124 lines
3.6 KiB
YAML
124 lines
3.6 KiB
YAML
services:
|
|
db:
|
|
image: postgis/postgis:16-3.5
|
|
container_name: dhv2-db
|
|
restart: unless-stopped
|
|
shm_size: 256mb
|
|
environment:
|
|
POSTGRES_DB: ${DB_NAME}
|
|
POSTGRES_USER: ${DB_OWNER_USER}
|
|
POSTGRES_PASSWORD: ${DB_OWNER_PASSWORD}
|
|
APP_DB_USER: ${DB_APP_USER}
|
|
APP_DB_PASSWORD: ${DB_APP_PASSWORD}
|
|
volumes:
|
|
- dhv2_pgdata:/var/lib/postgresql/data
|
|
- ./infra/db-init:/docker-entrypoint-initdb.d:ro
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${DB_OWNER_USER} -d ${DB_NAME}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
networks:
|
|
- dhv2_internal
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
|
|
api:
|
|
build:
|
|
context: ./api-v3
|
|
container_name: dhv2-api
|
|
restart: unless-stopped
|
|
environment:
|
|
NODE_ENV: production
|
|
API_PORT: ${API_PORT}
|
|
DB_HOST: db
|
|
DB_PORT: 5432
|
|
DB_NAME: ${DB_NAME}
|
|
DB_APP_USER: ${DB_APP_USER}
|
|
DB_APP_PASSWORD: ${DB_APP_PASSWORD}
|
|
WEB_ORIGIN: ${WEB_ORIGIN}
|
|
JWT_ACCESS_SECRET: ${JWT_ACCESS_SECRET}
|
|
REFRESH_TOKEN_PEPPER: ${REFRESH_TOKEN_PEPPER}
|
|
ACCESS_TOKEN_TTL_SECONDS: ${ACCESS_TOKEN_TTL_SECONDS:-900}
|
|
REFRESH_TOKEN_TTL_SECONDS: ${REFRESH_TOKEN_TTL_SECONDS:-604800}
|
|
AUTH_MAX_LOGIN_ATTEMPTS: ${AUTH_MAX_LOGIN_ATTEMPTS:-5}
|
|
AUTH_LOCKOUT_SECONDS: ${AUTH_LOCKOUT_SECONDS:-900}
|
|
ACCESS_COOKIE_NAME: ${ACCESS_COOKIE_NAME:-dhv2_access}
|
|
REFRESH_COOKIE_NAME: ${REFRESH_COOKIE_NAME:-dhv2_refresh}
|
|
CSRF_COOKIE_NAME: ${CSRF_COOKIE_NAME:-dhv2_csrf}
|
|
ASSET_MEDIA_ROOT: /app/storage/asset-media
|
|
ASSET_IMPORT_ROOT: /app/storage/asset-media/imports
|
|
INSPECTION_EVIDENCE_ROOT: /app/storage/asset-media/inspection-findings
|
|
INSPECTION_SIGNATURE_ROOT: /app/storage/asset-media/inspection-signatures
|
|
INSPECTION_REPORT_UPLOAD_ROOT: /app/storage/asset-media/inspection-reports
|
|
INSPECTION_REPORT_WORD_ROOT: /app/storage/asset-media/inspection-reports-word
|
|
INSPECTION_REPORT_REVISION_ROOT: /app/storage/asset-media/inspection-report-revisions
|
|
INSPECTION_ACT_PDF_ROOT: /app/storage/asset-media/inspection-acts-pdf
|
|
COMPANY_SIGNATURE_PUBLIC_BASE_URL: ${COMPANY_SIGNATURE_PUBLIC_BASE_URL:-}
|
|
SMTP_SETTINGS_MASTER_KEY: ${SMTP_SETTINGS_MASTER_KEY:-}
|
|
SMTP_HOST: ${SMTP_HOST:-}
|
|
SMTP_PORT: ${SMTP_PORT:-587}
|
|
SMTP_SECURE: ${SMTP_SECURE:-false}
|
|
SMTP_USER: ${SMTP_USER:-}
|
|
SMTP_PASS: ${SMTP_PASS:-}
|
|
MAIL_FROM: ${MAIL_FROM:-}
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
ports:
|
|
- "127.0.0.1:${API_HOST_PORT}:${API_PORT}"
|
|
volumes:
|
|
- dhv2_asset_media:/app/storage/asset-media
|
|
networks:
|
|
- dhv2_internal
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
|
|
migrate:
|
|
build:
|
|
context: ./api-v3
|
|
container_name: dhv2-migrate
|
|
profiles:
|
|
- tools
|
|
restart: "no"
|
|
environment:
|
|
NODE_ENV: production
|
|
DB_HOST: db
|
|
DB_PORT: 5432
|
|
DB_NAME: ${DB_NAME}
|
|
DB_MIGRATION_USER: ${DB_OWNER_USER}
|
|
DB_MIGRATION_PASSWORD: ${DB_OWNER_PASSWORD}
|
|
DB_APP_USER: ${DB_APP_USER}
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
command: ["npm", "run", "migration:run"]
|
|
networks:
|
|
- dhv2_internal
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
|
|
web:
|
|
build:
|
|
context: ./web-v2
|
|
container_name: dhv2-web
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- api
|
|
ports:
|
|
- "127.0.0.1:${WEB_HOST_PORT}:80"
|
|
networks:
|
|
- dhv2_internal
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
|
|
networks:
|
|
dhv2_internal:
|
|
name: dhv2_internal
|
|
|
|
volumes:
|
|
dhv2_pgdata:
|
|
name: dhv2_pgdata
|
|
dhv2_asset_media:
|
|
name: dhv2_asset_media
|