Практика: полный деплой

{
    "scripts": {
        "dev": "next dev",
        "build": "next build",
        "start": "next start",
        "lint": "next lint",
        "typecheck": "tsc --noEmit",
        "test": "vitest",
        "test:e2e": "playwright test"
    }
}

const nextConfig = {
    output: process.env.DOCKER ? 'standalone' : undefined,
    images: {
        remotePatterns: [
            { protocol: 'https', hostname: 'images.example.com' },
        ],
    },
    async headers() {
        return [
            {
                source: '/(.*)',
                headers: [
                    { key: 'X-Content-Type-Options', value: 'nosniff' },
                    { key: 'X-Frame-Options', value: 'DENY' },
                    { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' },
                ],
            },
        ];
    },
};

export default nextConfig;

// lib/env.ts
import { z } from 'zod';

const envSchema = z.object({
    DATABASE_URL: z.string().url(),
    AUTH_SECRET: z.string().min(32),
    NEXT_PUBLIC_API_URL: z.string().url(),
    NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),
});

export const env = envSchema.parse(process.env);

git init
git add .
git commit -m "Initial"
git remote add origin git@github.com:user/repo.git
git push -u origin main

DATABASE_URL=postgresql://...
AUTH_SECRET=<32+ символов>
NEXT_PUBLIC_API_URL=https://api.example.com

# Docker
curl -fsSL https://get.docker.com | sh

# Nginx
sudo apt install nginx

# Certbot
sudo apt install certbot python3-certbot-nginx

cd /var/www
git clone git@github.com:user/repo.git my-app
cd my-app

DATABASE_URL=postgresql://postgres:password@db:5432/myapp
AUTH_SECRET=<32+ символов>
NEXT_PUBLIC_API_URL=https://example.com

services:
  app:
    build: .
    ports:
      - "3000:3000"
    environment:
      - DATABASE_URL=postgresql://postgres:password@db:5432/myapp
      - AUTH_SECRET=${AUTH_SECRET}
      - NEXT_PUBLIC_API_URL=https://example.com
    depends_on:
      - db
    restart: unless-stopped

  db:
    image: postgres:16-alpine
    environment:
      - POSTGRES_PASSWORD=password
      - POSTGRES_DB=myapp
    volumes:
      - postgres_data:/var/lib/postgresql/data
    restart: unless-stopped

volumes:
  postgres_data:

docker compose up -d --build

docker compose exec app npx prisma migrate deploy

server {
    listen 80;
    server_name example.com www.example.com;

    location / {
        proxy_pass http://localhost:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

sudo ln -s /etc/nginx/sites-available/example.com /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx

sudo certbot --nginx -d example.com -d www.example.com

name: Deploy

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.SSH_HOST }}
          username: ${{ secrets.SSH_USER }}
          key: ${{ secrets.SSH_KEY }}
          script: |
            cd /var/www/my-app
            git pull
            docker compose up -d --build
            docker compose exec -T app npx prisma migrate deploy

docker compose down
git checkout <предыдущий-коммит>
docker compose up -d --build

psql -U roman myapp < backup.sql