Ops: Added backup script, dashboard UI, and project cheatsheet.

docker-compose.yml

@@ -14,7 +14,7 @@ services:
         ports:
             - "${OSIT_WEB_HTTP_PORT}:80"
             - "${OSIT_WEB_HTTPS_PORT}:443"
-            - "${AE_API_GATEWAY_PORT}:80" # Entry point for external API traffic (HTTP)
+            - "${AE_API_GATEWAY_PORT}:80"
         volumes:
             - ./srv/html_php:/srv/html_php
             - ./srv/oneskyit_site:/srv/oneskyit_site
@@ -30,15 +30,30 @@ services:
             - ./conf/certs/oneskyit.com_privkey.pem:/etc/certs/privkey.pem
             - ./conf/certs/ssl-dhparams.pem:/etc/certs/ssl-dhparams.pem
             - ./logs/web:/logs
+        networks:
+            - ae_public
+            - ae_private
         depends_on:
             - ae_api
             - aether_app_gunicorn
+        logging:
+            driver: "json-file"
+            options:
+                max-size: "10m"
+                max-file: "3"
 
     redis:
         restart: always
         container_name: ${CONTAINER_REDIS}
         image: redis
         command: redis-server --save "" --loglevel warning
+        networks:
+            - ae_private
+        logging:
+            driver: "json-file"
+            options:
+                max-size: "10m"
+                max-file: "3"
 
     mariadb:
         restart: always
@@ -61,8 +76,13 @@ services:
         volumes:
             - ./srv/mariadb:/var/lib/mysql
             - ./conf/mariadb/server.cnf:/etc/mysql/conf.d/server.cnf
-        ports:
-            - "3306:3306"
+        networks:
+            - ae_private
+        logging:
+            driver: "json-file"
+            options:
+                max-size: "10m"
+                max-file: "3"
 
     phpmyadmin:
         restart: always
@@ -73,16 +93,29 @@ services:
             UPLOAD_LIMIT: 64M
         ports:
             - "${AE_PMA_PORT}:80"
+        networks:
+            - ae_public
+            - ae_private
         depends_on:
             - mariadb
+        logging:
+            driver: "json-file"
+            options:
+                max-size: "10m"
+                max-file: "3"
 
     ae_api:
         restart: always
-        # We don't use container_name here so we can scale
         build:
             context: ./
             dockerfile: aether_fastapi_gunicorn.Dockerfile
         scale: ${AE_API_REPLICAS}
+        healthcheck:
+            test: ["CMD", "curl", "-f", "http://localhost:5005/docs"]
+            interval: 10s
+            timeout: 5s
+            retries: 3
+            start_period: 10s
         env_file:
             - ./.env
         extra_hosts:
@@ -101,11 +134,18 @@ services:
             - ${HOSTED_FILES_SRC}:/srv/hosted_files
             - ${HOSTED_TMP_SRC}:/srv/hosted_tmp
             - ./temp/ae_api:/temp
+        networks:
+            - ae_private
         depends_on:
             - redis
             - mariadb
         stdin_open: true
         tty: true
+        logging:
+            driver: "json-file"
+            options:
+                max-size: "10m"
+                max-file: "3"
 
     aether_app_gunicorn:
         restart: always
@@ -130,7 +170,38 @@ services:
             - ${HOSTED_FILES_SRC}:/srv/hosted_files
             - ${HOSTED_TMP_SRC}:/srv/hosted_tmp
             - ./tmp/ae_app:/tmp
+        networks:
+            - ae_public
+            - ae_private
         depends_on:
             - ae_api
         stdin_open: true
         tty: true
+        logging:
+            driver: "json-file"
+            options:
+                max-size: "10m"
+                max-file: "3"
+
+    dozzle:
+        container_name: ae_dozzle_dev
+        image: amir20/dozzle:latest
+        volumes:
+            - /var/run/docker.sock:/var/run/docker.sock
+        ports:
+            - "8881:8080"
+        networks:
+            - ae_public
+        restart: unless-stopped
+        logging:
+            driver: "json-file"
+            options:
+                max-size: "10m"
+                max-file: "3"
+
+networks:
+  ae_public:
+    name: ae_dev_public
+  ae_private:
+    name: ae_dev_private
+    internal: true