Deployment Guide

# Stage 1: Build
FROM mcr.microsoft.com/dotnet/sdk:9.0 AS build
WORKDIR /src
COPY . .
RUN dotnet restore
RUN dotnet publish -c Release -o /app/publish

# Stage 2: Runtime
FROM mcr.microsoft.com/dotnet/aspnet:9.0 AS final
WORKDIR /app
COPY --from=build /app/publish .
EXPOSE 8080
ENV ASPNETCORE_URLS=http://+:8080
ENTRYpoint ["dotnet", "xgp-photo-api.dll"]

services:
  postgres:
    image: postgres:16
    container_name: postgres-xgp
    restart: always
    ports:
      - "5432:5432"
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: tuPassword
      POSTGRES_DB: XgpPhotoDb
      POSTGRES_INITDB_ARGS: '--auth-host=scram-sha-256 --auth-local=scram-sha-256'
    volumes:
      - pgdata:/var/lib/postgresql/data
    networks:
      - xgp_network

  xgp-api:
    build: .
    container_name: xgp-api
    ports:
      - "5000:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Development
      ConnectionStrings__DefaultConnection: "Host=postgres;Port=5432;Database=XgpPhotoDb;Username=postgres;Password=tuPassword"
      Jwt__Issuer: "XgpPhotoApi"
      Jwt__Audience: "XgpPhotoClients"
      Jwt__Key: "clave-super-segura-y-larga-para-firmar-jwt"
      Jwt__ExpMinutes: "60"
      AuthClients__0__ClientId: "xgp-web"
      AuthClients__0__ClientSecret: "Y0urCl13ntS3cret!2025"
      AuthClients__0__Description: "Frontend local"
    depends_on:
      - postgres
    networks:
      - xgp_network

volumes:
  pgdata:

networks:
  xgp_network:
    driver: bridge

# Database
POSTGRES_USER=postgres
POSTGRES_PASSWORD=SecurePassword123!
POSTGRES_DB=XgpPhotoDb

# API
ASPNETCORE_ENVIRONMENT=Production
JWT_KEY=your-super-secret-jwt-key-minimum-32-characters
JWT_ISSUER=XgpPhotoApi
JWT_AUDIENCE=XgpPhotoClients

# Clients
CLIENT_WEB_ID=xgp-web
CLIENT_WEB_SECRET=Y0urCl13ntS3cret!2025

services:
  postgres:
    image: postgres:16
    container_name: postgres-xgp-prod
    restart: always
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
    volumes:
      - pgdata:/var/lib/postgresql/data
      - ./backups:/backups  # Backup directory
    networks:
      - xgp_network
    # Don't expose port to host in production

  xgp-api:
    image: your-registry.com/xgp-photo-api:latest
    container_name: xgp-api-prod
    restart: always
    ports:
      - "8080:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Production
      ConnectionStrings__DefaultConnection: "Host=postgres;Port=5432;Database=${POSTGRES_DB};Username=${POSTGRES_USER};Password=${POSTGRES_PASSWORD};SSL Mode=Prefer"
      Jwt__Issuer: ${JWT_ISSUER}
      Jwt__Audience: ${JWT_AUDIENCE}
      Jwt__Key: ${JWT_KEY}
      Jwt__ExpMinutes: "60"
    depends_on:
      - postgres
    networks:
      - xgp_network
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
      interval: 30s
      timeout: 10s
      retries: 3

volumes:
  pgdata:

networks:
  xgp_network:
    driver: bridge

upstream xgp_api {
    server localhost:5000;
}

server {
    listen 80;
    server_name api.xgp.com;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name api.xgp.com;

    ssl_certificate /etc/nginx/ssl/cert.pem;
    ssl_certificate_key /etc/nginx/ssl/key.pem;
    ssl_protocols TLSv1.2 TLSv1.3;

    location / {
        proxy_pass http://xgp_api;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_cache_bypass $http_upgrade;
    }
}