melhorando setup do docker

.dockerignore

@@ -0,0 +1,37 @@
+# Version control
+.git
+.github
+
+# Secrets / local data
+.env
+.env.example
+db.sqlite3
+
+# Local virtualenv
+venv
+.venv
+env
+ENV
+
+# Python artifacts
+__pycache__
+*.py[cod]
+*.egg-info
+.pytest_cache
+.ruff_cache
+.mypy_cache
+.coverage
+htmlcov
+
+# User-uploaded content (mounted as a volume at runtime)
+media
+
+# Editor / tooling
+.idea
+.vscode
+.pre-commit-config.yaml
+
+# Docs, not needed at runtime
+docs
+README.md
+LICENSE

.github/workflows/main.yml

@@ -96,13 +96,10 @@ jobs:
         run: |
           mkdir -p ~/.ssh
           ssh-keyscan -H ${{ secrets.SERVER_DEV }} >> ~/.ssh/known_hosts
-      - name: Deploy code via rsync
+      - name: Sync compose.yaml to server
         run: |
-          rsync -az --delete \
-            --exclude=".git" \
-            --exclude=".github" \
-            --exclude=".env" \
-            ./ ${{ secrets.SERVER_USER_DEV }}@${{ secrets.SERVER_DEV }}:${{ secrets.LOCATION_DEV }}
+          rsync -az compose.yaml \
+            ${{ secrets.SERVER_USER_DEV }}@${{ secrets.SERVER_DEV }}:${{ secrets.LOCATION_DEV }}/compose.yaml
       - name: Pull image and restart Docker Compose
         run: |
           ssh ${{ secrets.SERVER_USER_DEV }}@${{ secrets.SERVER_DEV }} << 'EOF'
@@ -130,13 +127,10 @@ jobs:
         run: |
           mkdir -p ~/.ssh
           ssh-keyscan -H ${{ secrets.SERVER }} >> ~/.ssh/known_hosts
-      - name: Deploy code via rsync
+      - name: Sync compose.yaml to server
         run: |
-          rsync -az --delete \
-            --exclude=".git" \
-            --exclude=".github" \
-            --exclude=".env" \
-            ./ ${{ secrets.SERVER_USER }}@${{ secrets.SERVER }}:${{ secrets.LOCATION }}
+          rsync -az compose.yaml \
+            ${{ secrets.SERVER_USER }}@${{ secrets.SERVER }}:${{ secrets.LOCATION }}/compose.yaml
       - name: Pull image and restart Docker Compose
         run: |
           ssh ${{ secrets.SERVER_USER }}@${{ secrets.SERVER }} << 'EOF'

compose.yaml

@@ -18,15 +18,8 @@ services:
       - ${SERVER_STATIC_ROOT}:/app/staticfiles
       - ${SERVER_MEDIA_ROOT}:/app/media
       - ${SOCKET_DIR}:/run/sockets
-    environment:
-      - DEBUG=${DEBUG}
-      - SECRET_KEY=${SECRET_KEY}
-      - DB_NAME=${DB_NAME}
-      - DB_USER=${DB_USER}
-      - DB_PASSWORD=${DB_PASSWORD}
-      - DB_HOST=${DB_HOST}
-      - DB_PORT=${DB_PORT}
-      - ALLOWED_HOSTS=${ALLOWED_HOSTS}
+    env_file:
+      - .env
     depends_on:
       - db
     restart: unless-stopped