Full-Stack Deploy va Demo Day: Prodaction Muhandislik

# docker-compose.yml
version: '3.8'

services:
  web:
    build: .
    restart: always
    environment:
      - DATABASE_URL=postgres://user:pass@db:5432/production_db
      - PORT=3000
    depends_on:
      db:
        condition: service_healthy
    networks:
      - internal-net

  db:
    image: postgres:16-alpine
    restart: always
    environment:
      POSTGRES_USER: user
      POSTGRES_PASSWORD: pass
      POSTGRES_DB: production_db
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U user -d production_db"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - internal-net

volumes:
  pgdata:

networks:
  internal-net:
    driver: bridge

# /etc/nginx/sites-available/cyber-app
server {
    listen 80;
    server_name api.target.uz;
    # Barcha HTTP so'rovlarni majburiy HTTPS ga yo'naltirish
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl http2;
    server_name api.target.uz;

    ssl_certificate /etc/letsencrypt/live/api.target.uz/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/api.target.uz/privkey.pem;

    location / {
        proxy_pass http://localhost:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

# 1. Barcha servislarning jonli loglarini kuzatish
docker compose logs -f --tail 50

# 2. Resurslar sarfini real vaqtda ko'rish (CPU, RAM, Tarmoq)
docker stats --no-stream

# 3. Server sog'ligini tekshiruvchi HTTP endpoint
curl -I https://api.target.uz/api/health
# HTTP/2 200 OK
# Content-Type: application/json
# {"status":"UP","uptime":1420,"db":"connected"}

# 4. Buzilgan konteynerlarni avtomatik qayta ko'tarish
# docker-compose.yml dagi `restart: unless-stopped` qoidasi