refactor progress

fluxer_devops/weblate/.env.example

@@ -0,0 +1,36 @@
+WEBLATE_SITE_DOMAIN=i18n.fluxer.app
+WEBLATE_SITE_TITLE=Fluxer Localization Platform
+WEBLATE_ADMIN_EMAIL=admin@fluxer.app
+WEBLATE_ADMIN_PASSWORD=
+WEBLATE_ADMIN_NAME=Fluxer Admin
+WEBLATE_SERVER_EMAIL=admin@fluxer.app
+WEBLATE_DEFAULT_FROM_EMAIL=noreply@fluxer.app
+
+WEBLATE_EMAIL_HOST=
+WEBLATE_EMAIL_PORT=587
+WEBLATE_EMAIL_USE_SSL=0
+WEBLATE_EMAIL_USE_TLS=1
+WEBLATE_EMAIL_HOST_USER=apikey
+WEBLATE_EMAIL_HOST_PASSWORD=
+
+WEBLATE_DB_PASSWORD=
+POSTGRES_DB=weblate
+POSTGRES_USER=weblate
+POSTGRES_PASSWORD=
+POSTGRES_HOST=weblate-postgres
+POSTGRES_PORT=5432
+
+VALKEY_PASSWORD=
+REDIS_HOST=valkey
+REDIS_PORT=6379
+REDIS_DB=1
+REDIS_PASSWORD=
+
+CACHE_URL=redis://:@valkey:6379/1
+BROKER_URL=redis://:@valkey:6379/2
+CELERY_BROKER_URL=redis://:@valkey:6379/2
+
+WEBLATE_SECURE_PROXY_SSL_HEADER=HTTP_X_FORWARDED_PROTO,https
+WEBLATE_ENABLE_HTTPS=1
+WEBLATE_IP_BEHIND_REVERSE_PROXY=1
+WEBLATE_IP_PROXY_HEADER=HTTP_X_FORWARDED_FOR

fluxer_devops/weblate/compose.yaml

@@ -0,0 +1,93 @@
+services:
+  weblate-postgres:
+    image: postgres:17-alpine
+    hostname: weblate-postgres
+    env_file:
+      - /etc/fluxer/weblate.env
+    volumes:
+      - weblate_postgres:/var/lib/postgresql/data
+    networks:
+      - fluxer-shared
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+        delay: 10s
+        max_attempts: 3
+      resources:
+        limits:
+          cpus: '2'
+          memory: 4G
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U weblate -d weblate']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
+
+  weblate:
+    image: weblate/weblate:latest
+    hostname: weblate
+    env_file:
+      - /etc/fluxer/weblate.env
+    volumes:
+      - weblate_data:/app/data
+      - weblate_cache:/app/cache
+    networks:
+      - fluxer-shared
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+        delay: 10s
+        max_attempts: 3
+      resources:
+        limits:
+          cpus: '4'
+          memory: 8G
+      labels:
+        - 'caddy=i18n.fluxer.app'
+        - 'caddy.reverse_proxy={{upstreams 8080}}'
+        - 'caddy.header.Strict-Transport-Security="max-age=31536000; includeSubDomains; preload"'
+        - 'caddy.header.X-Xss-Protection="1; mode=block"'
+        - 'caddy.header.X-Content-Type-Options=nosniff'
+        - 'caddy.header.Referrer-Policy=strict-origin-when-cross-origin'
+        - 'caddy.header.X-Frame-Options=DENY'
+    healthcheck:
+      test: ['CMD-SHELL', 'curl -fsS http://127.0.0.1:8080/ >/dev/null || exit 1']
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 60s
+
+  weblate-worker:
+    image: weblate/weblate:latest
+    hostname: weblate-worker
+    env_file:
+      - /etc/fluxer/weblate.env
+    environment:
+      - WEBLATE_SERVICE=celery
+    networks:
+      - fluxer-shared
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+        delay: 10s
+        max_attempts: 3
+      resources:
+        limits:
+          cpus: '2'
+          memory: 4G
+
+networks:
+  fluxer-shared:
+    external: true
+
+volumes:
+  weblate_postgres:
+    driver: local
+  weblate_data:
+    driver: local
+  weblate_cache:
+    driver: local