feat(deploy): add VPS compose deployment workflow

Co-authored-by: claw <stanislavkalishin+claw@gmail.com>

deploy/vps/Caddyfile

@@ -0,0 +1,9 @@
+{$BOT_DOMAIN} {
+  encode zstd gzip
+  reverse_proxy bot:8080
+}
+
+{$MINIAPP_DOMAIN} {
+  encode zstd gzip
+  reverse_proxy miniapp:8080
+}

deploy/vps/bot.env.example

@@ -0,0 +1,39 @@
+NODE_ENV=production
+LOG_LEVEL=info
+PORT=8080
+
+DATABASE_URL=postgres://...
+DB_SCHEMA=public
+
+TELEGRAM_BOT_TOKEN=...
+TELEGRAM_WEBHOOK_SECRET=...
+TELEGRAM_WEBHOOK_PATH=/webhook/telegram
+
+MINI_APP_URL=https://household.whekin.dev
+MINI_APP_ALLOWED_ORIGINS=https://household.whekin.dev
+
+OPENAI_API_KEY=
+PURCHASE_PARSER_MODEL=gpt-4o-mini
+ASSISTANT_MODEL=gpt-4o-mini
+TOPIC_PROCESSOR_MODEL=gpt-4o-mini
+TOPIC_PROCESSOR_TIMEOUT_MS=10000
+ASSISTANT_TIMEOUT_MS=20000
+ASSISTANT_MEMORY_MAX_TURNS=12
+ASSISTANT_RATE_LIMIT_BURST=5
+ASSISTANT_RATE_LIMIT_BURST_WINDOW_MS=60000
+ASSISTANT_RATE_LIMIT_ROLLING=50
+ASSISTANT_RATE_LIMIT_ROLLING_WINDOW_MS=86400000
+
+SCHEDULER_SHARED_SECRET=replace-with-random-secret
+SCHEDULED_DISPATCH_PROVIDER=self-hosted
+
+# Keep for cloud compatibility / fallback.
+SCHEDULER_OIDC_ALLOWED_EMAILS=
+SCHEDULED_DISPATCH_PUBLIC_BASE_URL=
+GCP_SCHEDULED_DISPATCH_PROJECT_ID=
+GCP_SCHEDULED_DISPATCH_LOCATION=
+GCP_SCHEDULED_DISPATCH_QUEUE=
+AWS_SCHEDULED_DISPATCH_REGION=
+AWS_SCHEDULED_DISPATCH_TARGET_LAMBDA_ARN=
+AWS_SCHEDULED_DISPATCH_ROLE_ARN=
+AWS_SCHEDULED_DISPATCH_GROUP_NAME=

deploy/vps/caddy.env.example

@@ -0,0 +1,2 @@
+BOT_DOMAIN=household-bot.whekin.dev
+MINIAPP_DOMAIN=household.whekin.dev

deploy/vps/compose.yml

@@ -0,0 +1,65 @@
+services:
+  bot:
+    image: ${BOT_IMAGE:?set BOT_IMAGE}
+    restart: unless-stopped
+    env_file:
+      - ${ENV_DIR:-/opt/household-bot/env}/bot.env
+    healthcheck:
+      test: ['CMD', 'bun', '-e', "fetch('http://127.0.0.1:' + (process.env.PORT ?? '8080') + '/healthz').then((res) => process.exit(res.ok ? 0 : 1)).catch(() => process.exit(1))"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
+
+  miniapp:
+    image: ${MINIAPP_IMAGE:?set MINIAPP_IMAGE}
+    restart: unless-stopped
+    env_file:
+      - ${ENV_DIR:-/opt/household-bot/env}/miniapp.env
+    depends_on:
+      bot:
+        condition: service_healthy
+
+  scheduler:
+    image: ${BOT_IMAGE:?set BOT_IMAGE}
+    restart: unless-stopped
+    command: ['bun', 'apps/bot/dist/scheduler-runner.js']
+    env_file:
+      - ${ENV_DIR:-/opt/household-bot/env}/bot.env
+    environment:
+      BOT_INTERNAL_BASE_URL: http://bot:8080
+      SCHEDULER_POLL_INTERVAL_MS: ${SCHEDULER_POLL_INTERVAL_MS:-60000}
+      SCHEDULER_DUE_SCAN_LIMIT: ${SCHEDULER_DUE_SCAN_LIMIT:-25}
+    depends_on:
+      bot:
+        condition: service_healthy
+
+  migrate:
+    image: ${BOT_IMAGE:?set BOT_IMAGE}
+    profiles: ['ops']
+    env_file:
+      - ${ENV_DIR:-/opt/household-bot/env}/bot.env
+    command: ['bun', 'packages/db/dist/migrate.js']
+    restart: 'no'
+
+  caddy:
+    image: caddy:2.8-alpine
+    restart: unless-stopped
+    env_file:
+      - ${ENV_DIR:-/opt/household-bot/env}/caddy.env
+    depends_on:
+      bot:
+        condition: service_healthy
+      miniapp:
+        condition: service_started
+    ports:
+      - '80:80'
+      - '443:443'
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - caddy_data:/data
+      - caddy_config:/config
+
+volumes:
+  caddy_data:
+  caddy_config:

deploy/vps/miniapp.env.example

@@ -0,0 +1 @@
+BOT_API_URL=https://household-bot.whekin.dev