\n| API (Opcional)<\/span><\/td>\n | 3000 \/ 3000<\/span><\/td>\n | 3000 \/ 3000<\/span><\/td>\n | TCP<\/span><\/td>\n | sua-vm<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/p>\n \t\t\r\n \t\t\t Aviso!<\/span> \t\t\t \t\t\t\t\r\n \t\t\t\t\t N\u00c3O crie nenhuma regra de encaminhamento para a porta do banco de dados (PostgreSQL 5432 ou MongoDB 27017). O banco deve permanecer acess\u00edvel apenas dentro da pr\u00f3pria VM. Expor essas portas \u00e0 internet \u00e9 uma falha grave de seguran\u00e7a. \t\t\t\t<\/p>\r\n \t\t\t \t\t\t\r\n \t\t<\/div>\r\n \t\t<\/span><\/p>\n Passo 3: Liberar as portas no Firewall<\/b><\/h3>\nNa tela do IP p\u00fablico, abra a aba <\/span>Firewall<\/b> e crie as regras de entrada correspondentes:<\/span><\/p>\n\n\n\n| Origem (CIDR)<\/b><\/td>\n | Porta (Inicial\/Final)<\/b><\/td>\n | Protocolo<\/b><\/td>\n | Observa\u00e7\u00e3o<\/b><\/td>\n<\/tr>\n\n| <SEU_IP_DE_ADMIN><\/span>\/32<\/span><\/td>\n | 22 \/ 22<\/span><\/td>\n | TCP<\/span><\/td>\n | SSH restrito ao seu IP de administra\u00e7\u00e3o<\/span><\/td>\n<\/tr>\n\n| 0.0.0.0\/0<\/span><\/td>\n | 80 \/ 80<\/span><\/td>\n | TCP<\/span><\/td>\n | HTTP p\u00fablico<\/span><\/td>\n<\/tr>\n\n| 0.0.0.0\/0<\/span><\/td>\n | 3000 \/ 3000<\/span><\/td>\n | TCP<\/span><\/td>\n | Liberado apenas se utilizou a regra opcional<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/p>\n \t\t\r\n \t\t\t Importante!<\/span> \t\t\t \t\t\t\t\r\n \t\t\t\t\t<\/span>Por seguran\u00e7a, restrinja o acesso SSH ao seu pr\u00f3prio CIDR de administra\u00e7\u00e3o em vez de liberar para toda a internet (0.0.0.0\/0). Isso neutraliza ataques por for\u00e7a bruta na porta 22.<\/span> \t\t\t\t<\/p>\r\n \t\t\t \t\t\t\r\n \t\t<\/div>\r\n \t\t<\/span><\/p>\n3. Configura\u00e7\u00e3o do sistema: instala\u00e7\u00e3o do Docker na VM<\/b><\/h2>\nAcesse sua m\u00e1quina virtual pelo terminal local para instalar o Docker Engine e o utilit\u00e1rio Docker Compose.<\/span><\/p>\nPasso 1: Acessar a M\u00e1quina Virtual via SSH<\/b><\/h3>\nBash
\n<\/span><\/p>\n# Define a permiss\u00e3o restrita na chave privada por seguran\u00e7a<\/span>\r\n\r\nchmod 400 ~\/Downloads\/sua-chave-locaweb.key\r\n\r\n<\/span># Estabelece a conex\u00e3o remota com a VM Linux\r\n<\/span>ssh -i ~\/Downloads\/sua-chave-locaweb.key ubuntu@<SEU_IP_PUBLICO><\/span><\/pre>\nPasso 2: Instalar o Docker Engine<\/b><\/h3>\nBash
\n<\/span><\/p>\n# Atualiza os \u00edndices do sistema e instala depend\u00eancias HTTPS<\/span>\r\n\r\nsudo apt-get update<\/span>\r\n\r\nsudo apt-get install -y ca-certificates curl gnupg<\/span>\r\n\r\n\r\n\r\n# Adiciona a chave oficial de GPG do Docker<\/span>\r\n\r\nsudo install -m 0755 -d \/etc\/apt\/keyrings<\/span>\r\n\r\ncurl -fsSL https:\/\/download.docker.com\/linux\/ubuntu\/gpg | \r\nsudo gpg --dearmor -o \/etc\/apt\/keyrings\/docker.gpg<\/span>\r\n\r\nsudo chmod a+r \/etc\/apt\/keyrings\/docker.gpg<\/span>\r\n\r\n\r\n\r\n# Configura o reposit\u00f3rio est\u00e1vel oficial do Docker<\/span>\r\n\r\necho \\<\/span>\r\n\r\n\u00a0\u00a0\"deb [arch=$(dpkg --print-architecture) signed-by=\/etc\/apt\r\n\/keyrings\/docker.gpg] https:\/\/download.docker.com\/linux\/ubuntu \\<\/span>\r\n\r\n \u00a0$(. \/etc\/os-release && echo \"$VERSION_CODENAME\") stable\" |\r\n<\/span> \\ sudo tee \/etc\/apt\/sources.list.d\/docker.list > \/dev\/null<\/span>\r\n\r\n\r\n\r\n# Instala o motor do Docker e o plugin do Docker Compose<\/span>\r\n\r\nsudo apt-get update<\/span>\r\n\r\nsudo apt-get install -y docker-ce docker-ce-cli containerd.io \r\ndocker-buildx-plugin docker-compose-plugin<\/span>\r\n\r\n\r\n\r\n# Habilita o servi\u00e7o para inicializar junto com o servidor<\/span>\r\n\r\nsudo systemctl enable --now docker<\/span><\/pre>\nPasso 3: Configurar permiss\u00f5es do grupo<\/b><\/h3>\nBash
\n<\/span><\/p>\n# Adiciona o usu\u00e1rio ao grupo docker para n\u00e3o depender do \r\ncomando 'sudo'<\/span>\r\n\r\nsudo usermod -aG docker ubuntu<\/span><\/pre>\n <\/p>\n Nota: Encerre a sess\u00e3o SSH e reconecte-se para aplicar as permiss\u00f5es do grupo.<\/span><\/i><\/p>\n4. Configura\u00e7\u00e3o do banco de dados: PostgreSQL em Container<\/b><\/h2>\nOs dados da nossa API ser\u00e3o armazenados em uma inst\u00e2ncia de PostgreSQL, que operar\u00e1 de forma isolada dentro de um container. A defini\u00e7\u00e3o deste servi\u00e7o ocorrer\u00e1 integralmente dentro do arquivo <\/span>docker-compose.yml<\/span>, mantendo a porta 5432 protegida de acessos externos. A aplica\u00e7\u00e3o o alcan\u00e7ar\u00e1 internamente pelo hostname <\/span>db<\/span>:<\/span><\/p>\nPlaintext<\/span><\/p>\nDATABASE_URL=postgresql:\/\/api_user:<SENHA_SEGURA_DO_BANCO>@db:5432\/\r\napi_producao<\/span><\/pre>\n5. Prepara\u00e7\u00e3o da aplica\u00e7\u00e3o\u00a0<\/b><\/h2>\nNa raiz do seu projeto local, crie os arquivos de automa\u00e7\u00e3o do deploy:<\/span><\/p>\nDockerfile<\/b><\/p>\n Dockerfile<\/span><\/p>\nFROM node:20-alpine<\/span>\r\n\r\nWORKDIR \/usr\/src\/app<\/span>\r\n\r\nCOPY package*.json .\/<\/span>\r\n\r\nRUN npm ci --omit=dev<\/span>\r\n\r\nCOPY . .<\/span>\r\n\r\nEXPOSE 3000<\/span>\r\n\r\nCMD [\"node\", \"app.js\"]<\/span><\/pre>\n\u00a0 .dockerignore<\/b><\/p>\n Plaintext<\/span><\/p>\nnode_modules<\/span>\r\n\r\nnpm-debug.log<\/span>\r\n\r\n.git<\/span>\r\n\r\n.github<\/span>\r\n\r\n.env<\/span><\/pre>\ndocker-compose.yml<\/b><\/p>\n YAML<\/span><\/p>\nservices:<\/span>\r\n\r\n\u00a0\u00a0api:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0build: .<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0container_name: api-producao<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0restart: always<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0ports:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0- \"3000:3000\"<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0env_file:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0- .env<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0depends_on:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0- db<\/span>\r\n\r\n\r\n\r\n\r\n\u00a0\u00a0db:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0image: postgres:16-alpine<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0container_name: postgres-producao<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0restart: always<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0environment:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0POSTGRES_USER: api_user<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0POSTGRES_DB: api_producao<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0volumes:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0- pgdata:\/var\/lib\/postgresql\/data<\/span>\r\n\r\n\r\n\r\n\r\nvolumes:<\/span>\r\n\r\n \u00a0pgdata:<\/span><\/pre>\n6. Deploy da Aplica\u00e7\u00e3o<\/b><\/h2>\nEscolha o m\u00e9todo ideal para o seu momento de mercado:<\/span><\/p>\nM\u00e9todo 1: Deploy manual via Git (primeira valida\u00e7\u00e3o)<\/b><\/h3>\nBash<\/span><\/p>\n# Cria o diret\u00f3rio de aplica\u00e7\u00f5es e clona seu reposit\u00f3rio Git<\/span>\r\n\r\nsudo mkdir -p \/var\/www && sudo chown ubuntu:ubuntu \/var\/www<\/span>\r\n\r\ncd \/var\/www<\/span>\r\n\r\ngit clone https:\/\/github.com\/seu-usuario\/sua-api-rest.git<\/span>\r\n\r\ncd sua-api-rest<\/span>\r\n\r\n\r\n\r\n\r\n# Configura as vari\u00e1veis de ambiente de produ\u00e7\u00e3o<\/span>\r\n\r\nnano .env<\/span><\/pre>\nAdicione suas vari\u00e1veis de ambiente no arquivo <\/span><\/i>.env<\/span><\/i> mapeando a senha e a URL de conex\u00e3o do banco interna.<\/span><\/i><\/p>\nBash<\/span><\/p>\n# Inicializa a stack de servi\u00e7os em segundo plano<\/span>\r\n\r\ndocker compose up -d --build<\/span><\/pre>\nM\u00e9todo 2: Deploy automatizado com GitHub Actions (recomendado)<\/b><\/h3>\nAdicione os Secrets no seu reposit\u00f3rio do GitHub (<\/span>SSH_HOST<\/span>, <\/span>SSH_USERNAME<\/span>, <\/span>SSH_KEY<\/span>) e crie o arquivo <\/span>.github\/workflows\/deploy-docker.yml<\/span>:<\/span><\/p>\nYAML<\/span><\/p>\nname: Deploy Docker Locaweb Cloud<\/span>\r\n\r\n\r\non:<\/span>\r\n\r\n\u00a0\u00a0push:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0branches:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0- main<\/span>\r\n\r\n\r\n\r\njobs:<\/span>\r\n\r\n\u00a0\u00a0deploy:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0runs-on: ubuntu-latest<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0steps:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0- name: Checkout do C\u00f3digo<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0uses: actions\/checkout@v4<\/span>\r\n\r\n\r\n\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0- name: Deploy via SSH no Locaweb Cloud<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0uses: appleboy\/ssh-action@v1.0.3<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0with:<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0host: ${{ secrets.SSH_HOST }}<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0username: ${{ secrets.SSH_USERNAME }}<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0key: ${{ secrets.SSH_KEY }}<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0port: 22<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0script: |<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0cd \/var\/www\/sua-api-rest<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0git reset --hard HEAD<\/span>\r\n\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0git pull origin main<\/span>\r\n\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0docker compose up -d --build<\/span><\/pre>\n7. Valida\u00e7\u00e3o\u00a0<\/b><\/h2>\nValida\u00e7\u00e3o interna (na VM)<\/b><\/h3>\nBash<\/span><\/p>\n# Confirma se os containers est\u00e3o com status 'Up'<\/span>\r\n\r\ndocker compose ps<\/span>\r\n\r\n\r\n# Verifica os logs em tempo real da API<\/span>\r\n\r\ndocker compose logs -f api<\/span><\/pre>\nValida\u00e7\u00e3o externa (m\u00e1quina local)<\/b><\/h3>\nBash<\/span><\/p>\n# Testa a resposta p\u00fablica da API atrav\u00e9s do IP p\u00fablico<\/span>\r\n\r\ncurl -I http:\/\/<SEU_IP_PUBLICO>:3000<\/span><\/pre>\n | | | | |