106 lines
2.8 KiB
Markdown
106 lines
2.8 KiB
Markdown
# Ubuntu 24.04 — установка SAC (Docker Compose)
|
||
|
||
**Альтернативный** способ. В KalinaMall для production используется **[native](install-ubuntu-24.04-native.md)**.
|
||
|
||
Docker удобен для локальной отладки или изолированного стенда.
|
||
|
||
---
|
||
|
||
## 0. Исходные данные
|
||
|
||
| Параметр | Пример |
|
||
|----------|--------|
|
||
| Каталог | `/opt/security-alert-center` |
|
||
|
||
---
|
||
|
||
## 1. Базовая ОС и ufw
|
||
|
||
Как в [native-руководстве](install-ubuntu-24.04-native.md) §1 (без PostgreSQL/nginx на хосте, если всё в контейнерах — nginx можно на хосте для TLS).
|
||
|
||
---
|
||
|
||
## 2. Git и клон
|
||
|
||
```bash
|
||
sudo apt install -y git
|
||
sudo git clone https://git.kalinamall.ru/PapaTramp/security-alert-center.git /opt/security-alert-center
|
||
sudo chown -R "$USER:$USER" /opt/security-alert-center
|
||
```
|
||
|
||
---
|
||
|
||
## 3. Docker Engine + Compose
|
||
|
||
```bash
|
||
sudo apt install -y ca-certificates curl gnupg
|
||
sudo install -m 0755 -d /etc/apt/keyrings
|
||
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
|
||
sudo chmod a+r /etc/apt/keyrings/docker.gpg
|
||
|
||
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu noble stable" | \
|
||
sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
|
||
|
||
sudo apt update
|
||
sudo apt install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
|
||
sudo usermod -aG docker "$USER"
|
||
# перелогиниться
|
||
docker compose version
|
||
```
|
||
|
||
---
|
||
|
||
## 4. Конфигурация
|
||
|
||
```bash
|
||
sudo mkdir -p /etc/security-alert-center
|
||
cp /opt/security-alert-center/deploy/.env.example /etc/security-alert-center/.env
|
||
chmod 600 /etc/security-alert-center/.env
|
||
nano /etc/security-alert-center/.env
|
||
ln -sf /etc/security-alert-center/.env /opt/security-alert-center/deploy/.env
|
||
```
|
||
|
||
Заполнить: `POSTGRES_PASSWORD`, `JWT_SECRET`, `SAC_PUBLIC_URL`, `SAC_BOOTSTRAP_API_KEY`.
|
||
|
||
---
|
||
|
||
## 5. Запуск
|
||
|
||
```bash
|
||
cd /opt/security-alert-center/deploy
|
||
docker compose up -d --build
|
||
docker compose run --rm migrate
|
||
docker compose ps
|
||
curl -sS http://127.0.0.1:8000/health
|
||
```
|
||
|
||
---
|
||
|
||
## 6. Бэкап (Docker)
|
||
|
||
```bash
|
||
sudo tee /etc/cron.d/sac-backup <<'EOF'
|
||
0 3 * * * root docker compose -f /opt/security-alert-center/deploy/docker-compose.yml exec -T postgres pg_dump -U sac -Fc sac > /var/backups/sac/sac_$(date +\%Y\%m\%d).dump
|
||
EOF
|
||
```
|
||
|
||
---
|
||
|
||
## 7. Обновление
|
||
|
||
```bash
|
||
cd /opt/security-alert-center
|
||
git pull
|
||
cd deploy
|
||
docker compose build
|
||
docker compose up -d
|
||
docker compose run --rm migrate
|
||
```
|
||
|
||
---
|
||
|
||
## См. также
|
||
|
||
- [install-ubuntu-24.04-native.md](install-ubuntu-24.04-native.md) — основной путь
|
||
- [../deploy/docker-compose.yml](../deploy/docker-compose.yml)
|