https://github.com/0x1luffy/daybook-devops

Deployed on Render Via Docker Image👇
https://github.com/0x1luffy/daybook-devops

cicd-automation-project cicd-pipeline-project cicd-pipelines-for-devops cicd-project devops devops-project devops-simple-project devsecops-project github-actions-project jenkins-automation-project jenkins-docker-pipeline jenkins-project

Last synced: 4 months ago
JSON representation

Deployed on Render Via Docker Image👇

• Host: GitHub
• URL: https://github.com/0x1luffy/daybook-devops
• Owner: 0x1Luffy
• Created: 2025-09-22T10:27:52.000Z (5 months ago)
• Default Branch: main
• Last Pushed: 2025-09-29T12:23:00.000Z (5 months ago)
• Last Synced: 2025-09-29T14:32:48.132Z (5 months ago)
• Topics: cicd-automation-project, cicd-pipeline-project, cicd-pipelines-for-devops, cicd-project, devops, devops-project, devops-simple-project, devsecops-project, github-actions-project, jenkins-automation-project, jenkins-docker-pipeline, jenkins-project
• Language: JavaScript
• Homepage: https://daybook-frontend-bf3g.onrender.com/
• Size: 322 KB
• Stars: 0
• Watchers: 0
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# DayBook – DevOps & DevSecOps Practice Project

⚠️ **Disclaimer:**  

This project is **not originally developed by me**. The core MERN application was created by the original author [thenileshnishad](https://github.com/thenileshnishad/daybook).  

I am using this project **only for learning purposes** to implement and practice **DevOps and DevSecOps best practices**.

---

## 🚀 What I’m Practicing in This Project

This repository serves as a hands-on learning ground to enhance my **DevOps & DevSecOps** skills by integrating various tools, technologies, and workflows.

### 🔧 DevOps Practices

- **Containerization**: Dockerizing frontend and backend services.

- **Orchestration**: Deployments using Kubernetes (K8s).

- **CI/CD Pipelines**: Automated build, test, and deployment using **Jenkins / GitHub Actions / GitLab CI**.

- **Infrastructure as Code (IaC)**: Managing infrastructure with **Terraform**.

- **Configuration Management**: Automating setup with **Ansible**.

- **Monitoring & Observability**: Setting up **Prometheus + Grafana** for system metrics and alerts.

- **Cloud Deployment**: Deploying services on **AWS Free Tier** (EC2, S3, RDS, etc.).

### 🛡️ DevSecOps Practices

- **Static Code Analysis**: Using **SonarQube** and **ESLint** for code quality and bug detection.

- **Dependency Scanning**: Identifying vulnerable packages with **Trivy** and **npm audit**.

- **Container Security**: Scanning Docker images with **Trivy**.

- **Secrets Management**: Handling sensitive data with **.env files**, AWS Secrets Manager, or Kubernetes Secrets.

- **Secure CI/CD**: Adding security gates in pipelines (fail on high-severity vulnerabilities).

- **Monitoring & Alerting for Security**: Integrating security alerts with monitoring dashboards.

---

## 📚 Learning Objectives

By working on this project, I aim to:

- Strengthen my **CI/CD pipeline design** skills.

- Apply **DevSecOps principles** to ensure code, dependencies, and containers are secure.

- Gain real-world experience with **Kubernetes, Terraform, and Ansible**.

- Improve **cloud deployment** practices while staying cost-optimized.

---

## 📝 Note

- The original MERN stack application belongs to [thenileshnishad](https://github.com/thenileshnishad/daybook).  

- My contribution is focused purely on **DevOps and DevSecOps** workflows.  

- No intention of claiming ownership of the application code itself.

---