DONE: add cicd pipeline separate fe and be, test first on gitea

be/docker/production/docker-compose.production.yml

@@ -1,16 +1,10 @@
 services:
-  app:
-    build:
-      context: .
-      dockerfile: ./be/docker/common/unified/Dockerfile
-      platforms:
-        - linux/amd64
-        - linux/arm64
-    image: git.ismailmasseran.com/topaz/sutera:v3.0.1b
-    container_name: sutera-app-production
+  backend:
+    image: git.koppkb.com/KoPKB/My-KOPKB-be:${IMAGE_TAG:-latest}
+    container_name: mykopkb-be-production
     restart: unless-stopped
     ports:
-      - "${APP_PORT:-80}:80"
+      - "${API_PORT:-8080}:80"
     environment:
       - APP_ENV=production
       - APP_DEBUG=true
@@ -23,9 +17,9 @@ services:
       - app-storage-production:/var/www/storage
       - app-logs-production:/var/www/storage/logs
       - ./.env.production:/var/www/.env:ro
-      - ./be/docker/production/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
+      - ${NGINX_CONF:-./be/docker/production/nginx/nginx.conf}:/etc/nginx/nginx.conf:ro
     networks:
-      - sutera-production-network
+      - mykopkb-production-network
     depends_on:
       redis:
         condition: service_healthy
@@ -41,17 +35,36 @@ services:
         max-size: "10m"
         max-file: "3"
 
-  # Redis for caching and sessions
+  frontend:
+    image: git.koppkb.com/KoPKB/My-KOPKB-fe:${IMAGE_TAG:-latest}
+    container_name: mykopkb-fe-production
+    restart: unless-stopped
+    ports:
+      - "${FE_PORT:-8081}:80"
+    networks:
+      - mykopkb-production-network
+    healthcheck:
+      test: ["CMD", "wget", "-q", "--spider", "http://localhost/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
+
   redis:
     image: redis:8
-    container_name: sutera-redis-production
+    container_name: mykopkb-redis-production
     restart: unless-stopped
     volumes:
       - redis-data-production:/data
       - ./redis-config/redis.conf:/usr/local/etc/redis/redis.conf:ro
     command: redis-server /usr/local/etc/redis/redis.conf
     networks:
-      - sutera-production-network
+      - mykopkb-production-network
     healthcheck:
       test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
       interval: 10s
@@ -65,7 +78,7 @@ services:
         max-file: "3"
 
 networks:
-  sutera-production-network:
+  mykopkb-production-network:
     driver: bridge
 
 volumes:

be/docker/production/nginx/nginx.conf

@@ -9,74 +9,40 @@ http {
     sendfile        on;
     keepalive_timeout  65;
 
-    # Logging
     access_log /var/log/nginx/access.log;
     error_log /var/log/nginx/error.log;
 
-    # Production HTTP server
+    # API-only server (api.koppkb.com via host reverse proxy)
     server {
         listen 80;
         server_name _;
         root /var/www/public;
-        index index.php index.html;
+        index index.php;
 
-        # Security headers
         add_header X-Frame-Options "SAMEORIGIN" always;
         add_header X-XSS-Protection "1; mode=block" always;
         add_header X-Content-Type-Options "nosniff" always;
         add_header Referrer-Policy "no-referrer-when-downgrade" always;
 
-        # API routes - pass directly to Laravel with original REQUEST_URI
         location / {
-            fastcgi_pass 127.0.0.1:9000;
-            fastcgi_index index.php;
-            fastcgi_param SCRIPT_FILENAME $document_root/index.php;
-            include fastcgi_params;
-            fastcgi_param HTTP_PROXY "";
-            fastcgi_param HTTPS $https if_not_empty;
-            fastcgi_read_timeout 300;
-            fastcgi_send_timeout 300;
+            try_files $uri $uri/ /index.php?$query_string;
         }
 
-        # PRODUCTION: /training/ path is disabled - return 404
-        location ^~ /training/ {
-            return 404;
-        }
-
-        # Serve frontend assets
-        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
-            expires 1y;
-            add_header Cache-Control "public, immutable";
-            add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
-            try_files $uri =404;
-        }
-
-        # Handle all other routes - serve Vue app or Laravel
-        location / {
-            add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
-            try_files $uri $uri/ /index.html /index.php?$query_string;
-        }
-
-        # Handle PHP files - connect to localhost PHP-FPM
         location ~ \.php$ {
             fastcgi_pass 127.0.0.1:9000;
             fastcgi_index index.php;
             fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
             include fastcgi_params;
-            
-            # Additional FastCGI parameters
             fastcgi_param HTTP_PROXY "";
             fastcgi_param HTTPS $https if_not_empty;
             fastcgi_read_timeout 300;
             fastcgi_send_timeout 300;
         }
 
-        # Deny access to hidden files
         location ~ /\. {
             deny all;
         }
 
-        # Health check endpoint for Docker
         location = /health {
             fastcgi_pass 127.0.0.1:9000;
             fastcgi_index index.php;