f3fb3fd565
Backend production infra:
- Packages: Serilog.Sinks.File, HealthChecks.EntityFrameworkCore (RateLimiting built-in .NET 10)
- appsettings.Production.json MOI: placeholder __SET_VIA_SECRETS__, AllowedOrigins, Serilog File sink rolling daily retention 30d, RateLimit config
- appsettings.json + Development.json: them Serilog WriteTo Console
- Program.cs REWRITE:
- Serilog ReadFrom.Configuration (prod file / dev console)
- Rate limiter: policy auth-login 5/min/IP (AuthController.Login) + GlobalLimiter 300/min/IP
- Health checks: /health/live liveness (empty predicate) + /health/ready DB probe (AddDbContextCheck)
- HSTS production 1 year
- CORS origins from config AllowedOrigins (default dev 2 localhost)
- AuthController.Login gắn [EnableRateLimiting("auth-login")]
Deploy scripts:
- scripts/deploy-iis.ps1: stop pool → backup current → clean+extract artifact → start pool → health check loop 30s timeout → rollback instruction if fail
- scripts/backup-sql.ps1: BACKUP DATABASE voi INIT+COMPRESSION+CHECKSUM + retention 30d auto cleanup
- .gitea/workflows/deploy.yml MOI: 4 job build BE (Windows) + build 2 FE (Ubuntu, pin .nvmrc 20) + deploy-iis qua WinRM PSSession (secrets IIS_HOST/USER/PASSWORD/JWT_SECRET/DB_CONNECTION)
Docs guides MOI (4 file):
- deployment-iis.md: prereqs (IIS features, Hosting Bundle, SQL, WinRM) + setup lan dau (app pool, 3 site, HTTPS win-acme, user-secrets) + deploy hang ngay (CI/CD + manual) + rollback + monitoring + troubleshooting + SPA web.config sample
- cicd.md: pipeline overview 4 job, secrets setup, runner Windows+Ubuntu, branch strategy, build optimizations, common CI/CD issues
- security-checklist.md: OWASP top 10 2021 mapping voi status + pre go-live checklist + incident response
- runbook.md: daily ops (health/logs), restart/rollback, DB backup/restore/migration revert, user management (reset password, unlock, disable), monitoring (CPU/disk/connection pool), deployment checklist, common gotcha
Frontend refresh token (ca 2 app fe-admin + fe-user):
- lib/api.ts REWRITE: them REFRESH_KEY, axios response interceptor 401 → POST /auth/refresh → retry request goc. Queue pattern cho nhieu request song song chi 1 refresh call chay. Skip retry /auth/login + /auth/refresh tranh infinite loop. _retry flag tren original config.
- contexts/AuthContext.tsx: luu+xoa REFRESH_KEY trong login/logout
E2E verified:
- GET /health/live → 200 Healthy
- GET /health/ready → 200 Healthy (DB probe)
- Rate limit flood 7 POST /auth/login → #1-5 HTTP 400 (cred sai) + #6-7 HTTP 429 Too Many Requests ✅
- TS check fe-admin + fe-user → pass
- dotnet build → 0 errors
Docs updates:
- docs/STATUS.md: Phase 5 prep done, next Phase 5 deploy production + Phase 5.1 security hardening, cumulative stats 8 commits
- docs/HANDOFF.md: phase table them Phase 5 prep row, file tree update voi guides + scripts + workflows, git state commit 8
- docs/changelog/migration-todos.md: tick Phase 5 prep items (12 items done) + Phase 5 deploy items remaining + Phase 5.1 security hardening list
- docs/changelog/sessions/2026-04-21-1530-phase5-prep.md: session log chi tiet
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
56 lines
1.5 KiB
PowerShell
56 lines
1.5 KiB
PowerShell
# Backup SQL Server database SolutionErp.
|
|
# Lập lịch qua Task Scheduler: daily 2:00 AM.
|
|
#
|
|
# Usage:
|
|
# .\scripts\backup-sql.ps1 -Server "." -Database "SolutionErp" -BackupDir "D:\Backups\SolutionErp"
|
|
#
|
|
# Retention: giữ 30 ngày gần nhất (dọn file cũ hơn 30d).
|
|
|
|
param(
|
|
[string]$Server = ".",
|
|
[string]$Database = "SolutionErp",
|
|
[string]$BackupDir = "D:\Backups\SolutionErp",
|
|
[int]$RetentionDays = 30
|
|
)
|
|
|
|
$ErrorActionPreference = 'Stop'
|
|
|
|
if (-not (Test-Path $BackupDir)) {
|
|
New-Item -ItemType Directory -Force -Path $BackupDir | Out-Null
|
|
}
|
|
|
|
$timestamp = Get-Date -Format 'yyyyMMdd-HHmmss'
|
|
$backupFile = Join-Path $BackupDir "${Database}_${timestamp}.bak"
|
|
|
|
Write-Host "Backup $Database -> $backupFile"
|
|
|
|
$sql = @"
|
|
BACKUP DATABASE [$Database]
|
|
TO DISK = N'$backupFile'
|
|
WITH
|
|
INIT,
|
|
COMPRESSION,
|
|
CHECKSUM,
|
|
NAME = N'$Database-Full-$timestamp',
|
|
DESCRIPTION = N'Daily full backup';
|
|
"@
|
|
|
|
sqlcmd -S $Server -Q $sql -b
|
|
if ($LASTEXITCODE -ne 0) {
|
|
throw "Backup FAIL (exit code $LASTEXITCODE)"
|
|
}
|
|
|
|
$fileSize = [math]::Round((Get-Item $backupFile).Length / 1MB, 2)
|
|
Write-Host " Size: ${fileSize} MB"
|
|
|
|
# Retention: xoa file cu hon X ngay
|
|
Write-Host "Cleanup old backups (>$RetentionDays days)"
|
|
$cutoff = (Get-Date).AddDays(-$RetentionDays)
|
|
$oldFiles = Get-ChildItem -Path $BackupDir -Filter "*.bak" | Where-Object { $_.LastWriteTime -lt $cutoff }
|
|
foreach ($f in $oldFiles) {
|
|
Write-Host " Remove $($f.Name)"
|
|
Remove-Item $f.FullName -Force
|
|
}
|
|
|
|
Write-Host "`nBackup SUCCESS" -ForegroundColor Green
|