ci: trigger preprod pipeline

fix: initialize npm cache permissions in Jenkins
fix: correct Jenkinsfile pipeline syntax
2026-08-14 23:34:17 +00:00 · 2026-08-14 23:07:42 +00:00 · 2026-08-14 22:56:32 +00:00 · 2026-08-14 22:45:59 +00:00 · 2026-08-10 19:23:52 +00:00 · 2026-08-08 01:07:31 +00:00
7 changed files with 476 additions and 74 deletions
--- a/251
+++ b/251
@@ -8,16 +8,15 @@ pipeline {
    }

    environment {
-        CI_NETWORK = "tiptop-ci-${BUILD_NUMBER}"
-        CI_DATABASE = "tiptop-ci-db-${BUILD_NUMBER}"
-
-        DATABASE_URL = "postgresql://tiptop_ci:tiptop_ci_password@${CI_DATABASE}:5432/the_tip_top_ci"
-
-        REGISTRY = "localhost:5000"
-        IMAGE_TAG = "${BUILD_NUMBER}"
+        REGISTRY = "registry.wk-archi-o24a-4-5-g4.fr"

        BACKEND_IMAGE = "${REGISTRY}/the-tip-top/backend"
        FRONTEND_IMAGE = "${REGISTRY}/the-tip-top/frontend"
+
+        CI_NETWORK = "tiptop-ci-${JOB_BASE_NAME}-${BUILD_NUMBER}"
+        CI_DATABASE = "tiptop-ci-db-${JOB_BASE_NAME}-${BUILD_NUMBER}"
+
+        DATABASE_URL = "postgresql://tiptop_ci:tiptop_ci_password@${CI_DATABASE}:5432/the_tip_top_ci"
    }

    stages {
@@ -27,6 +26,69 @@ pipeline {
            }
        }

+        stage('Préparer environnement') {
+            steps {
+                script {
+                    env.IMAGE_TAG = "${env.BRANCH_NAME}-${env.BUILD_NUMBER}"
+
+                    /*
+                     * Stratégie de branches :
+                     *
+                     * feature/*  -> CI uniquement
+                     * develop    -> DEV automatique
+                     * release-*  -> PREPROD automatique
+                     * main       -> PROD avec validation manuelle
+                     */
+
+                    if (env.BRANCH_NAME == 'develop') {
+                        env.DEPLOY_ENABLED = 'true'
+                        env.DEPLOY_ENV = 'DEV'
+
+                        env.COMPOSE_FILE = 'deploy/dev/docker-compose.yml'
+                        env.COMPOSE_PROJECT = 'tiptop-dev'
+                        env.DEPLOY_NETWORK = 'tiptop-dev'
+
+                        env.FRONTEND_API_URL = "https://api-dev.dsp5-archi-o24a-4-5-g4.fr"
+
+                    } else if (env.BRANCH_NAME.startsWith('release-')) {
+                        env.DEPLOY_ENABLED = 'true'
+                        env.DEPLOY_ENV = 'PREPROD'
+
+                        env.COMPOSE_FILE = 'deploy/preprod/docker-compose.yml'
+                        env.COMPOSE_PROJECT = 'tiptop-preprod'
+                        env.DEPLOY_NETWORK = 'tiptop-preprod'
+
+                        env.FRONTEND_API_URL = "https://api-preprod.dsp5-archi-o24a-4-5-g4.fr"
+
+                    } else if (env.BRANCH_NAME == 'main') {
+                        env.DEPLOY_ENABLED = 'true'
+                        env.DEPLOY_ENV = 'PROD'
+
+                        env.COMPOSE_FILE = 'deploy/prod/docker-compose.yml'
+                        env.COMPOSE_PROJECT = 'tiptop-prod'
+                        env.DEPLOY_NETWORK = 'tiptop-prod'
+
+                        env.FRONTEND_API_URL = "https://api.dsp5-archi-o24a-4-5-g4.fr"
+
+                    } else {
+                        env.DEPLOY_ENABLED = 'false'
+                        env.DEPLOY_ENV = 'CI uniquement'
+
+                        env.COMPOSE_FILE = ''
+                        env.COMPOSE_PROJECT = ''
+                        env.DEPLOY_NETWORK = ''
+                        env.FRONTEND_API_URL = ''
+                    }
+
+                    echo "Branche            : ${env.BRANCH_NAME}"
+                    echo "Tag Docker         : ${env.IMAGE_TAG}"
+                    echo "Environnement      : ${env.DEPLOY_ENV}"
+                    echo "Déploiement activé : ${env.DEPLOY_ENABLED}"
+                    echo "API frontend       : ${env.FRONTEND_API_URL}"
+                }
+            }
+        }
+
        stage('Vérification du workspace') {
            steps {
                sh '''
@@ -34,9 +96,10 @@ pipeline {
                    test -f backend/package-lock.json
                    test -f frontend/package.json
                    test -f frontend/package-lock.json
-                    test -f deploy/dev/docker-compose.yml

-                    echo "Tag Docker : ${IMAGE_TAG}"
+                    if [ "${DEPLOY_ENABLED}" = "true" ]; then
+                      test -f "${COMPOSE_FILE}"
+                    fi
                '''
            }
        }
@@ -54,22 +117,30 @@ pipeline {
                      -e POSTGRES_DB=the_tip_top_ci \
                      postgres:16-alpine

-                    echo "Attente de PostgreSQL..."
+                    echo "Attente de PostgreSQL CI..."

                    for i in $(seq 1 30); do
                      if docker exec "${CI_DATABASE}" \
-                        pg_isready -U tiptop_ci -d the_tip_top_ci; then
-                        echo "PostgreSQL est prêt."
+                        pg_isready \
+                        -U tiptop_ci \
+                        -d the_tip_top_ci; then
+
+                        echo "PostgreSQL CI est prêt."
                        break
                      fi

                      if [ "$i" -eq 30 ]; then
+                        echo "PostgreSQL CI ne répond pas."
                        docker logs "${CI_DATABASE}"
                        exit 1
                      fi

                      sleep 2
                    done
+                    docker run --rm \
+  -v tiptop-npm-cache-backend:/npm-cache \
+  alpine \
+  sh -c 'chown -R 1000:1000 /npm-cache'

                    docker run --rm \
                      --network "${CI_NETWORK}" \
@@ -96,12 +167,32 @@ pipeline {
                      "
                '''
            }
+
+            post {
+                always {
+                    junit(
+                        testResults: 'backend/test-results/*.xml',
+                        allowEmptyResults: true
+                    )
+
+                    archiveArtifacts(
+                        artifacts: 'backend/coverage/**',
+                        fingerprint: true,
+                        allowEmptyArchive: true
+                    )
+                }
+            }
        }

        stage('Frontend - Lint et Build') {
            steps {
                sh '''
                    docker run --rm \
+  -v tiptop-npm-cache-frontend:/npm-cache \
+  alpine \
+  sh -c 'chown -R 1000:1000 /npm-cache'
+
+                    docker run --rm \
                      --volumes-from furious-jenkins \
                      -v tiptop-npm-cache-frontend:/npm-cache \
                      --user "$(id -u):$(id -g)" \
@@ -124,70 +215,122 @@ pipeline {
        }

        stage('Construction des images Docker') {
+            when {
+                expression {
+                    env.DEPLOY_ENABLED == 'true'
+                }
+            }
+
            steps {
                sh '''
                    docker build \
                      -t "${BACKEND_IMAGE}:${IMAGE_TAG}" \
-                      -t "${BACKEND_IMAGE}:latest" \
                      backend

                    docker build \
-                      --build-arg VITE_API_URL=http://192.168.1.23:5001 \
+                      --build-arg VITE_API_URL="${FRONTEND_API_URL}" \
                      -t "${FRONTEND_IMAGE}:${IMAGE_TAG}" \
-                      -t "${FRONTEND_IMAGE}:latest" \
                      frontend
                '''
            }
        }

        stage('Publication dans le Registry') {
-            steps {
-                sh '''
-                    docker push "${BACKEND_IMAGE}:${IMAGE_TAG}"
-                    docker push "${BACKEND_IMAGE}:latest"
+    when {
+        expression {
+            env.DEPLOY_ENABLED == 'true'
+        }
+    }

-                    docker push "${FRONTEND_IMAGE}:${IMAGE_TAG}"
-                    docker push "${FRONTEND_IMAGE}:latest"
-                '''
+    steps {
+        withCredentials([
+            usernamePassword(
+                credentialsId: 'registry-credentials',
+                usernameVariable: 'REGISTRY_USER',
+                passwordVariable: 'REGISTRY_PASSWORD'
+            )
+        ]) {
+            sh '''
+                echo "${REGISTRY_PASSWORD}" | \
+                  docker login "${REGISTRY}" \
+                  -u "${REGISTRY_USER}" \
+                  --password-stdin
+
+                docker push "${BACKEND_IMAGE}:${IMAGE_TAG}"
+                docker push "${FRONTEND_IMAGE}:${IMAGE_TAG}"
+            '''
+        }
+    }
+}
+
+
+        stage('Validation production') {
+            when {
+                expression {
+                    env.DEPLOY_ENV == 'PROD'
+                }
+            }
+
+            steps {
+                timeout(time: 15, unit: 'MINUTES') {
+                    input(
+                        message: "Déployer ${IMAGE_TAG} en production ?",
+                        ok: "Déployer"
+                    )
+                }
            }
        }

-       stage('Déploiement DEV') {
+        stage('Déploiement') {
+            when {
+                expression {
+                    env.DEPLOY_ENABLED == 'true'
+                }
+            }
+
            steps {
                sh '''
+                    echo "Déploiement de ${BRANCH_NAME} vers ${DEPLOY_ENV}"
+                    echo "Image backend  : ${BACKEND_IMAGE}:${IMAGE_TAG}"
+                    echo "Image frontend : ${FRONTEND_IMAGE}:${IMAGE_TAG}"
+                    echo "Compose        : ${COMPOSE_FILE}"
+
                    REGISTRY="${REGISTRY}" \
                    IMAGE_TAG="${IMAGE_TAG}" \
                    docker compose \
-                      -p tiptop-dev \
-                      -f deploy/dev/docker-compose.yml \
+                      -p "${COMPOSE_PROJECT}" \
+                      -f "${COMPOSE_FILE}" \
                      up -d \
                      --pull always \
                      --remove-orphans

-                    echo "Attente du backend DEV..."
+                    echo "Attente du backend ${DEPLOY_ENV}..."

                    for i in $(seq 1 30); do
                      if docker run --rm \
-                        --network tiptop-dev \
+                        --network "${DEPLOY_NETWORK}" \
                        curlimages/curl:8.12.1 \
-                        -fsS http://backend:5000/ >/dev/null; then
+                        -fsS \
+                        http://backend:5000/ \
+                        >/dev/null; then

-                        echo "Backend DEV opérationnel."
+                        echo "Backend ${DEPLOY_ENV} opérationnel."
                        break
                      fi

                      if [ "$i" -eq 30 ]; then
-                        echo "Le backend DEV ne répond pas."
+                        echo "Le backend ${DEPLOY_ENV} ne répond pas."

                        docker compose \
-                          -p tiptop-dev \
-                          -f deploy/dev/docker-compose.yml \
+                          -p "${COMPOSE_PROJECT}" \
+                          -f "${COMPOSE_FILE}" \
                          ps

                        docker compose \
-                          -p tiptop-dev \
-                          -f deploy/dev/docker-compose.yml \
-                          logs --tail=100
+                          -p "${COMPOSE_PROJECT}" \
+                          -f "${COMPOSE_FILE}" \
+                          logs \
+                          --tail=150

                        exit 1
                      fi
@@ -195,33 +338,47 @@ pipeline {
                      sleep 5
                    done

-                    echo "Vérification du frontend DEV..."
+                    echo "Vérification du frontend ${DEPLOY_ENV}..."

                    docker run --rm \
-                      --network tiptop-dev \
+                      --network "${DEPLOY_NETWORK}" \
                      curlimages/curl:8.12.1 \
-                      -fsS http://frontend/ >/dev/null
+                      -fsS \
+                      http://frontend/ \
+                      >/dev/null

-                    echo "Frontend DEV opérationnel."
+                    echo "Frontend ${DEPLOY_ENV} opérationnel."
                '''
            }
        }
    }

    post {
-        always {
-            sh '''
-                docker rm -f "${CI_DATABASE}" 2>/dev/null || true
-                docker network rm "${CI_NETWORK}" 2>/dev/null || true
-            '''
-        }
+    always {
+        sh '''
+            docker logout "${REGISTRY}" 2>/dev/null || true
+            docker rm -f "${CI_DATABASE}" 2>/dev/null || true
+            docker network rm "${CI_NETWORK}" 2>/dev/null || true
+        '''
+    }

        success {
-            echo "Pipeline CI/CD réussi. Version DEV déployée : ${IMAGE_TAG}"
+            echo """
+            Pipeline réussi.
+
+            Branche       : ${BRANCH_NAME}
+            Environnement : ${DEPLOY_ENV}
+            Version       : ${IMAGE_TAG}
+            """
        }

        failure {
-            echo "Pipeline CI/CD en échec. Consulte la Console Output."
+            echo """
+            Pipeline en échec.
+
+            Branche       : ${BRANCH_NAME}
+            Environnement : ${DEPLOY_ENV}
+            """
        }
    }
 }
--- a/backend/jest.config.js
+++ b/backend/jest.config.js
@@ -1,26 +1,33 @@
 module.exports = {
  testEnvironment: "node",

-  // Dossier des tests
  testMatch: ["**/tests/**/*.test.js"],

-  // Nettoyage des mocks entre les tests
  clearMocks: true,

-  // Timeout (utile pour Prisma / DB)
  testTimeout: 10000,

-  // Affichage des logs de test
-   verbose: true,
+  verbose: true,

-  // Couverture de code (optionnel mais bon pour soutenance)
  collectCoverage: true,
  coverageDirectory: "coverage",

+  coverageReporters: [
+    "text",
+    "lcov",
+    "html"
+  ],

-  // Fichiers à ignorer
-  testPathIgnorePatterns: ["/node_modules/"],
+  reporters: [
+    "default",
+    [
+      "jest-junit",
+      {
+        outputDirectory: "./test-results",
+        outputName: "junit.xml"
+      }
+    ]
+  ],

-    // Configuration pour Jest avec Supertest
-  //setupFilesAfterEnv: ["<rootDir>/tests/setup.js"]
+  testPathIgnorePatterns: ["/node_modules/"]
 };
--- a/backend/package-lock.json
+++ b/backend/package-lock.json
@@ -25,6 +25,7 @@
        "cross-env": "^10.1.0",
        "dotenv": "^17.4.2",
        "jest": "^30.4.2",
+        "jest-junit": "^17.0.0",
        "nodemon": "^3.1.14",
        "supertest": "^7.2.2"
      }
@@ -4457,6 +4458,22 @@
        "url": "https://github.com/sponsors/jonschlinkert"
      }
    },
+    "node_modules/jest-junit": {
+      "version": "17.0.0",
+      "resolved": "https://registry.npmjs.org/jest-junit/-/jest-junit-17.0.0.tgz",
+      "integrity": "sha512-RYWCkq4j59gUXj5DsgbIE7xFBZzu1gtibPhyjSjMmGaOTLnqlXhg7x9zuGCwgbCuMAyoyvk0Mi8wSrRR5uOeLA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "mkdirp": "^1.0.4",
+        "strip-ansi": "^6.0.1",
+        "uuid": "^14.0.0",
+        "xml": "^1.0.1"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
    "node_modules/jest-leak-detector": {
      "version": "30.4.1",
      "resolved": "https://registry.npmjs.org/jest-leak-detector/-/jest-leak-detector-30.4.1.tgz",
@@ -5375,6 +5392,19 @@
        "node": ">=16 || 14 >=14.17"
      }
    },
+    "node_modules/mkdirp": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz",
+      "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "mkdirp": "bin/cmd.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
    "node_modules/ms": {
      "version": "2.1.3",
      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
@@ -6836,6 +6866,20 @@
        "browserslist": ">= 4.21.0"
      }
    },
+    "node_modules/uuid": {
+      "version": "14.0.1",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-14.0.1.tgz",
+      "integrity": "sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==",
+      "dev": true,
+      "funding": [
+        "https://github.com/sponsors/broofa",
+        "https://github.com/sponsors/ctavan"
+      ],
+      "license": "MIT",
+      "bin": {
+        "uuid": "dist-node/bin/uuid"
+      }
+    },
    "node_modules/v8-to-istanbul": {
      "version": "9.3.0",
      "resolved": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz",
@@ -6942,6 +6986,13 @@
        "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
      }
    },
+    "node_modules/xml": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/xml/-/xml-1.0.1.tgz",
+      "integrity": "sha512-huCv9IH9Tcf95zuYCsQraZtWnJvBtLVE0QHMOs8bWyZAFZNDcYjsPq1nEx8jKA9y+Beo9v+7OBPRisQTjinQMw==",
+      "dev": true,
+      "license": "MIT"
+    },
    "node_modules/y18n": {
      "version": "5.0.8",
      "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz",
--- a/backend/package.json
+++ b/backend/package.json
@@ -32,6 +32,7 @@
    "cross-env": "^10.1.0",
    "dotenv": "^17.4.2",
    "jest": "^30.4.2",
+    "jest-junit": "^17.0.0",
    "nodemon": "^3.1.14",
    "supertest": "^7.2.2"
  },
--- a/deploy/dev/docker-compose.yml
+++ b/deploy/dev/docker-compose.yml
@@ -9,7 +9,7 @@ services:
      POSTGRES_DB: the_tip_top_db

    volumes:
-      - tiptop_postgres_dev_data:/var/lib/postgresql/data
+      - tiptop_dev_postgres_data:/var/lib/postgresql/data

    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U tiptop -d the_tip_top_db"]
@@ -30,14 +30,10 @@ services:

    environment:
      PORT: 5000
+      NODE_ENV: development
      DATABASE_URL: postgresql://tiptop:tiptop_dev_password@postgres:5432/the_tip_top_db
      JWT_SECRET: dev_secret_change_me
-      APP_URL: http://192.168.1.23:5001
-      MAIL_HOST: smtp.gmail.com
-      MAIL_PORT: 587
-      MAIL_USER: ""
-      MAIL_PASS: ""
-      MAIL_FROM: "The Tip Top <no-reply@tiptop.local>"
+      APP_URL: https://api-dev.dsp5-archi-o24a-4-5-g4.fr

    command: >
      sh -c "
@@ -46,11 +42,18 @@ services:
      npm start
      "

-    ports:
-      - "5001:5000"
-
    networks:
      - tiptop-dev
+      - proxy
+
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.tiptop-dev-api.rule=Host(`api-dev.dsp5-archi-o24a-4-5-g4.fr`)"
+      - "traefik.http.routers.tiptop-dev-api.entrypoints=websecure"
+      - "traefik.http.routers.tiptop-dev-api.tls=true"
+      - "traefik.http.routers.tiptop-dev-api.tls.certresolver=letsencrypt"
+      - "traefik.http.services.tiptop-dev-api.loadbalancer.server.port=5000"

  frontend:
    image: ${REGISTRY}/the-tip-top/frontend:${IMAGE_TAG}
@@ -59,17 +62,26 @@ services:
    depends_on:
      - backend

-    ports:
-      - "5173:80"
-
    networks:
      - tiptop-dev
+      - proxy
+
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.tiptop-dev.rule=Host(`dev.dsp5-archi-o24a-4-5-g4.fr`)"
+      - "traefik.http.routers.tiptop-dev.entrypoints=websecure"
+      - "traefik.http.routers.tiptop-dev.tls=true"
+      - "traefik.http.routers.tiptop-dev.tls.certresolver=letsencrypt"
+      - "traefik.http.services.tiptop-dev.loadbalancer.server.port=80"

 volumes:
-  tiptop_postgres_dev_data:
-    external: true
-    name: the-tip-top_tiptop_postgres_dev_data
+  tiptop_dev_postgres_data:
+    name: tiptop_dev_postgres_data

 networks:
  tiptop-dev:
    name: tiptop-dev
+
+  proxy:
+    external: true
--- a/deploy/preprod/docker-compose.yml
+++ b/deploy/preprod/docker-compose.yml
@@ -0,0 +1,87 @@
+services:
+  postgres:
+    image: postgres:16-alpine
+    restart: unless-stopped
+
+    environment:
+      POSTGRES_USER: tiptop_preprod
+      POSTGRES_PASSWORD: tiptop_preprod_password
+      POSTGRES_DB: the_tip_top_preprod
+
+    volumes:
+      - tiptop_preprod_postgres_data:/var/lib/postgresql/data
+
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U tiptop_preprod -d the_tip_top_preprod"]
+      interval: 10s
+      timeout: 5s
+      retries: 10
+
+    networks:
+      - tiptop-preprod
+
+  backend:
+    image: ${REGISTRY}/the-tip-top/backend:${IMAGE_TAG}
+    restart: unless-stopped
+
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+    environment:
+      PORT: 5000
+      NODE_ENV: preproduction
+      DATABASE_URL: postgresql://tiptop_preprod:tiptop_preprod_password@postgres:5432/the_tip_top_preprod
+      JWT_SECRET: preprod_secret_change_me
+      APP_URL: https://api-preprod.dsp5-archi-o24a-4-5-g4.fr
+
+    command: >
+      sh -c "
+      npx prisma migrate deploy &&
+      npm run init:db &&
+      npm start
+      "
+
+    networks:
+      - tiptop-preprod
+      - proxy
+
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.tiptop-preprod-api.rule=Host(`api-preprod.dsp5-archi-o24a-4-5-g4.fr`)"
+      - "traefik.http.routers.tiptop-preprod-api.entrypoints=websecure"
+      - "traefik.http.routers.tiptop-preprod-api.tls=true"
+      - "traefik.http.routers.tiptop-preprod-api.tls.certresolver=letsencrypt"
+      - "traefik.http.services.tiptop-preprod-api.loadbalancer.server.port=5000"
+
+  frontend:
+    image: ${REGISTRY}/the-tip-top/frontend:${IMAGE_TAG}
+    restart: unless-stopped
+
+    depends_on:
+      - backend
+
+    networks:
+      - tiptop-preprod
+      - proxy
+
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.tiptop-preprod.rule=Host(`preprod.dsp5-archi-o24a-4-5-g4.fr`)"
+      - "traefik.http.routers.tiptop-preprod.entrypoints=websecure"
+      - "traefik.http.routers.tiptop-preprod.tls=true"
+      - "traefik.http.routers.tiptop-preprod.tls.certresolver=letsencrypt"
+      - "traefik.http.services.tiptop-preprod.loadbalancer.server.port=80"
+
+volumes:
+  tiptop_preprod_postgres_data:
+    name: tiptop_preprod_postgres_data
+
+networks:
+  tiptop-preprod:
+    name: tiptop-preprod
+
+  proxy:
+    external: true
--- a/deploy/prod/docker-compose.yml
+++ b/deploy/prod/docker-compose.yml
@@ -0,0 +1,87 @@
+services:
+  postgres:
+    image: postgres:16-alpine
+    restart: unless-stopped
+
+    environment:
+      POSTGRES_USER: tiptop_prod
+      POSTGRES_PASSWORD: tiptop_prod_password
+      POSTGRES_DB: the_tip_top_prod
+
+    volumes:
+      - tiptop_prod_postgres_data:/var/lib/postgresql/data
+
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U tiptop_prod -d the_tip_top_prod"]
+      interval: 10s
+      timeout: 5s
+      retries: 10
+
+    networks:
+      - tiptop-prod
+
+  backend:
+    image: ${REGISTRY}/the-tip-top/backend:${IMAGE_TAG}
+    restart: unless-stopped
+
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+    environment:
+      PORT: 5000
+      NODE_ENV: production
+      DATABASE_URL: postgresql://tiptop_prod:tiptop_prod_password@postgres:5432/the_tip_top_prod
+      JWT_SECRET: prod_secret_change_me
+      APP_URL: https://api.dsp5-archi-o24a-4-5-g4.fr
+
+    command: >
+      sh -c "
+      npx prisma migrate deploy &&
+      npm run init:db &&
+      npm start
+      "
+
+    networks:
+      - tiptop-prod
+      - proxy
+
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.tiptop-prod-api.rule=Host(`api.dsp5-archi-o24a-4-5-g4.fr`)"
+      - "traefik.http.routers.tiptop-prod-api.entrypoints=websecure"
+      - "traefik.http.routers.tiptop-prod-api.tls=true"
+      - "traefik.http.routers.tiptop-prod-api.tls.certresolver=letsencrypt"
+      - "traefik.http.services.tiptop-prod-api.loadbalancer.server.port=5000"
+
+  frontend:
+    image: ${REGISTRY}/the-tip-top/frontend:${IMAGE_TAG}
+    restart: unless-stopped
+
+    depends_on:
+      - backend
+
+    networks:
+      - tiptop-prod
+      - proxy
+
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.tiptop-prod.rule=Host(`dsp5-archi-o24a-4-5-g4.fr`) || Host(`www.dsp5-archi-o24a-4-5-g4.fr`)"
+      - "traefik.http.routers.tiptop-prod.entrypoints=websecure"
+      - "traefik.http.routers.tiptop-prod.tls=true"
+      - "traefik.http.routers.tiptop-prod.tls.certresolver=letsencrypt"
+      - "traefik.http.services.tiptop-prod.loadbalancer.server.port=80"
+
+volumes:
+  tiptop_prod_postgres_data:
+    name: tiptop_prod_postgres_data
+
+networks:
+  tiptop-prod:
+    name: tiptop-prod
+
+  proxy:
+    external: true
Author	SHA1	Message	Date
Andil	02cf98f6ca	ci: trigger preprod pipeline All checks were successful Tests / Backend - Tests passed: 8 Details THE-TIP-TOP-MULTIBRANCH/pipeline/head This commit looks good Details	2026-08-14 23:34:17 +00:00
Andil	825fedf118	fix: initialize npm cache permissions in Jenkins All checks were successful Tests / Backend - Tests passed: 8 Details THE-TIP-TOP-MULTIBRANCH/pipeline/head This commit looks good Details	2026-08-14 23:07:42 +00:00
Andil	61296dda0c	fix: correct Jenkinsfile pipeline syntax Some checks failed Tests / Backend - Tests No test results found Details THE-TIP-TOP-MULTIBRANCH/pipeline/head There was a failure building this commit Details	2026-08-14 22:56:32 +00:00
Andil	2bbd2d16e4	ci: migrate deployments to VPS HTTPS infrastructure Some checks failed THE-TIP-TOP-MULTIBRANCH/pipeline/head There was a failure building this commit Details	2026-08-14 22:45:59 +00:00
Andil	b15d8458c8	refactor: centralize server IP configuration All checks were successful Tests / Backend - Tests passed: 8 Details THE-TIP-TOP-MULTIBRANCH/pipeline/head This commit looks good Details	2026-08-10 19:23:52 +00:00
Andil	100b75a05a	ci: publish JUnit and coverage reports All checks were successful Tests / Backend - Tests passed: 8 Details THE-TIP-TOP-MULTIBRANCH/pipeline/head This commit looks good Details	2026-08-08 01:07:31 +00:00
Andil	d57b26c8c8	test: generate JUnit reports for Jenkins All checks were successful THE-TIP-TOP-MULTIBRANCH/pipeline/head This commit looks good Details	2026-08-08 00:24:43 +00:00
Andil	803a78cd71	refactor: align branches with dev preprod and production Some checks failed THE-TIP-TOP-MULTIBRANCH/pipeline/head There was a failure building this commit Details	2026-08-04 20:43:14 +00:00
Andil	466655f52d	feat: add production deployment flow All checks were successful THE-TIP-TOP-MULTIBRANCH/pipeline/head This commit looks good Details	2026-08-04 17:54:09 +00:00
Andil	ac702c8835	feat: route branches to dev and preproduction All checks were successful THE-TIP-TOP-MULTIBRANCH/pipeline/head This commit looks good Details	2026-08-04 16:13:53 +00:00
Andil	92dfcbe61e	feat: add preproduction environment All checks were successful THE-TIP-TOP-MULTIBRANCH/pipeline/head This commit looks good Details	2026-08-04 16:01:02 +00:00