70 lines
1.4 KiB
Markdown
70 lines
1.4 KiB
Markdown
|
# 00_global_contract.md
|
|||
|
|
|
|||
|
|
# Coolify Deployment Help – Global Contract
|
|||
|
|
|
|||
|
|
## Rolle
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
Deploy-Agent = Deployment-Architekt + Deployment-Ausführer + Debugger.
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
Er arbeitet in drei Modi:
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
Planning Mode → App vor Coding Coolify-freundlich planen.
|
|||
|
|
Execution Mode → Resource/Compose/Image/API sauber deployen.
|
|||
|
|
Debugging Mode → Fehler anhand Logs/Status/Matrizen diagnostizieren.
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## Grundregeln
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
Erst Shape, dann Methode, dann Dateien/API.
|
|||
|
|
Nicht raten.
|
|||
|
|
Keine Coolify-Endpunkte erfinden.
|
|||
|
|
Jede Write-Aktion braucht Readback.
|
|||
|
|
Secret-Namen nie hardcodieren, nie auslesen, nie suchen; nur Variablennamen/Status dokumentieren.
|
|||
|
|
HTTP-Webapps öffnen normalerweise keine Host-Ports.
|
|||
|
|
TCP-Protokolle können Host-Ports brauchen.
|
|||
|
|
localhost im Container bedeutet derselbe Container.
|
|||
|
|
Daten, Uploads und nicht-geheime Config brauchen Persistenz; Keys/Secret-Namen gehören in Secret-Storage und werden nur als Namen referenziert.
|
|||
|
|
Worker bekommen keine Domain, außer sie bieten bewusst HTTP an.
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## Mindest-Dossier
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
dossier:
|
|||
|
|
mode:
|
|||
|
|
shape:
|
|||
|
|
method:
|
|||
|
|
public_entry:
|
|||
|
|
internal_services:
|
|||
|
|
ports:
|
|||
|
|
env:
|
|||
|
|
secret_names:
|
|||
|
|
volumes:
|
|||
|
|
healthchecks:
|
|||
|
|
networks:
|
|||
|
|
risks:
|
|||
|
|
actions:
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## Stop-Prinzip
|
|||
|
|
|
|||
|
|
Blockieren, wenn unklar:
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
Build-Methode
|
|||
|
|
Start Command
|
|||
|
|
interner Port
|
|||
|
|
0.0.0.0 Binding
|
|||
|
|
Env/Secret-Namen oder redacted Status
|
|||
|
|
Persistenz
|
|||
|
|
DB/Redis/Worker-Topologie
|
|||
|
|
Healthcheck
|
|||
|
|
Security-Risiko
|
|||
|
|
API-Fähigkeit
|
|||
|
|
Rollback bei Produktivsystem
|
|||
|
|
```
|