+    image: postgres:latest
+    environment:
+      POSTGRES_USER: user
+      POSTGRES_PASSWORD: password
+      POSTGRES_DB: mydatabase
+    volumes:
+      - db_data:/var/lib/postgresql/data
+
+volumes:
+  db_data:

docker/Dockerfile

@@ -0,0 +1,12 @@
+# Dockerfile for Python API
+
+FROM python:3.9-slim
+
+WORKDIR /app
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY . .
+
+CMD ["python", "main.py"]

nginx/default.conf

@@ -0,0 +1,12 @@
+server {
+    listen 80;
+    server_name localhost;
+
+    location / {
+        proxy_pass http://app:5000;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}

scripts/backup_db.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+# backup_db.sh - Backup the PostgreSQL database
+
+pg_dump -U user -h localhost mydatabase > backup_$(date +%Y%m%d).sql

scripts/deploy.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+# deploy.sh - Pull the latest Docker image and restart the service
+
+docker-compose pull
+docker-compose up -d --remove-orphans

scripts/health_check.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+# health_check.sh - Check the health of the API
+
+if curl -s http://localhost:5000/health | grep -q 'healthy'; then
+  echo "API is healthy"
+else
+  echo "API is down"
+fi

scripts/setup_server.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+# setup_server.sh - Bootstrap the server
+
+apt update && apt upgrade -y
+apt install -y nginx docker.io docker-compose
+systemctl enable docker
+systemctl start docker