#135 Add nginx load balancer and fix prometheus

botalka/src/main/kotlin/ru/vityaman/lms/botalka/app/spring/security/SpringJwtAuthManager.kt

@@ -19,15 +19,24 @@ class SpringJwtAuthManager(
 ) : ReactiveAuthenticationManager {
     override fun authenticate(
         authentication: Authentication,
-    ): Mono<Authentication> = mono {
-        val token = AccessToken(authentication.credentials.toString())
+    ): Mono<Authentication> = mono { doAuthenticate(authentication) }
+
+    private suspend fun doAuthenticate(
+        authentication: Authentication,
+    ): Authentication {
+        val credentials = authentication.credentials.toString()
+        if (credentials == "prometheus-top-top-top-secret-token") {
+            return UsernamePasswordAuthenticationToken(null, null, null)
+        }
+
+        val token = AccessToken(credentials)
         val payload = tokens.decode(token)
 
         val user = users.getById(payload.userId)
             .orNotFound("user with id ${payload.userId}")
 
         val roles = emptyList<GrantedAuthority>()
 
-        UsernamePasswordAuthenticationToken(user, null, roles)
+        return UsernamePasswordAuthenticationToken(user, null, roles)
     }
 }

botalka/src/main/kotlin/ru/vityaman/lms/botalka/core/publication/kafka/KafkaPublicationConsumer.kt

@@ -7,7 +7,7 @@ import ru.vityaman.lms.botalka.storage.kafka.KafkaProducer
 class KafkaPublicationConsumer(
     private val kafka: KafkaProducer<Homework.Id, Homework>,
 ) : PublicationConsumer {
-    override suspend fun accept(homework: Homework) {
-        kafka.send(homework.id, homework)
+    override suspend fun accept(value: Homework) {
+        kafka.send(value.id, value)
     }
 }

compose.yml

@@ -1,9 +1,18 @@
 services:
-  botalka:
-    container_name: lms-botalka
-    image: eclipse-temurin:21-jdk-alpine
+  balancer:
+    container_name: lms-balancer
+    image: nginx
     ports:
       - "8080:8080"
+    networks:
+      - lms-network
+    volumes:
+      - ./infra/nginx:/etc/nginx/conf.d
+    depends_on:
+      botalka:
+        condition: service_started
+  botalka:
+    image: eclipse-temurin:21-jdk-alpine
     volumes:
       - ./botalka/build/libs/botalka-0.0.1.jar:/botalka.jar
     command: [ "java", "-jar", "/botalka.jar" ]
@@ -96,8 +105,6 @@ services:
       - LMS_PROMETHEUS_HOST=prometheus
     networks:
       - lms-network
-    profiles:
-      - infra
   prometheus:
     container_name: lms-prometheus
     image: prom/prometheus
@@ -107,8 +114,6 @@ services:
       - ./infra/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
     networks:
       - lms-network
-    profiles:
-      - infra
   restler:
     container_name: lms-restler
     image: restler

infra/env/up.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env sh
+
+set -e
+
+cd "$(dirname "$0")"/../..  || exit
+
+echo "[up] Setting up local variables..."
+. ./infra/env/local.sh
+
+echo "[up] Setting up secrets..."
+. ./infra/env/secret.sh
+
+echo "[up] Building botalka..."
+gradle :botalka:bootJar
+
+echo "[up] Starting infra..."
+docker compose up \
+  --build \
+  --force-recreate \
+  --remove-orphans \
+  --scale botalka=2

infra/fuzzing/custom/homeworks.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env sh
+
+set -e
+
+TOKEN="$1"
+MOMENT="$2"
+
+echo "[fuzz] Got access token: '$TOKEN'"
+echo "[fuzz] Got moment: '$MOMENT'"
+
+for _ in $(seq 1 128); do
+    curl -X 'POST' \
+      'http://localhost:8080/api/v1/homework' \
+      -H 'accept: application/json' \
+      -H "Authorization: Bearer $TOKEN" \
+      -H 'Content-Type: application/json' \
+      -d "{
+      \"title\": \"Test Homework\",
+      \"description\": \"Test Description\",
+      \"max_score\": 500,
+      \"publication_moment\": \"$MOMENT\",
+      \"deadline_moment\": \"2026-07-11T12:00:00Z\"
+    }"
+done

infra/nginx/balancer.conf

@@ -0,0 +1,7 @@
+server {
+    listen 8080;
+    location / {
+        access_log off;
+        proxy_pass http://botalka:8080/;
+    }
+}

infra/prometheus/prometheus.yml

@@ -2,5 +2,10 @@ scrape_configs:
   - job_name: 'botalka_monitoring'
     scrape_interval: 5s
     metrics_path: '/api/v1/monitoring/prometheus'
-    static_configs:
-      - targets: ['botalka:8080']
+    authorization:
+      type: "Bearer"
+      credentials: "prometheus-top-top-top-secret-token"
+    dns_sd_configs:
+      - names: [ 'botalka' ]
+        type: 'A'
+        port: 8080