VigilanzaTurni/QUICKSTART-DEPLOYMENT.md
marco370 a40b945c84 Update deployment to securely manage database passwords
Securely manage PostgreSQL credentials by storing them in a dedicated file and updating deployment scripts to reference this file, removing hardcoded passwords from configuration and documentation.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 42d8028a-fa71-4ec2-938c-e43eedf7df01
Replit-Commit-Checkpoint-Type: intermediate_checkpoint
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/6d543d2c-20b9-4ea6-93fe-70fe9b1d9f80/42d8028a-fa71-4ec2-938c-e43eedf7df01/aazyBOE
2025-10-16 11:00:27 +00:00

3.7 KiB
Raw Permalink Blame History

🚀 Quick Start - Deployment VigilanzaTurni

Guida rapida per deployment: Replit → GitLab → vt.alfacom.it

📝 Checklist Pre-Deployment

  • Server AlmaLinux 9 disponibile (min 2GB RAM)
  • Dominio vt.alfacom.it configurato
  • Account GitLab
  • SSH access al server

Setup Iniziale (15 minuti)

1 Setup Server (5 min)

# SSH nel server
ssh root@vt.alfacom.it

# Clone repository
cd /var/www
git clone https://git.alfacom.it/marco/VigilanzaTurni.git vigilanza-turni
cd vigilanza-turni

# Esegui setup automatico
sudo bash deploy/setup-server.sh

Lo script installa automaticamente:

  • Node.js 20
  • PostgreSQL 15 (password autogenerata)
  • PM2
  • Nginx
  • Certbot (SSL)

⚠️ Password DB salvata in: /root/.vigilanza_db_password

2 Configura Nginx (2 min)

# Copia configurazione Nginx
sudo cp deploy/nginx.conf /etc/nginx/conf.d/vigilanza-turni.conf

# Test e reload
sudo nginx -t
sudo systemctl reload nginx

# SSL Certificate
sudo certbot --nginx -d vt.alfacom.it

3 Configura .env (2 min)

cd /var/www/vigilanza-turni

# Recupera password DB da file sicuro
DB_PASS=$(grep PGPASSWORD /root/.vigilanza_db_password | cut -d= -f2)
SESSION_SECRET=$(openssl rand -base64 32)

# Crea .env con valori reali (no shell variables)
cat > .env << EOF
# Database
DATABASE_URL=postgresql://vigilanza_user:${DB_PASS}@localhost:5432/vigilanza_turni
PGHOST=localhost
PGPORT=5432
PGDATABASE=vigilanza_turni
PGUSER=vigilanza_user
PGPASSWORD=${DB_PASS}

# Session
SESSION_SECRET=${SESSION_SECRET}

# Application
NODE_ENV=production
PORT=5000
APP_URL=https://vt.alfacom.it

# Backup
BACKUP_ENABLED=true
BACKUP_DIR=/var/backups/vigilanza-turni
LOG_LEVEL=info
EOF

echo "✅ File .env creato"

Verifica:

cat .env | grep DATABASE_URL
# Deve mostrare password reale, non variabili shell

4 Primo Deploy (2 min)

cd /var/www/vigilanza-turni
bash deploy/deploy.sh

🔄 Workflow Quotidiano

Deploy in 2 Comandi

Da Replit o locale:

# 1. Push a GitLab
./push-to-gitlab.sh

# 2. Sul server: Deploy
ssh root@vt.alfacom.it "cd /var/www/vigilanza-turni && bash deploy/deploy.sh"

Il deploy automaticamente:

  • Esegue backup database
  • Pull ultime modifiche da GitLab
  • Build frontend Vite
  • Esegue migrations database
  • Restart applicazione PM2
  • Health check

📊 Comandi Utili

# Status applicazione
pm2 status

# Logs real-time
pm2 logs vigilanza-turni

# Restart
pm2 restart vigilanza-turni

# Verifica backup
ls -lht /var/backups/vigilanza-turni/

# Ripristina backup (usa password da file)
export $(cat /root/.vigilanza_db_password | xargs)
gunzip -c /var/backups/vigilanza-turni/backup_20250116_143022.sql.gz | \
  psql -h localhost -U vigilanza_user -d vigilanza_turni

🆘 Troubleshooting

App non risponde:

pm2 restart vigilanza-turni
pm2 logs vigilanza-turni --lines 50
sudo systemctl reload nginx

Errore database:

# Verifica connessione (usa password da file)
export $(cat /root/.vigilanza_db_password | xargs)
psql -h localhost -U vigilanza_user -d vigilanza_turni -c "SELECT version();"

Build fallito:

cd /var/www/vigilanza-turni
rm -rf node_modules dist
npm ci
npm run build
pm2 restart vigilanza-turni

🌐 Accesso

Applicazione: https://vt.alfacom.it

Backup automatici:

  • Directory: /var/backups/vigilanza-turni/
  • Retention: 30 giorni
  • Formato: backup_YYYYMMDD_HHMMSS.sql.gz

📚 File Importanti

  • deploy/deploy.sh - Script deployment automatico
  • deploy/setup-server.sh - Setup iniziale server
  • deploy/nginx.conf - Configurazione reverse proxy
  • .env - Variabili ambiente produzione
  • push-to-gitlab.sh - Helper push GitLab