Deployment — Ship It to Production

Bash — Initial Server Setup # 1. SSH into your new server ssh root@your-server-ip # 2. Create a non-root user adduser terminal usermod -aG sudo terminal su - terminal # 3. Install Docker & Docker Compose curl -fsSL https://get.docker.com | sh sudo usermod -aG docker $USER # 4. Install Docker Compose plugin sudo apt install docker-compose-plugin # 5. Clone your repo git clone https://github.com/you/trading-terminal.git cd trading-terminal # 6. Create .env file (NEVER commit this) cp .env.example .env nano .env # Fill in API keys # 7. Launch everything docker compose up -d # 8. Verify all services are running docker compose ps docker compose logs --tail=50 ingestion

docker-compose.yml — Production Configuration version: '3.8' services: # === DATABASE LAYER === timescaledb: image: timescale/timescaledb:latest-pg16 restart: always ports: ["5432:5432"] environment: POSTGRES_PASSWORD: ${DB_PASSWORD} POSTGRES_DB: trading_terminal volumes: - tsdb_data:/var/lib/postgresql/data - ./db/init.sql:/docker-entrypoint-initdb.d/init.sql healthcheck: test: ["CMD-SHELL", "pg_isready -U postgres"] interval: 10s retries: 5 redis: image: redis:7-alpine restart: always ports: ["6379:6379"] command: redis-server --maxmemory 256mb --maxmemory-policy allkeys-lru --appendonly yes volumes: ["redis_data:/data"] # === INGESTION LAYER === ingestion: build: ./services/ingestion restart: always depends_on: timescaledb: { condition: service_healthy } redis: { condition: service_started } env_file: .env environment: DATABASE_URL: postgresql://postgres:${DB_PASSWORD}@timescaledb:5432/trading_terminal REDIS_URL: redis://redis:6379 # === SIGNAL ENGINE === signals: build: ./services/signals restart: always depends_on: [timescaledb] env_file: .env # === AI LAYER (MCP SERVER) === ai: build: ./services/ai restart: always depends_on: [timescaledb, signals] env_file: .env # === DASHBOARD === dashboard: build: ./services/dashboard restart: always ports: ["3000:3000"] depends_on: [timescaledb, redis, signals] env_file: .env # === REVERSE PROXY === caddy: image: caddy:2-alpine restart: always ports: ["80:80", "443:443"] volumes: - ./Caddyfile:/etc/caddy/Caddyfile - caddy_data:/data volumes: tsdb_data: redis_data: caddy_data:

Caddyfile — Automatic HTTPS terminal.yourdomain.com { reverse_proxy dashboard:3000 encode gzip header { X-Content-Type-Options nosniff X-Frame-Options DENY Strict-Transport-Security "max-age=31536000; includeSubDomains" } }

Python — Health Check Endpoint from datetime import datetime, timedelta async def health_check() -> dict: """Comprehensive health check for all services.""" checks = {} # 1. Database connectivity try: await db.execute("SELECT 1") checks["database"] = "ok" except: checks["database"] = "FAIL" # 2. Redis connectivity try: await cache.redis.ping() checks["redis"] = "ok" except: checks["redis"] = "FAIL" # 3. Data freshness latest = await db.get_latest_bar_timestamp() stale = (datetime.utcnow() - latest) > timedelta(hours=26) checks["data_fresh"] = "STALE" if stale else "ok" # 4. Disk space disk = shutil.disk_usage("/") pct_free = disk.free / disk.total * 100 checks["disk"] = "LOW" if pct_free < 10 else "ok" # 5. Overall status checks["status"] = "healthy" if all( v == "ok" for v in checks.values() if v != checks["status"] ) else "degraded" return checks