Upload 8 files

backup/.env

@@ -0,0 +1,25 @@
+ENVIRONMENT=production
+MAX_WORKERS=4
+WORKER_TIMEOUT=300
+MODEL_CACHE_SIZE=1024
+REDIS_URL=redis://redis:6379
+MONGODB_URL=mongodb://ocr_user:ocr_password@mongodb:27017/ocr_db
+ELASTICSEARCH_URL=http://elasticsearch:9200
+LOG_LEVEL=INFO
+ENABLE_METRICS=true
+
+# Default admin credentials
+ADMIN_USERNAME=admin
+ADMIN_PASSWORD=change_me_in_production
+
+# Service versions
+ELASTICSEARCH_VERSION=8.8.0
+KIBANA_VERSION=8.8.0
+MONGODB_VERSION=latest
+REDIS_VERSION=alpine
+
+# Resource limits
+API_CPU_LIMIT=2
+API_MEMORY_LIMIT=4G
+DB_CPU_LIMIT=1
+DB_MEMORY_LIMIT=2G

backup/docker-compose.yml

@@ -0,0 +1,210 @@
+version: '3.8'
+
+services:
+  ocr-api:
+    build: 
+      context: .
+      dockerfile: Dockerfile
+    image: persian-ocr-api
+    container_name: persian-ocr-service
+    restart: unless-stopped
+    ports:
+      - "8000:8000"
+    volumes:
+      - ./app:/app
+      - ./logs:/app/logs
+      - ./models:/app/models
+      - ./temp_uploads:/app/temp_uploads
+    environment:
+      - ENVIRONMENT=production
+      - MAX_WORKERS=4
+      - WORKER_TIMEOUT=300
+      - MODEL_CACHE_SIZE=1024
+      - REDIS_URL=redis://redis:6379
+      - MONGODB_URL=mongodb://mongodb:27017/ocr_db
+      - LOG_LEVEL=INFO
+      - ENABLE_METRICS=true
+    depends_on:
+      - redis
+      - mongodb
+      - elasticsearch
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+    deploy:
+      resources:
+        limits:
+          cpus: '2'
+          memory: 4G
+        reservations:
+          cpus: '1'
+          memory: 2G
+    networks:
+      - ocr-network
+
+  redis:
+    image: redis:alpine
+    container_name: ocr-redis
+    command: redis-server --appendonly yes
+    restart: unless-stopped
+    ports:
+      - "6379:6379"
+    volumes:
+      - redis-data:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 1G
+    networks:
+      - ocr-network
+
+  mongodb:
+    image: mongo:latest
+    container_name: ocr-mongodb
+    restart: unless-stopped
+    environment:
+      - MONGO_INITDB_ROOT_USERNAME=admin
+      - MONGO_INITDB_ROOT_PASSWORD=secret
+      - MONGO_INITDB_DATABASE=ocr_db
+    ports:
+      - "27017:27017"
+    volumes:
+      - mongodb-data:/data/db
+      - ./mongo-init:/docker-entrypoint-initdb.d
+    healthcheck:
+      test: echo 'db.runCommand("ping").ok' | mongosh localhost:27017/test --quiet
+      interval: 30s
+      timeout: 10s
+      retries: 3
+    deploy:
+      resources:
+        limits:
+          cpus: '1'
+          memory: 2G
+    networks:
+      - ocr-network
+
+  elasticsearch:
+    image: elasticsearch:8.8.0
+    container_name: ocr-elasticsearch
+    restart: unless-stopped
+    environment:
+      - discovery.type=single-node
+      - ES_JAVA_OPTS=-Xms512m -Xmx512m
+      - xpack.security.enabled=false
+    ports:
+      - "9200:9200"
+    volumes:
+      - elasticsearch-data:/usr/share/elasticsearch/data
+    healthcheck:
+      test: ["CMD-SHELL", "curl -s http://localhost:9200/_cluster/health | grep -q 'status.*green\\|status.*yellow'"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+    deploy:
+      resources:
+        limits:
+          cpus: '1'
+          memory: 2G
+    networks:
+      - ocr-network
+
+  kibana:
+    image: kibana:8.8.0
+    container_name: ocr-kibana
+    restart: unless-stopped
+    ports:
+      - "5601:5601"
+    environment:
+      - ELASTICSEARCH_HOSTS=http://elasticsearch:9200
+    depends_on:
+      - elasticsearch
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 1G
+    networks:
+      - ocr-network
+
+  prometheus:
+    image: prom/prometheus:latest
+    container_name: ocr-prometheus
+    restart: unless-stopped
+    ports:
+      - "9090:9090"
+    volumes:
+      - ./prometheus.yml:/etc/prometheus/prometheus.yml
+      - prometheus-data:/prometheus
+    command:
+      - '--config.file=/etc/prometheus/prometheus.yml'
+      - '--storage.tsdb.path=/prometheus'
+      - '--web.console.libraries=/usr/share/prometheus/console_libraries'
+      - '--web.console.templates=/usr/share/prometheus/consoles'
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 1G
+    networks:
+      - ocr-network
+
+  grafana:
+    image: grafana/grafana:latest
+    container_name: ocr-grafana
+    restart: unless-stopped
+    ports:
+      - "3000:3000"
+    volumes:
+      - grafana-data:/var/lib/grafana
+    environment:
+      - GF_SECURITY_ADMIN_PASSWORD=admin
+      - GF_USERS_ALLOW_SIGN_UP=false
+    depends_on:
+      - prometheus
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 1G
+    networks:
+      - ocr-network
+
+  traefik:
+    image: traefik:v2.10
+    container_name: ocr-traefik
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+      - "8080:8080"
+    volumes:
+      - ./traefik.yml:/etc/traefik/traefik.yml
+      - ./acme.json:/acme.json
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 512M
+    networks:
+      - ocr-network
+
+volumes:
+  redis-data:
+  mongodb-data:
+  elasticsearch-data:
+  prometheus-data:
+  grafana-data:
+
+networks:
+  ocr-network:
+    driver: bridge

backup/dockerfile

@@ -0,0 +1,55 @@
+FROM python:3.10-slim
+
+# Prevent interactive prompts during installation
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Set environment variables
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    TZ=Asia/Tehran
+
+# Set the timezone
+RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    tesseract-ocr \
+    tesseract-ocr-fas \
+    libtesseract-dev \
+    libgl1-mesa-glx \
+    libglib2.0-0 \
+    libsm6 \
+    libxext6 \
+    libxrender-dev \
+    libpango-1.0-0 \
+    libpangocairo-1.0-0 \
+    git \
+    wget \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create app directory
+WORKDIR /app
+
+# Copy requirements first to leverage Docker cache
+COPY requirements.txt .
+
+# Install Python dependencies
+RUN pip3 install --no-cache-dir -r requirements.txt
+
+# Copy the rest of the application
+COPY . .
+
+# Create necessary directories
+RUN mkdir -p /app/temp_uploads /app/logs /app/models
+
+# Set user permissions
+RUN chown -R 1000:1000 /app
+USER 1000
+
+# Expose port
+EXPOSE 8000
+
+# Start command with gunicorn
+CMD ["gunicorn", "webhook_api:create_api", "--workers", "4", "--worker-class", "uvicorn.workers.UvicornWorker", "--bind", "0.0.0.0:8000"]

backup/mongo-init.js

@@ -0,0 +1,22 @@
+db.createUser(
+    {
+        user: "ocr_user",
+        pwd: "ocr_password",
+        roles: [
+            {
+                role: "readWrite",
+                db: "ocr_db"
+            }
+        ]
+    }
+);
+
+db.createCollection("processed_documents");
+db.createCollection("webhook_logs");
+db.createCollection("metrics");
+
+// Create indexes
+db.processed_documents.createIndex({ "created_at": 1 });
+db.processed_documents.createIndex({ "status": 1 });
+db.webhook_logs.createIndex({ "timestamp": 1 });
+db.metrics.createIndex({ "timestamp": 1 });

backup/prometheus-config.yml

@@ -0,0 +1,13 @@
+global:
+  scrape_interval: 15s
+  evaluation_interval: 15s
+
+scrape_configs:
+  - job_name: 'ocr-api'
+    static_configs:
+      - targets: ['ocr-api:8000']
+    metrics_path: '/metrics'
+
+  - job_name: 'prometheus'
+    static_configs:
+      - targets: ['localhost:9090']

backup/traefik-config.js

@@ -0,0 +1,28 @@
+api:
+  dashboard: true
+  insecure: true
+
+providers:
+  docker:
+    endpoint: "unix:///var/run/docker.sock"
+    exposedByDefault: false
+
+entryPoints:
+  web:
+    address: ":80"
+    http:
+      redirections:
+        entryPoint:
+          to: websecure
+          scheme: https
+
+  websecure:
+    address: ":443"
+
+certificatesResolvers:
+  letsencrypt:
+    acme:
+      email: [email protected]
+      storage: acme.json
+      httpChallenge:
+        entryPoint: web