AI 블로그 완성기(3) - 전체적인 구조를 보여드립니다

┌────────────────────────────────────────
│                             Host Server                             |          │                                                                     |
│                        RTX 4070 SUPER (12GB)                        |  
│                                                                    │
│  ┌──────────┐    blog-internal    ┌───────────┐ │
│  │   blog           │───────────►│  ollama            │ │
│  │ (Next.js)        │    HTTP :11434     │ (LLM/GPU)          │ │
│  │  :3001           │                    │                    │ │
│  └────┬─────┘                    └───────────┘  │
│       proxy-net                                                    │
│  ┌────┴──────┐                                           │
│  │   NPM             │  ← HTTPS + SSL 자동 갱신                  │
│  │ (Reverse          │                                           │
│  │  Proxy)           │                                           │
│  └───────────┘                                           │
└────────────────────────────────────────

blog:
  build: .
  container_name: blog
  restart: unless-stopped
  ports:
    - "3001:3001"
  volumes:
    - blog-data:/app/prisma          # SQLite DB 영속화
    - blog-uploads:/app/public/uploads # 미디어 파일
    - /var/run/docker.sock:/var/run/docker.sock:ro  # 컨테이너 상태 모니터링
    - /sys/class/thermal:/sys/class/thermal:ro      # 서버 온도 읽기
  environment:
    - DATABASE_URL=file:/app/prisma/blog.db
    - OLLAMA_URL=http://ollama:11434
  depends_on:
    - ollama

ollama:
  image: ollama/ollama:latest
  container_name: blog-ollama
  restart: unless-stopped
  volumes:
    - /usr/share/ollama/.ollama:/root/.ollama
  deploy:
    resources:
      reservations:
        devices:
          - driver: nvidia
            count: 1
            capabilities: [gpu]
  networks:
    - blog-internal

# NVIDIA Container Toolkit 설치 (Ubuntu)
curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey \
  | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg

curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list \
  | sed 's#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#g' \
  | sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list

sudo apt-get update && sudo apt-get install -y nvidia-container-toolkit
sudo nvidia-ctk runtime configure --runtime=docker
sudo systemctl restart docker

volumes:
  - /usr/share/ollama/.ollama:/root/.ollama

qwen3:8b          6 GB   ← 챗봇 메인 모델
nomic-embed-text  274 MB   ← 임베딩 모델
gemma2:9b         5.4 GB   ← 대안 모델
phi3:14b          7.9 GB   ← 실험용
... (8개 더)

# 1단계: 의존성 설치
FROM node:20-alpine AS deps
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci

# 2단계: 빌드
FROM node:20-alpine AS builder
WORKDIR /app
COPY --from=deps /app/node_modules ./node_modules
COPY . .
RUN npx prisma generate
RUN npm run build

# 3단계: 실행
FROM node:20-alpine AS runner
WORKDIR /app
ENV NODE_ENV=production
RUN apk add --no-cache docker-cli sqlite
COPY --from=builder /app/.next/standalone ./
COPY --from=builder /app/.next/static ./.next/static
# ... (필요한 파일만 복사)

networks:
  proxy-net:
    external: true      # NPM(리버스 프록시)과 통신
  blog-internal:
    driver: bridge       # blog ↔ ollama 내부 통신

인터넷 → NPM (443/HTTPS) → blog (3001/HTTP)

for dir in /app/prisma/migrations/*/; do
  # 이미 적용된 마이그레이션은 건너뜀
  ALREADY_APPLIED=$(sqlite3 "$DB_PATH" \
    "SELECT COUNT(*) FROM _prisma_migrations WHERE migration_name='$migration_name';")
  if [ "$ALREADY_APPLIED" = "0" ]; then
    sqlite3 "$DB_PATH" < "$sql_file"
  fi
done

ADMIN_EXISTS=$(sqlite3 "$DB_PATH" \
  "SELECT COUNT(*) FROM AdminUser WHERE username='${ADMIN_USERNAME}';")
if [ "$ADMIN_EXISTS" = "0" ]; then
  node /app/init-admin.js
fi