Tomas Kracmar
11fd87411d
- Add VERSION build arg to Dockerfile - Pass --build-arg VERSION in release workflow - Remove VERSION env override from docker-compose files - Version is now immutable inside the image, no runtime env var needed
66 lines
1.6 KiB
YAML
66 lines
1.6 KiB
YAML
services:
|
|
mongo:
|
|
image: mongo:7
|
|
container_name: aoc-mongo
|
|
restart: always
|
|
# Do NOT expose MongoDB port to the host in production
|
|
# Only backend can reach it via the internal Docker network
|
|
environment:
|
|
MONGO_INITDB_ROOT_USERNAME: ${MONGO_ROOT_USERNAME}
|
|
MONGO_INITDB_ROOT_PASSWORD: ${MONGO_ROOT_PASSWORD}
|
|
volumes:
|
|
- mongo_data:/data/db
|
|
networks:
|
|
- aoc-internal
|
|
healthcheck:
|
|
test: ["CMD", "mongosh", "--eval", "db.adminCommand('ping')"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 10s
|
|
|
|
backend:
|
|
image: git.cqre.net/cqrenet/aoc-backend:${AOC_VERSION:-latest}
|
|
container_name: aoc-backend
|
|
restart: always
|
|
env_file:
|
|
- .env
|
|
environment:
|
|
MONGO_URI: mongodb://${MONGO_ROOT_USERNAME}:${MONGO_ROOT_PASSWORD}@mongo:27017/
|
|
depends_on:
|
|
mongo:
|
|
condition: service_healthy
|
|
networks:
|
|
- aoc-internal
|
|
healthcheck:
|
|
test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"]
|
|
interval: 15s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
nginx:
|
|
image: nginx:alpine
|
|
container_name: aoc-nginx
|
|
restart: always
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
volumes:
|
|
- ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
|
|
- ./nginx/ssl:/etc/nginx/ssl:ro
|
|
depends_on:
|
|
backend:
|
|
condition: service_healthy
|
|
networks:
|
|
- aoc-internal
|
|
- aoc-public
|
|
|
|
volumes:
|
|
mongo_data:
|
|
|
|
networks:
|
|
aoc-internal:
|
|
internal: true
|
|
aoc-public:
|