Open Source Release
79 lines
2.5 KiB
YAML
79 lines
2.5 KiB
YAML
services:
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
environment:
|
|
POSTGRES_DB: service_center
|
|
POSTGRES_USER: service_center
|
|
# No fallback default — a missing .env value must stop the stack, not
|
|
# silently start Postgres with a well-known password.
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?POSTGRES_PASSWORD must be set in .env}
|
|
volumes:
|
|
- pg_data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U service_center"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
restart: unless-stopped
|
|
ports:
|
|
# Bound to this host's Tailscale IP only (never 0.0.0.0) — lets a
|
|
# standby replica's pg_basebackup/streaming replication reach this
|
|
# primary over the private tailnet, never the public internet. Adjust
|
|
# or drop this binding entirely if you don't run a failover replica.
|
|
- "${TAILSCALE_IP:-127.0.0.1}:5432:5432"
|
|
|
|
minio:
|
|
image: minio/minio
|
|
command: server /data --console-address ":9001"
|
|
environment:
|
|
# No fallback defaults — see POSTGRES_PASSWORD above for why.
|
|
MINIO_ROOT_USER: ${MINIO_ACCESS_KEY:?MINIO_ACCESS_KEY must be set in .env}
|
|
MINIO_ROOT_PASSWORD: ${MINIO_SECRET_KEY:?MINIO_SECRET_KEY must be set in .env}
|
|
volumes:
|
|
- minio_data:/data
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
restart: unless-stopped
|
|
ports:
|
|
# Same Tailscale-only binding as postgres above — lets a standby
|
|
# replica reach this bucket for MinIO bucket replication.
|
|
- "${TAILSCALE_IP:-127.0.0.1}:9000:9000"
|
|
|
|
backend:
|
|
build:
|
|
context: ./backend
|
|
dockerfile: Dockerfile
|
|
env_file: .env
|
|
ports:
|
|
# loopback-only — the host's system Caddy (/etc/caddy/Caddyfile) proxies
|
|
# to this port once a domain is chosen. Handy if this host runs other
|
|
# projects too, each on its own loopback port.
|
|
- "127.0.0.1:18090:3000"
|
|
networks:
|
|
default: {}
|
|
platform:
|
|
aliases:
|
|
- core
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
minio:
|
|
condition: service_healthy
|
|
restart: unless-stopped
|
|
|
|
# web (React+Vite frontend, UI ported from Glass CRM) joins here in Phase 1
|
|
|
|
volumes:
|
|
pg_data:
|
|
minio_data:
|
|
|
|
networks:
|
|
# Shared with module repos (e.g. production/) so they can reach core by
|
|
# name for heartbeat calls — core itself never dials out to modules.
|
|
platform:
|
|
name: platform_net
|
|
external: true
|