🏗️ template-infra

GitHub Template Repository — Use this template to create new infrastructure projects with pre-configured Docker, NGINX, and deployment automation.

Infrastructure-as-Code template by 7T providing production-ready Docker Compose configurations, NGINX reverse proxy with SSL, automated deployment with rollback support, and database backup management.

📋 Table of Contents

• Features
• Project Structure
• Prerequisites
• Setup
• Usage
• Deployment
• SSL Certificates
• Backups
• CI/CD
• Template Usage
• Contributing
• License

✨ Features

• Docker Compose — Multi-service orchestration (app, NGINX, database, Redis)
• NGINX Reverse Proxy — TLS termination, rate limiting, gzip compression
• Redis Cache — In-memory data store for caching and session management
• Production Overrides — Resource limits, replicas, optimized DB settings
• Deployment Automation — Zero-downtime deploys with health checks and rollback
• SSL Management — Automated Let's Encrypt certificate renewal (30-day threshold)
• Database Backups — Automated backups with configurable retention (minimum 7)
• CI Pipeline — Docker Compose validation, ShellCheck, security checks
• Health Checks — All services monitored at ≤30 second intervals

📁 Project Structure

template-infra/
├── docker-compose.yml          # Base service definitions (app, nginx, db, redis)
├── docker-compose.prod.yml     # Production overrides
├── .env.example                # Environment variable template
├── nginx/
│   ├── nginx.conf              # Main NGINX configuration
│   ├── conf.d/
│   │   └── default.conf        # Server blocks and upstream config
│   └── ssl/
│       └── ssl-params.conf     # SSL/TLS parameters
├── scripts/
│   ├── deploy.sh               # Deployment with rollback support
│   ├── backup.sh               # Database backup automation
│   ├── restore.sh              # Database restore from backup
│   └── ssl-renew.sh            # SSL certificate renewal
├── .github/
│   └── workflows/
│       └── ci.yml              # CI pipeline (validate, lint, security)
├── .gitignore
├── LICENSE
└── README.md

🔧 Prerequisites

• Docker (v20.10+)
• Docker Compose (v2.0+)
• Bash (v4.0+) for scripts
• curl for health checks
• (Optional) ShellCheck for script linting

🚀 Setup

1. Create from template

Click "Use this template" on GitHub or clone directly:

git clone https://github.com/7tteam/template-infra.git my-project-infra
cd my-project-infra

2. Configure environment

cp .env.example .env

Edit .env with your settings:

APP_NAME=my-service
APP_PORT=3000
DB_NAME=mydb
DB_USER=myuser
DB_PASSWORD=<secure-password>
DOMAIN=api.mydomain.com
SSL_EMAIL=admin@mydomain.com

3. Start services (development)

docker compose up -d

4. Verify services are running

docker compose ps
curl http://localhost/health

📖 Usage

Development Mode

# Start all services
docker compose up -d

# View logs
docker compose logs -f

# Stop services
docker compose down

# Rebuild after changes
docker compose up -d --build

Production Mode

# Start with production overrides
docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d

# Check service health
docker compose ps

Service Access

Service	URL	Description
Application	http://localhost:3000	Direct app access
NGINX (HTTP)	http://localhost:80	Reverse proxy
NGINX (HTTPS)	https://localhost:443	SSL-terminated access
Database	localhost:5432	PostgreSQL
Redis	localhost:6379	Redis cache

🚢 Deployment

The deployment script supports zero-downtime deployments with automatic rollback on failure.

# Deploy to staging
./scripts/deploy.sh --env staging --version 1.2.0

# Deploy to production
./scripts/deploy.sh --env production --version 1.2.0

# Rollback to previous version
./scripts/deploy.sh --env production --rollback

Deployment Flow

1. Pull latest images
2. Start containers with new version
3. Run health check (120s timeout)
4. ✅ Success → Save version, notify
5. ❌ Failure → Auto-rollback to previous version
6. ❌ Rollback failure → Halt pipeline, alert ops team

🔐 SSL Certificates

Automated SSL certificate management using Let's Encrypt with 30-day renewal threshold.

# Check certificate status
./scripts/ssl-renew.sh --domain api.mydomain.com --check

# Renew certificate
./scripts/ssl-renew.sh --domain api.mydomain.com --email admin@mydomain.com

# Force renewal
./scripts/ssl-renew.sh --domain api.mydomain.com --force

Cron Setup (Automatic Renewal)

# Add to crontab - check daily at 3 AM
0 3 * * * /path/to/scripts/ssl-renew.sh --domain api.mydomain.com --email admin@mydomain.com

💾 Backups

Automated database backups with retention management and point-in-time restore.

# Create a full backup
./scripts/backup.sh --type full

# List available backups
./scripts/backup.sh --list

# Set custom retention (default: 7)
./scripts/backup.sh --type full --retain 14

Restoring from Backup

# List available backups
./scripts/restore.sh --list

# Restore from a specific backup file
./scripts/restore.sh --file backups/appdb_full_20240115_030000.sql.gz

# Restore to a specific database
./scripts/restore.sh --file backups/appdb_full_20240115_030000.sql.gz --db mydb

# Skip safety backup before restore
./scripts/restore.sh --file backups/appdb_full_20240115_030000.sql.gz --no-safety

Cron Setup (Automated Daily Backups)

# Daily backup at midnight
0 0 * * * /path/to/scripts/backup.sh --type full --retain 7

🔄 CI/CD

The CI pipeline runs on every push and pull request:

1. Validate — Docker Compose configuration syntax check
2. ShellCheck — Lint all shell scripts for best practices
3. Security — Scan for hardcoded secrets in config files

📝 Template Usage

This repository is a GitHub Template. To create a new infrastructure project:

1. Click the "Use this template" button at the top of the repository page
2. Name your new repository and select visibility
3. Clone the new repository locally
4. Copy .env.example to .env and configure for your environment
5. Update nginx/conf.d/default.conf with your upstream services
6. Customize docker-compose.yml services for your stack
7. Run docker compose up -d to verify everything works

Customization Guide

• Add services: Edit docker-compose.yml to add Redis, Elasticsearch, etc.
• Modify proxy rules: Update nginx/conf.d/default.conf with routing rules
• Adjust resources: Edit docker-compose.prod.yml for production limits
• Change database: Swap PostgreSQL image/config for MySQL, MongoDB, etc.

🤝 Contributing

Please see our Contributing Guidelines for details on how to contribute to this project.

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

---

Built with ❤️ by 7T