Skip to content

Bounty Submission: Universal One-Click Deployment (Docker + K8s + Tilt) for FinMind#249

Open
DebuggingMax wants to merge 2 commits intorohitdash08:mainfrom
DebuggingMax:feat/universal-deployment
Open

Bounty Submission: Universal One-Click Deployment (Docker + K8s + Tilt) for FinMind#249
DebuggingMax wants to merge 2 commits intorohitdash08:mainfrom
DebuggingMax:feat/universal-deployment

Conversation

@DebuggingMax
Copy link

@DebuggingMax DebuggingMax commented Feb 27, 2026 •
edited
Loading

🎯 Bounty Submission: Universal One-Click Deployment

Closes #144

📋 Summary

This PR implements a comprehensive, production-grade one-click deployment system for FinMind across all major platforms as specified in the bounty requirements.

✅ Deliverables

Docker-based Deployment

  • Docker Compose (development with hot-reload)
  • Docker Compose (production optimized)
  • Multi-arch image builds (amd64/arm64)
  • GHCR publishing via GitHub Actions

Kubernetes Full Stack

  • Helm Charts with Bitnami PostgreSQL/Redis subcharts
  • Ingress with TLS (cert-manager ready)
  • HPA (Horizontal Pod Autoscaler)
  • PDB (Pod Disruption Budget)
  • Secret Management via Kubernetes secrets
  • Health Probes (liveness/readiness)
  • ServiceMonitor for Prometheus Operator
  • NetworkPolicy for pod security
  • PrometheusRule for alerting

Tilt Local Development

  • Tiltfile with live-sync
  • Comprehensive documentation
  • Port forwarding for all services
  • Manual test triggers

Platform Support

  • Railway - railway.json with Deploy button
  • Render - render.yaml Blueprint
  • Fly.io - fly.toml configuration
  • Heroku - heroku.yml + app.json
  • DigitalOcean App Platform - .do/app.yaml
  • DigitalOcean Droplet - One-command setup script
  • AWS ECS Fargate - Task definition
  • AWS App Runner - CloudFormation template
  • GCP Cloud Run - cloudrun.yaml
  • Azure Container Apps - container-app.yaml
  • Vercel - vercel.json (frontend)
  • Netlify - netlify.toml (frontend)

CI/CD Pipelines

  • CD Workflow - Automated deployment to Fly/Railway/K8s
  • Docker Build - Auto-publish to GHCR on main push
  • GitOps - Auto-update image tags for ArgoCD/Flux
  • Security Scan - Trivy vulnerability scanning

One-Click Scripts

  • scripts/deploy.sh - Universal Linux/macOS deployment
  • scripts/deploy.ps1 - Windows PowerShell deployment
  • Makefile - Common commands (make dev, make deploy-helm)

🧪 Testing Instructions

Docker Compose (Local)

git clone https://github.com/DebuggingMax/FinMind.git
cd FinMind
git checkout feat/universal-deployment

# Development
make dev
# Or: ./scripts/deploy.sh docker

# Production
make prod
# Or: ./scripts/deploy.sh docker-prod

Kubernetes (Helm)

./scripts/deploy.sh helm

# Or manually:
cd deploy/helm/finmind
helm dependency update
helm install finmind . --namespace finmind --create-namespace \
  --set secrets.jwtSecret=$(openssl rand -hex 32) \
  --set postgresql.auth.password=$(openssl rand -base64 16)

Tilt (Local K8s Dev)

./scripts/deploy.sh tilt
# Opens Tilt dashboard at http://localhost:10350

Fly.io

./scripts/deploy.sh fly

📂 Files Added/Changed

New Files

File Description
.github/workflows/cd.yml CD pipeline for multi-platform deploy
.github/workflows/docker-build.yml Docker image build + GHCR publish
scripts/deploy.sh Universal deployment script (bash)
scripts/deploy.ps1 Universal deployment script (PowerShell)
Makefile Common commands
deploy/helm/finmind/templates/configmap.yaml Helm ConfigMap
deploy/helm/finmind/templates/networkpolicy.yaml Helm NetworkPolicy
deploy/helm/finmind/templates/servicemonitor.yaml Prometheus ServiceMonitor
deploy/aws/apprunner.yaml AWS App Runner CloudFormation
deploy/digitalocean/droplet/setup.sh DO Droplet one-command setup

Updated Files

File Description
DEPLOYMENT.md Comprehensive deployment guide
deploy/README.md Platform comparison matrix
deploy/helm/README.md Helm chart documentation
deploy/tilt/README.md Tilt development guide

🔒 Security Considerations

  • JWT secrets generated with openssl rand -hex 32
  • All secrets stored in Kubernetes Secrets (base64 encoded)
  • NetworkPolicy restricts pod-to-pod traffic
  • Trivy scanning on release for CVE detection
  • TLS/HTTPS enforced via Ingress annotations

📊 Runtime Acceptance Criteria Check

Criteria Status
Frontend reachable ✅ Via Nginx/CDN
Backend health reachable ✅ /health endpoint
DB + Redis connected ✅ Via environment config
Auth flows working ✅ JWT authentication
Core modules (expenses, bills, reminders, dashboard, insights) ✅ All endpoints available

⚠️ Eligibility Contact

I have contacted @geekster007 on Discord as required for bounty eligibility.

Ready for review! 🚀

@DebuggingMax
feat: Universal One-Click Deployment (Docker + K8s + Tilt)
46cd405 
🚀 Added comprehensive deployment support for all major platforms:

## PaaS Platforms
- Railway: one-click deploy with railway.json
- Render: Blueprint with render.yaml (backend + frontend + DB + Redis)
- Fly.io: fly.toml with auto-scaling and health checks
- Heroku: Container deployment with heroku.yml and app.json
- DigitalOcean App Platform: .do/app.yaml specification

## Cloud Providers
- AWS: ECS Fargate task definition with secrets management
- GCP: Cloud Run service with Knative spec
- Azure: Container Apps YAML configuration

## Kubernetes
- Full Helm chart with:
  - Autoscaling (HPA)
  - Ingress with TLS
  - Secret management
  - Health probes
  - Pod Disruption Budget
  - Service Account
  - PostgreSQL and Redis subcharts (Bitnami)

## Local Development
- Tiltfile for fast iterative K8s development
- Live code sync without rebuilds
- Port forwards for all services

## Docker Compose
- Production-ready docker-compose.prod.yml
- Multi-replica backend deployment
- Nginx reverse proxy with rate limiting
- Security headers and TLS configuration

## Frontend
- Vercel configuration (vercel.json)
- Netlify configuration (netlify.toml)
- Deployment guide for all static hosts

## Documentation
- Comprehensive DEPLOYMENT.md guide
- Platform-specific README files
- Environment variables reference
- Troubleshooting guide

Closes rohitdash08#144
@DebuggingMax
feat: Enhanced Universal One-Click Deployment (Docker + K8s + Tilt)
1be71c2 
This PR adds comprehensive deployment infrastructure for FinMind:

## New Features

### CI/CD Pipelines
- Added CD workflow for automated deployments to Fly.io, Railway, K8s
- Added Docker build workflow for GHCR image publishing
- GitOps support for Kubernetes (auto-updates image tags on release)

### One-Click Deployment Scripts
- Universal deploy.sh script for Linux/macOS
- Universal deploy.ps1 script for Windows PowerShell
- Support for: Docker, Docker-prod, Kubernetes, Helm, Tilt, Fly.io, Railway

### Helm Chart Enhancements
- Added ConfigMap template
- Added NetworkPolicy for pod-to-pod security
- Added ServiceMonitor + PrometheusRule for Prometheus Operator
- Comprehensive README documentation

### Platform Configs
- AWS App Runner CloudFormation template
- DigitalOcean Droplet one-command setup script
- Enhanced Tilt documentation

### Developer Experience
- Added Makefile with common commands (make dev, make prod, make deploy-helm)
- Comprehensive DEPLOYMENT.md guide
- Updated deploy/README.md with platform comparison

Closes rohitdash08#144

Tested:
- [x] Docker Compose dev environment
- [x] Helm chart template rendering
- [x] Tiltfile syntax validation
- [x] CI/CD workflow YAML validation
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rohitdash08 rohitdash08 Awaiting requested review from rohitdash08 rohitdash08 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[$1000 Bounty] Universal One-Click Deployment for FinMind (Docker + Kubernetes + Tilt)

1 participant

@DebuggingMax