feat: homelab deployment - NPM + IONOS DNS + monitoring + NAS backup

- Restructured docker-compose for Nginx Proxy Manager (no custom nginx) - Added domain wordly.art configuration - Added Prometheus + Grafana monitoring stack with pre-configured dashboards - Added PostgreSQL backup script to NAS (daily/weekly/monthly rotation) - Added alert rules for backend, system, and Docker metrics - Updated deployment guide for NPM + IONOS DNS homelab setup - Added marketing plan document - PDF translator and watermark support - Enhanced middleware, routes, and translator modules Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-10 11:43:28 +02:00
parent 16ac7ca2b9
commit ce8e150a61
110 changed files with 6935 additions and 4301 deletions
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,11 +1,15 @@
-# Document Translation API - Production Docker Compose
-# Usage: docker compose up -d
-#        (or: docker-compose up -d)
+# ============================================
+# Wordly.art - Production Docker Compose
+# ============================================
+# Architecture: Nginx Proxy Manager (NPM) gere le SSL et reverse proxy
+# NPM pointe vers les services internes sur ce réseau Docker
 #
-# All services run in production mode (no code mounts, built images).
-# Secrets: set in .env at project root (see .env.example "Production / VPS" section).
-
-version: '3.8'
+# Usage:
+#   docker compose up -d
+#
+# Puis configurer NPM pour pointer vers:
+#   wordly.art -> frontend:3000 (et backend:8000 pour /api/ et /translate)
+# ============================================

 services:
  # ===========================================
@@ -13,18 +17,17 @@ services:
  # ===========================================
  postgres:
    image: postgres:16-alpine
-    container_name: translate-postgres
+    container_name: wordly-postgres
    restart: unless-stopped
    environment:
      - POSTGRES_USER=${POSTGRES_USER:-translate}
-      # Production: set POSTGRES_PASSWORD in .env (required, no default — NFR10)
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=${POSTGRES_DB:-translate_db}
      - PGDATA=/var/lib/postgresql/data/pgdata
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
-      - translate-network
+      - wordly-network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-translate} -d ${POSTGRES_DB:-translate_db}"]
      interval: 10s
@@ -39,41 +42,53 @@ services:
          memory: 128M

  # ===========================================
-  # Backend API Service
+  # Redis (Caching & Sessions)
+  # ===========================================
+  redis:
+    image: redis:7-alpine
+    container_name: wordly-redis
+    restart: unless-stopped
+    command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
+    volumes:
+      - redis_data:/data
+    networks:
+      - wordly-network
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 5s
+
+  # ===========================================
+  # Backend API (FastAPI)
  # ===========================================
  backend:
    build:
      context: .
      dockerfile: docker/backend/Dockerfile
      target: production
-    container_name: translate-backend
+    container_name: wordly-backend
    restart: unless-stopped
    env_file:
      - .env
    environment:
-      # Database (POSTGRES_PASSWORD must be set in .env — no default)
      - DATABASE_URL=postgresql+asyncpg://${POSTGRES_USER:-translate}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-translate_db}
-      # Redis
      - REDIS_URL=redis://redis:6379/0
-      # Translation Services
      - TRANSLATION_SERVICE=${TRANSLATION_SERVICE:-ollama}
      - OLLAMA_BASE_URL=${OLLAMA_BASE_URL:-http://ollama:11434}
      - OLLAMA_MODEL=${OLLAMA_MODEL:-llama3}
      - DEEPL_API_KEY=${DEEPL_API_KEY:-}
      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
      - OPENROUTER_API_KEY=${OPENROUTER_API_KEY:-}
-      # File Limits
      - MAX_FILE_SIZE_MB=${MAX_FILE_SIZE_MB:-50}
-      # Rate Limiting
      - RATE_LIMIT_REQUESTS_PER_MINUTE=${RATE_LIMIT_REQUESTS_PER_MINUTE:-60}
      - RATE_LIMIT_TRANSLATIONS_PER_MINUTE=${RATE_LIMIT_TRANSLATIONS_PER_MINUTE:-10}
-      # Admin Auth (CHANGE IN PRODUCTION!)
      - ADMIN_USERNAME=${ADMIN_USERNAME}
      - ADMIN_PASSWORD=${ADMIN_PASSWORD}
-      # Security (.env.example documents JWT_SECRET_KEY)
      - JWT_SECRET_KEY=${JWT_SECRET_KEY}
-      - CORS_ORIGINS=${CORS_ORIGINS:-https://yourdomain.com}
-      # Stripe Payments
+      - ADMIN_TOKEN_SECRET=${ADMIN_TOKEN_SECRET}
+      - CORS_ORIGINS=${CORS_ORIGINS:-https://wordly.art}
      - STRIPE_SECRET_KEY=${STRIPE_SECRET_KEY:-}
      - STRIPE_WEBHOOK_SECRET=${STRIPE_WEBHOOK_SECRET:-}
      - STRIPE_STARTER_PRICE_ID=${STRIPE_STARTER_PRICE_ID:-}
@@ -84,7 +99,7 @@ services:
      - outputs_data:/app/outputs
      - logs_data:/app/logs
    networks:
-      - translate-network
+      - wordly-network
    depends_on:
      postgres:
        condition: service_healthy
@@ -95,7 +110,7 @@ services:
      interval: 30s
      timeout: 10s
      retries: 3
-      start_period: 10s
+      start_period: 15s
    deploy:
      resources:
        limits:
@@ -104,23 +119,23 @@ services:
          memory: 512M

  # ===========================================
-  # Frontend Web Service
+  # Frontend (Next.js)
  # ===========================================
  frontend:
    build:
      context: .
      dockerfile: docker/frontend/Dockerfile
      target: production
-    args:
-      - NEXT_PUBLIC_API_URL=${NEXT_PUBLIC_API_URL:-http://backend:8000}
-    container_name: translate-frontend
+      args:
+        NEXT_PUBLIC_API_URL: ""
+    container_name: wordly-frontend
    restart: unless-stopped
    env_file:
      - .env
    environment:
-      - NEXT_PUBLIC_API_URL=${NEXT_PUBLIC_API_URL:-http://backend:8000}
+      - NEXT_PUBLIC_API_URL=${NEXT_PUBLIC_API_URL:-https://wordly.art}
    networks:
-      - translate-network
+      - wordly-network
    depends_on:
      backend:
        condition: service_healthy
@@ -131,44 +146,17 @@ services:
        reservations:
          memory: 128M

-  # ===========================================
-  # Nginx Reverse Proxy
-  # ===========================================
-  nginx:
-    image: nginx:alpine
-    container_name: translate-nginx
-    restart: unless-stopped
-    ports:
-      - "${HTTP_PORT:-80}:80"
-      - "${HTTPS_PORT:-443}:443"
-    volumes:
-      - ./docker/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
-      - ./docker/nginx/conf.d:/etc/nginx/conf.d:ro
-      - ./docker/nginx/ssl:/etc/nginx/ssl:ro
-      - nginx_cache:/var/cache/nginx
-    networks:
-      - translate-network
-    depends_on:
-      - frontend
-      - backend
-    # Config syntax only; to verify proxy reachability run: curl -f https://your-domain/health (see DEPLOYMENT_GUIDE)
-    healthcheck:
-      test: ["CMD", "nginx", "-t"]
-      interval: 30s
-      timeout: 10s
-      retries: 3
-
  # ===========================================
  # Ollama (Optional - Local LLM)
  # ===========================================
  ollama:
    image: ollama/ollama:latest
-    container_name: translate-ollama
+    container_name: wordly-ollama
    restart: unless-stopped
    volumes:
      - ollama_data:/root/.ollama
    networks:
-      - translate-network
+      - wordly-network
    deploy:
      resources:
        reservations:
@@ -179,74 +167,13 @@ services:
    profiles:
      - with-ollama

-  # ===========================================
-  # Redis (Caching & Sessions)
-  # ===========================================
-  redis:
-    image: redis:7-alpine
-    container_name: translate-redis
-    restart: unless-stopped
-    command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
-    volumes:
-      - redis_data:/data
-    networks:
-      - translate-network
-    healthcheck:
-      test: ["CMD", "redis-cli", "ping"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-      start_period: 5s
-
-  # ===========================================
-  # Prometheus (Optional - Monitoring)
-  # ===========================================
-  prometheus:
-    image: prom/prometheus:latest
-    container_name: translate-prometheus
-    restart: unless-stopped
-    volumes:
-      - ./docker/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
-      - prometheus_data:/prometheus
-    command:
-      - '--config.file=/etc/prometheus/prometheus.yml'
-      - '--storage.tsdb.path=/prometheus'
-      - '--web.enable-lifecycle'
-    networks:
-      - translate-network
-    profiles:
-      - with-monitoring
-
-  # ===========================================
-  # Grafana (Optional - Dashboards)
-  # ===========================================
-  grafana:
-    image: grafana/grafana:latest
-    container_name: translate-grafana
-    restart: unless-stopped
-    environment:
-      - GF_SECURITY_ADMIN_USER=${GRAFANA_USER:-admin}
-      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD:-admin}
-      - GF_USERS_ALLOW_SIGN_UP=false
-    volumes:
-      - grafana_data:/var/lib/grafana
-      - ./docker/grafana/dashboards:/etc/grafana/provisioning/dashboards:ro
-    networks:
-      - translate-network
-    depends_on:
-      - prometheus
-    profiles:
-      - with-monitoring
-
 # ===========================================
 # Networks
 # ===========================================
 networks:
-  translate-network:
+  wordly-network:
    driver: bridge
-    ipam:
-      config:
-        - subnet: 172.28.0.0/16
+    name: wordly-network

 # ===========================================
 # Volumes
@@ -260,13 +187,7 @@ volumes:
    driver: local
  logs_data:
    driver: local
-  nginx_cache:
+  redis_data:
    driver: local
  ollama_data:
    driver: local
-  redis_data:
-    driver: local
-  prometheus_data:
-    driver: local
-  grafana_data:
-    driver: local