iklim.co/Environment_Infrastructure
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Environment_Infrastructure/setup-vs-roadmap-map.md
Murat ÖZDEMİR 81c38e8d39 initial commit
2026-05-09 16:26:06 +03:00

4.6 KiB
Raw Blame History

Setup Aşamaları — Roadmap Eşleştirme Tablosu

Bu tablo, roadmap/test-env ve roadmap/prod-env klasörlerindeki yol haritası adımlarının Terraform/Ansible setup aşamalarından hangisinde ele alındığını gösterir.

TEST ortamı

Roadmap adımı Hangi aşamada ele alınmalı
Hetzner firewall (sadece 22/80/443) Terraform 01-test-terraform-iaac.md — firewall.tf
Sunucu oluşturma (test-swarm-01, test-db-01) Terraform 01-test-terraform-iaac.md — servers.tf
Private network + placement group Terraform 01-test-terraform-iaac.md — network.tf, placement.tf
Docker Engine kurulumu Ansible 02-test-ansible-bootstrap.md — docker role
Security hardening (SSH, UFW, fail2ban) Ansible 02-test-ansible-bootstrap.md — hardening role
Docker Swarm init (init/swarm-init.sh) Ansible 02-test-ansible-bootstrap.md — swarm role (pipeline script idempotent çalışmaya devam eder)
type=service node label Ansible 02-test-ansible-bootstrap.md — swarm role
/opt/iklimco/... dizinleri Ansible 02-test-ansible-bootstrap.md — node_dirs role
act_runner systemd kurulumu Ansible 03-test-runner-ve-deploy-onkosullari.md — gitea_runner role
GoDaddy credentials storagebox'a yükleme Manuel kalır — secret yönetimi, Terraform/Ansible dışı

PROD ortamı

Roadmap adımı Hangi aşamada ele alınmalı
6 sunucu oluşturma (3 swarm + 3 db) Terraform 04-prod-terraform-iaac.md — servers.tf
Private network + 2 placement group Terraform 04-prod-terraform-iaac.md — network.tf, placement.tf
Firewall (sadece 22/80/443 public) Terraform 04-prod-terraform-iaac.md — firewall.tf
Docker Engine kurulumu (prod-swarm-*) Ansible 05-prod-ansible-bootstrap.md — docker role
Security hardening (tüm node'lar) Ansible 05-prod-ansible-bootstrap.md — hardening role
Swarm init (prod-swarm-01) Ansible 05-prod-ansible-bootstrap.md — swarm role
Manager join (prod-swarm-02, prod-swarm-03) Ansible 05-prod-ansible-bootstrap.md — swarm role
type=service node label (3 swarm node) Ansible 05-prod-ansible-bootstrap.md — swarm role
/opt/iklimco/... dizinleri Ansible 05-prod-ansible-bootstrap.md — node_dirs role
3× act_runner systemd (HA runner) Ansible 06-prod-runner-ha-ve-swarm.md — gitea_runner role
GoDaddy credentials storagebox'a yükleme Manuel kalır — secret yönetimi, Terraform/Ansible dışı
DB node'ları Swarm'a join Kapsam dışı — DB cluster ayrı yönetilir

Klasör yapısı

Environment_Infrastructure/
  setup/                         ← Terraform + Ansible aşama dokümanları
    00-genel-yol-haritasi.md
    01-test-terraform-iaac.md
    02-test-ansible-bootstrap.md
    03-test-runner-ve-deploy-onkosullari.md
    04-prod-terraform-iaac.md
    05-prod-ansible-bootstrap.md
    06-prod-runner-ha-ve-swarm.md
    07-private-network-port-matrisi.md
roadmap/
    test-env/                    ← Test ortamı Roadmap adımları
    prod-env/                    ← Prod Roadmap adımları
  setup-vs-technical-debt-map.md ← Bu dosya