chore: initial hub repo structure

infra/compose/elysia.yml

@@ -0,0 +1,24 @@
+services:
+  elysia-api:
+    container_name: elysia-api
+    image: ghcr.io/asepharyana/asepharyana-hub/elysia-api:sha-0899edc
+    restart: always
+    networks:
+      app-shared-net:
+        aliases:
+          - elysia-api
+    env_file:
+      - ../../.env
+    environment:
+      - REDIS_URL=redis://redis:6379
+      - JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
+      - DATABASE_URL=${DATABASE_URL}
+      - GITHUB_TOKEN=${GITHUB_TOKEN}
+      - PORT=4092
+      - OTEL_EXPORTER_OTLP_ENDPOINT=http://otlp-metrics-backend:4317
+      - OTEL_SERVICE_NAME=elysia-api
+
+networks:
+  app-shared-net:
+    name: app-shared-net
+    external: true

infra/compose/react.yml

@@ -0,0 +1,13 @@
+services:
+  react-web:
+    container_name: react-web
+    image: ghcr.io/asepharyana/asepharyana-hub/react-web:sha-0899edc
+    restart: always
+    networks: [app-shared-net]
+    environment:
+      - VITE_API_URL=https://scraper.asepharyana.my.id/api
+      - VITE_ELYSIA_URL=https://elysia.asepharyana.my.id
+networks:
+  app-shared-net:
+    name: app-shared-net
+    external: true

infra/compose/rust-auth.yml

@@ -0,0 +1,20 @@
+services:
+  rust-auth:
+    container_name: rust-auth-api
+    image: ghcr.io/asepharyana/asepharyana-hub/rust-auth:sha-0899edc
+    restart: always
+    networks:
+      app-shared-net:
+        aliases:
+          - rust-auth
+    env_file:
+      - ../../.env
+    environment:
+      - PORT=3000
+      - OTEL_EXPORTER_OTLP_ENDPOINT=http://otlp-metrics-backend:4317
+      - OTEL_SERVICE_NAME=rust-auth
+
+networks:
+  app-shared-net:
+    name: app-shared-net
+    external: true

infra/compose/scraper.yml

@@ -0,0 +1,21 @@
+services:
+  scraper-api:
+    container_name: scraper-api
+    image: ghcr.io/asepharyana/asepharyana-hub/scraper-api:sha-0899edc
+    restart: always
+    networks:
+      app-shared-net:
+        aliases:
+          - scraper-api
+    env_file:
+      - ../../.env
+    environment:
+      - REDIS_URL=redis://redis:6379
+      - JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
+      - DATABASE_URL=${DATABASE_URL}
+      - OTEL_EXPORTER_OTLP_ENDPOINT=http://otlp-metrics-backend:4317
+      - OTEL_SERVICE_NAME=scraper-api
+networks:
+  app-shared-net:
+    name: app-shared-net
+    external: true

infra/compose/shared.yml

@@ -0,0 +1,21 @@
+services:
+  redis:
+    container_name: redis
+    image: 'redis:alpine'
+    restart: always
+    networks:
+      app-shared-net:
+        aliases:
+          - redis
+    ports:
+      - '${SHARED_REDIS_EXPOSE:-127.0.0.1:6379:6379}'
+    volumes:
+      - 'redis_data:/data'
+
+networks:
+  app-shared-net:
+    name: app-shared-net
+    external: true
+
+volumes:
+  redis_data: null

infra/compose/traefik.yml

@@ -0,0 +1,74 @@
+services:
+  traefik:
+    container_name: traefik
+    image: traefik:v3.6
+    restart: always
+    sysctls:
+      - net.core.somaxconn=65535
+      - net.ipv4.ip_local_port_range=1024 65535
+    ulimits:
+      nofile:
+        soft: 1048576
+        hard: 1048576
+    ports:
+      - '80:80'
+      - '443:443'
+    networks:
+      - app-shared-net
+    extra_hosts:
+      - 'host.docker.internal:10.0.1.1'
+    command:
+      - '--api.dashboard=true'
+      - '--api.insecure=false'
+      - '--providers.docker=true'
+      - '--providers.docker.endpoint=unix:///var/run/docker.sock'
+      - '--providers.docker.exposedByDefault=false'
+      - '--providers.docker.network=app-shared-net'
+      - '--providers.docker.watch=true'
+      - '--providers.file.directory=/etc/traefik/dynamic'
+      - '--providers.file.watch=true'
+      - '--entryPoints.web.address=:80'
+      - '--entryPoints.web.http.redirections.entryPoint.to=websecure'
+      - '--entryPoints.web.http.redirections.entryPoint.scheme=https'
+      - '--accesslog=true'
+      - '--accesslog.bufferingsize=100'
+      - '--log.level=INFO'
+      - '--log.format=json'
+      - '--entryPoints.web.transport.respondingTimeouts.readTimeout=0'
+      - '--entryPoints.web.transport.respondingTimeouts.writeTimeout=0'
+      - '--entryPoints.web.transport.respondingTimeouts.idleTimeout=0'
+      - '--entryPoints.web.transport.lifeCycle.requestAcceptGraceTimeout=15s'
+      - '--entryPoints.web.transport.lifeCycle.graceTimeOut=10s'
+      - '--entryPoints.websecure.transport.respondingTimeouts.readTimeout=0'
+      - '--entryPoints.websecure.transport.respondingTimeouts.writeTimeout=0'
+      - '--entryPoints.websecure.transport.respondingTimeouts.idleTimeout=0'
+      - '--entryPoints.websecure.transport.lifeCycle.requestAcceptGraceTimeout=15s'
+      - '--entryPoints.websecure.transport.lifeCycle.graceTimeOut=10s'
+      - '--entryPoints.websecure.address=:443'
+      - '--experimental.plugins.real-ip.moduleName=github.com/soulbalz/traefik-real-ip'
+      - '--experimental.plugins.real-ip.version=v1.0.3'
+      - '--experimental.plugins.blockpath.moduleName=github.com/traefik/plugin-blockpath'
+      - '--experimental.plugins.blockpath.version=v0.2.1'
+    environment:
+      - DOCKER_API_VERSION=1.41
+      - GOMEMLIMIT=4096MiB
+      - GOGC=200
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ${TRAEFIK_CONFIG_PATH:-/root/asepharyana-hub/infra/traefik/dynamic}:/etc/traefik/dynamic:ro
+      - ${TRAEFIK_CERT_ASEPHARYANA_MY_ID_PEM:-/root/asepharyana.my.id.pem}:/etc/traefik/certs/asepharyana.my.id.pem:ro
+      - ${TRAEFIK_CERT_ASEPHARYANA_MY_ID_KEY:-/root/asepharyana.my.id.key}:/etc/traefik/certs/asepharyana.my.id.key:ro
+      - ${TRAEFIK_CERT_ASEPHARYANA_WEB_ID_PEM:-/root/asepharyana.web.id.pem}:/etc/traefik/certs/asepharyana.web.id.pem:ro
+      - ${TRAEFIK_CERT_ASEPHARYANA_WEB_ID_KEY:-/root/asepharyana.web.id.key}:/etc/traefik/certs/asepharyana.web.id.key:ro
+    labels:
+      - 'traefik.enable=true'
+      - 'traefik.http.routers.traefik.rule=Host(`traefik.asepharyana.my.id`) || Host(`traefik.asepharyana.web.id`)'
+      - 'traefik.http.routers.traefik.service=api@internal'
+      - 'traefik.http.routers.traefik.entrypoints=websecure'
+      - 'traefik.http.routers.traefik.tls=true'
+      - 'traefik.http.routers.traefik.middlewares=admin-chain@file'
+
+networks:
+  app-shared-net:
+    name: app-shared-net
+    external: true