Advanced
The tag that moved
Last week the shop went down at 3:00. The nightly job pulled registry.shop.internal/shop/api:1.4.0 again, and got the back-office instead: a misconfigured pipeline had pushed its image under that very tag. The API running right now is the right one. Make sure the nightly job, and any new server built from these files, can only ever start that exact API.
You are on the production server. ops/nightly-update.sh runs every night at 3:00 to pick up the security patches of postgres and redis. The test calls http://<server>/products every minute for six hours; at 1:00 the faulty pipeline pushes again, at 3:00 the nightly job runs, and at 5:00 a new server is deployed from compose.yaml and .env.
What your server must hold
- Availability ≥ 99 %
- stack.newServerServes = 1