Infrastructure
Table of Contents
Deployment Topology
Dual-Role Dockerfile
Dockerfile, three stages:1.
frontend stage — nginx:1.27-alpine; copies fullstack/Frontend/ into the web root plus its nginx.conf and entrypoint.sh. Entrypoint can rewrite the API base URL into served config at boot.2.
vendor stage — php:8.5-fpm-alpine; installs composer deps with --no-dev --optimize-autoloader for layer caching.3.
backend stage — php-fpm + nginx under supervisor (web + queue worker in one container), production php.ini, app overrides from fullstack/Backend/docker/php.ini, storage dirs provisioned and chowned to www-data.FROM ${SERVICE_ROLE} selects the variant — Railway injects the per-service env var as a build arg.Railway Configuration
{ "build": { "builder": "DOCKERFILE", "dockerfilePath": "Dockerfile", "buildEnvironment": "V3" },
"deploy": { "runtime": "V2", "numReplicas": 1, "sleepApplication": false,
"restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 } }Continuous Integration
.github/workflows/ci.yml runs two jobs on pushes to main/develop/feat/community-hub and PRs to main/develop:| Job | Steps |
|---|---|
| Code Style (Pint) | setup-php 8.2 → composer install → vendor/bin/pint --test |
| PHPUnit Tests | setup-php 8.2 (+ mbstring, pdo_sqlite, dom, gd, intl, zip) → env bootstrap (key:generate, jwt:secret) → php artisan test |
Health Checks & Runtime Guards
| Surface | Mechanism |
|---|---|
| Frontend container | HEALTHCHECK: wget / every 30s (Dockerfile#L19-L20) |
| Backend container | HEALTHCHECK: curl /up expecting "status":"ok"; generous 60s start period for migrations warm-up |
| Supervisor | keeps php-fpm, nginx and queue worker alive inside backend image (supervisord.conf) |
| Scheduled expiry | console commands expire:stale-orders, expire:stale-subscriptions, expire:password-tokens intended for cron/scheduler |
Modified at 2026-08-25 22:41:45