45 lines
1.6 KiB
Markdown
45 lines
1.6 KiB
Markdown
# WESP Orchestrator — production deploy
|
|
|
|
## Bootstrap
|
|
|
|
1. Copy env template and run install secrets (`scripts/` or admin UI).
|
|
2. Start stack: `docker compose -f infra/docker/docker-compose.prod.yml up -d`.
|
|
3. Run migrations: `docker compose exec api alembic upgrade head`.
|
|
4. (Optional) Sync WESP static UI from hub: `scripts/sync-wesp-ui.sh` — skipped if `apps/web/public/wesp/` already exists in git.
|
|
|
|
## Hub pairing
|
|
|
|
1. Open Enterprise cabinet → **Generate pairing code**.
|
|
2. On farm hub (K-hub server role): Admin → Orchestrator sync → enter VPS URL + code.
|
|
3. Verify heartbeat and sync metrics in cabinet.
|
|
|
|
## Worker
|
|
|
|
- Default loop: `python -m app.worker` (reconcile every 5 min).
|
|
- Celery (recommended prod): `celery -A app.celery_app worker --loglevel=info` (service `celery-worker` in compose).
|
|
|
|
## Hub (WESP)
|
|
|
|
1. Run migration: `flask db upgrade` (revision `0025` / `web_user_lab_access` → orchestrator tables).
|
|
2. Configure orchestrator sync in hub admin (URL + pairing code).
|
|
3. Catalog edits enqueue `orchestrator_outbox`; reports enqueue `report_outbox`.
|
|
|
|
## nginx
|
|
|
|
- Zootech static: `/recipes`, `/components`, … → `public/wesp/*.html` (see `infra/nginx/default.tls.conf`).
|
|
- API: `/api/` → FastAPI.
|
|
|
|
## Security checklist
|
|
|
|
- Rotate `JWT_ACCESS_SECRET`, `JWT_REFRESH_PEPPER`, hub API keys.
|
|
- Enable PostgreSQL RLS in production (`DATABASE_URL=postgresql+psycopg://...`).
|
|
- Review `docs/security.md` before go-live.
|
|
|
|
## Tests (CI gate)
|
|
|
|
```bash
|
|
cd apps/api && .venv/bin/python -m pytest tests/modules/sync/test_orchestrator_dual_hub_e2e.py -q
|
|
```
|
|
|
|
Dual-hub E2E must pass before merge.
|