elpatron
b9ce853059
Add rotate-postgres-password.sh with optional app role, document the procedure, and stop defaulting production POSTGRES_PASSWORD to postgres. Co-authored-by: Cursor <cursoragent@cursor.com>
61 lines
1.8 KiB
YAML
61 lines
1.8 KiB
YAML
services:
|
|
db:
|
|
image: postgres:16-alpine
|
|
container_name: daagbox-prod-db
|
|
restart: always
|
|
environment:
|
|
POSTGRES_USER: ${POSTGRES_USER:-postgres}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}
|
|
POSTGRES_DB: ${POSTGRES_DB:-daagbox}
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U \"$$POSTGRES_USER\" -d \"$$POSTGRES_DB\""]
|
|
# Not published to the host — reachable only on the Compose network (do not add ports: here)
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
backend:
|
|
build:
|
|
context: ./server
|
|
dockerfile: Dockerfile
|
|
container_name: daagbox-prod-backend
|
|
restart: always
|
|
environment:
|
|
PORT: 5000
|
|
DATABASE_URL: "postgresql://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB:-daagbox}?schema=public"
|
|
RP_ID: ${RP_ID:-localhost}
|
|
ORIGIN: ${ORIGIN:-http://localhost}
|
|
TRUST_PROXY: ${TRUST_PROXY:-1}
|
|
VAPID_PUBLIC_KEY: ${VAPID_PUBLIC_KEY:-}
|
|
VAPID_PRIVATE_KEY: ${VAPID_PRIVATE_KEY:-}
|
|
VAPID_SUBJECT: ${VAPID_SUBJECT:-mailto:support@kapteins-daagbok.eu}
|
|
OpenWeatherMapAPIKey: ${OpenWeatherMapAPIKey:-}
|
|
SESSION_SECRET: ${SESSION_SECRET:-}
|
|
NTFY_SERVER: ${NTFY_SERVER:-https://ntfy.sh}
|
|
NTFY_TOPIC: ${NTFY_TOPIC:-}
|
|
NTFY_TOKEN: ${NTFY_TOKEN:-}
|
|
command: sh -c "npx prisma db push && node dist/index.js"
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
|
|
frontend:
|
|
build:
|
|
context: .
|
|
dockerfile: client/Dockerfile
|
|
args:
|
|
APP_VERSION: ${APP_VERSION:-0.1.0.0-dev}
|
|
container_name: daagbox-prod-frontend
|
|
restart: always
|
|
ports:
|
|
- "80:80"
|
|
depends_on:
|
|
backend:
|
|
condition: service_healthy
|
|
|
|
volumes:
|
|
pgdata:
|
|
name: daagbox-prod-pgdata
|