UniWebPlatform

Introduction

A full stack web application for my personal website containing:

1. AI Chat
2. Markdown Blogs
3. Editable Bookmark
4. Password Generator
5. Image Generator

Tech Stack

Front End
  - Node.JS
    - React.JS
      - Next.JS
      - Tailwind CSS
      - MUI

Back End
  - Node.JS
    - Nest.JS
  - Python
    - FastAPI

Storage
  - MySQL
  - MinIO

Infrastructure
  - Linux (Debian 12)
    - Kubernetes (K3S)

DevOps
  - GitHub Actions

Live Demo

https://www.windsnow1025.com

Setup

Prepare Environment

1. Copy ./app-secret.example.yaml to ./app-secret.example.yaml, modify value for each key.
2. Copy ./dashboard/dashboard-secret.copy.yaml to ./dashboard/dashboard-secret.yaml.

Debian Production

Log in as root user

Set Config and Environment

1. Compress ./kubernetes to ./kubernetes.zip
2. Run

   mkdir /root/kubernetes

3. Upload ./kubernetes.zip to /root/kubernetes/
4. Run

   apt update
   apt install unzip

   cd /root/kubernetes
   unzip kubernetes.zip
   rm kubernetes.zip
   mv kubernetes UniWebPlatform

Install K3S

1. Prerequisites (WSL2)

   apt install curl iptables

   sudo swapoff -a

   /usr/local/bin/k3s-uninstall.sh

2. Install K3S

   curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="--service-node-port-range=30000-39001 --disable=traefik" sh -

3. Verify Installation

   sudo k3s kubectl get node

4. Copy Kubernetes Config

   cp /etc/rancher/k3s/k3s.yaml ~/.kube/config

Kubernetes Dashboard

1. Install Dependencies

   apt install gpg

2. Debian Install Helm

   curl https://baltocdn.com/helm/signing.asc | gpg --dearmor | sudo tee /usr/share/keyrings/helm.gpg > /dev/null
   sudo apt-get install apt-transport-https --yes
   echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/helm.gpg] https://baltocdn.com/helm/stable/debian/ all main" | sudo tee /etc/apt/sources.list.d/helm-stable-debian.list
   sudo apt-get update
   sudo apt-get install helm

3. Deploy Dashboard

   # Add kubernetes-dashboard repository
   helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
   # Deploy a Helm Release named "kubernetes-dashboard" using the kubernetes-dashboard chart
   helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

4. Remote Access (NodePort)

   kubectl apply -f ./dashboard/dashboard-service.yaml

   Test: curl -k https://localhost:38443

5. Create admin-user

   kubectl apply -f ./dashboard/dashboard-serviceaccount.yaml
   kubectl apply -f ./dashboard/dashboard-clusterrolebinding.yaml
   kubectl apply -f ./dashboard/dashboard-secret.yaml

6. Get a long-lived Bearer Token

   kubectl get secret admin-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d

Apply Custom Configs

See ./app-command.md

Nginx (Optional)

HTTP Block:

server {

	server_name <domain_name>;

	client_max_body_size 100M;

    location / {
        proxy_pass http://localhost:30080/;
        
        proxy_buffering off;
        proxy_request_buffering off;

        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Port $server_port;
        proxy_set_header X-Forwarded-Host $host;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    location /kubernetes/ {
        proxy_pass https://localhost:38443/;

        proxy_ssl_verify off;

        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Port $server_port;
        proxy_set_header X-Forwarded-Host $host;
    }
}

Stream Block:

stream {
    server {
        listen 3306;
        proxy_pass localhost:33306;
    }
}

Usage

• Main: http://localhost:30080/
• MinIO: http://localhost:30080/minio/ui/
• Kubernetes Dashboard: https://localhost:38443/

Development

Windows Develop Environment

1. Setup and run MySQL and MinIO natively / by Docker / by K3S.
2. Setup and run Next, Nest, FastAPI separately by JetBrains IDE according to their documentations.

Windows Production Environment

1. Install WSL2 Debian
2. Enable systemd
   1. Edit config

       vi /etc/wsl.conf

   2. Add

      [boot]
      systemd=true
      

   3. Restart WSL2

      wsl --shutdown

   4. Check WSL2 IP

      ip addr show eth0 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'

3. Follow the Debian Production steps

CI/CD

GitHub >> Repository >> Settings >> Security >> Secrets and variables >> Actions >> Repository secrets: add

• DOCKERHUB_TOKEN
• DOCKERHUB_USERNAME

Make Contributions

Step 1,2,3 should be done by contributors; Step 4,5 should be done by repo owner.

1. Create a new branch based on main
2. Commit to the new branch
3. Open a pull request from the new branch
4. Merge the pull request, wait for automatic test to pass and docker push to finish
5. Dispatch workflow for automatic deployment