chore: import DH V2 D5.6.4 production baseline

2026-09-05 10:12:35 -03:00
commit 82213e72f5
757 changed files with 84218 additions and 0 deletions
@@ -0,0 +1,119 @@
+services:
+  db:
+    image: postgis/postgis:16-3.5
+    container_name: dhv2-db
+    restart: unless-stopped
+    shm_size: 256mb
+    environment:
+      POSTGRES_DB: ${DB_NAME}
+      POSTGRES_USER: ${DB_OWNER_USER}
+      POSTGRES_PASSWORD: ${DB_OWNER_PASSWORD}
+      APP_DB_USER: ${DB_APP_USER}
+      APP_DB_PASSWORD: ${DB_APP_PASSWORD}
+    volumes:
+      - dhv2_pgdata:/var/lib/postgresql/data
+      - ./infra/db-init:/docker-entrypoint-initdb.d:ro
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${DB_OWNER_USER} -d ${DB_NAME}"]
+      interval: 10s
+      timeout: 5s
+      retries: 10
+    networks:
+      - dhv2_internal
+    security_opt:
+      - no-new-privileges:true
+
+  api:
+    build:
+      context: ./api-v3
+    container_name: dhv2-api
+    restart: unless-stopped
+    environment:
+      NODE_ENV: production
+      API_PORT: ${API_PORT}
+      DB_HOST: db
+      DB_PORT: 5432
+      DB_NAME: ${DB_NAME}
+      DB_APP_USER: ${DB_APP_USER}
+      DB_APP_PASSWORD: ${DB_APP_PASSWORD}
+      WEB_ORIGIN: ${WEB_ORIGIN}
+      JWT_ACCESS_SECRET: ${JWT_ACCESS_SECRET}
+      REFRESH_TOKEN_PEPPER: ${REFRESH_TOKEN_PEPPER}
+      ACCESS_TOKEN_TTL_SECONDS: ${ACCESS_TOKEN_TTL_SECONDS:-900}
+      REFRESH_TOKEN_TTL_SECONDS: ${REFRESH_TOKEN_TTL_SECONDS:-604800}
+      AUTH_MAX_LOGIN_ATTEMPTS: ${AUTH_MAX_LOGIN_ATTEMPTS:-5}
+      AUTH_LOCKOUT_SECONDS: ${AUTH_LOCKOUT_SECONDS:-900}
+      ACCESS_COOKIE_NAME: ${ACCESS_COOKIE_NAME:-dhv2_access}
+      REFRESH_COOKIE_NAME: ${REFRESH_COOKIE_NAME:-dhv2_refresh}
+      CSRF_COOKIE_NAME: ${CSRF_COOKIE_NAME:-dhv2_csrf}
+      ASSET_MEDIA_ROOT: /app/storage/asset-media
+      ASSET_IMPORT_ROOT: /app/storage/asset-media/imports
+      INSPECTION_EVIDENCE_ROOT: /app/storage/asset-media/inspection-findings
+      INSPECTION_REPORT_WORD_ROOT: /app/storage/asset-media/inspection-reports-word
+      INSPECTION_REPORT_REVISION_ROOT: /app/storage/asset-media/inspection-report-revisions
+      INSPECTION_ACT_PDF_ROOT: /app/storage/asset-media/inspection-acts-pdf
+      SMTP_HOST: ${SMTP_HOST:-}
+      SMTP_PORT: ${SMTP_PORT:-587}
+      SMTP_SECURE: ${SMTP_SECURE:-false}
+      SMTP_USER: ${SMTP_USER:-}
+      SMTP_PASS: ${SMTP_PASS:-}
+      MAIL_FROM: ${MAIL_FROM:-}
+    depends_on:
+      db:
+        condition: service_healthy
+    ports:
+      - "127.0.0.1:${API_HOST_PORT}:${API_PORT}"
+    volumes:
+      - dhv2_asset_media:/app/storage/asset-media
+    networks:
+      - dhv2_internal
+    security_opt:
+      - no-new-privileges:true
+
+  migrate:
+    build:
+      context: ./api-v3
+    container_name: dhv2-migrate
+    profiles:
+      - tools
+    restart: "no"
+    environment:
+      NODE_ENV: production
+      DB_HOST: db
+      DB_PORT: 5432
+      DB_NAME: ${DB_NAME}
+      DB_MIGRATION_USER: ${DB_OWNER_USER}
+      DB_MIGRATION_PASSWORD: ${DB_OWNER_PASSWORD}
+      DB_APP_USER: ${DB_APP_USER}
+    depends_on:
+      db:
+        condition: service_healthy
+    command: ["npm", "run", "migration:run"]
+    networks:
+      - dhv2_internal
+    security_opt:
+      - no-new-privileges:true
+
+  web:
+    build:
+      context: ./web-v2
+    container_name: dhv2-web
+    restart: unless-stopped
+    depends_on:
+      - api
+    ports:
+      - "127.0.0.1:${WEB_HOST_PORT}:80"
+    networks:
+      - dhv2_internal
+    security_opt:
+      - no-new-privileges:true
+
+networks:
+  dhv2_internal:
+    name: dhv2_internal
+
+volumes:
+  dhv2_pgdata:
+    name: dhv2_pgdata
+  dhv2_asset_media:
+    name: dhv2_asset_media