78 lines
1.9 KiB
YAML
78 lines
1.9 KiB
YAML
|
---
|
||
|
|
version: "3.8"
|
||
|
|
|
||
|
|
services:
|
||
|
|
app:
|
||
|
|
image: "decentral1se/members.lumbung.space:latest"
|
||
|
|
environment:
|
||
|
|
- APP_SECRET_KEY_FILE=/run/secrets/app_secret_key
|
||
|
|
- APP_THEME
|
||
|
|
- AUTOMATICALLY_LOG_IN
|
||
|
|
- INVITE_TIME_LIMIT
|
||
|
|
- KEYCLOAK_CLIENT_ID
|
||
|
|
- KEYCLOAK_CLIENT_SECRET_FILE=/run/secrets/keycloak_client_secret
|
||
|
|
- KEYCLOAK_DOMAIN
|
||
|
|
- KEYCLOAK_REALM
|
||
|
|
- REDIS_DB=0
|
||
|
|
- REDIS_HOST=cache
|
||
|
|
- REDIS_PORT=6379
|
||
|
|
secrets:
|
||
|
|
- app_secret_key
|
||
|
|
- keycloak_client_secret
|
||
|
|
networks:
|
||
|
|
- proxy
|
||
|
|
- internal
|
||
|
|
configs:
|
||
|
|
- source: entrypoint_sh
|
||
|
|
target: /usr/local/bin/entrypoint.sh
|
||
|
|
mode: 0555
|
||
|
|
entrypoint: /usr/local/bin/entrypoint.sh
|
||
|
|
healthcheck:
|
||
|
|
test: curl --fail 0.0.0.0:8000/healthz || exit 1
|
||
|
|
deploy:
|
||
|
|
update_config:
|
||
|
|
failure_action: rollback
|
||
|
|
order: start-first
|
||
|
|
labels:
|
||
|
|
- "traefik.enable=true"
|
||
|
|
- "traefik.http.services.kcp.loadbalancer.server.port=8000"
|
||
|
|
- "traefik.http.routers.kcp.rule=Host(`${DOMAIN}`)"
|
||
|
|
- "traefik.http.routers.kcp.entrypoints=web-secure"
|
||
|
|
- "traefik.http.routers.kcp.tls.certresolver=production"
|
||
|
|
command: |
|
||
|
|
uvicorn
|
||
|
|
--host 0.0.0.0
|
||
|
|
--forwarded-allow-ips="*"
|
||
|
|
--proxy-headers
|
||
|
|
members_lumbung_space.main:app
|
||
|
|
|
||
|
|
cache:
|
||
|
|
image: redis:6.2-alpine
|
||
|
|
networks:
|
||
|
|
- internal
|
||
|
|
healthcheck:
|
||
|
|
test: redis-cli ping
|
||
|
|
volumes:
|
||
|
|
- redis:/data
|
||
|
|
|
||
|
|
networks:
|
||
|
|
proxy:
|
||
|
|
external: true
|
||
|
|
internal:
|
||
|
|
configs:
|
||
|
|
entrypoint_sh:
|
||
|
|
name: ${STACK_NAME}_entrypoint_conf_${ENTRYPOINT_CONF_VERSION}
|
||
|
|
file: entrypoint.sh.tmpl
|
||
|
|
template_driver: golang
|
||
|
|
|
||
|
|
secrets:
|
||
|
|
app_secret_key:
|
||
|
|
external: true
|
||
|
|
name: ${STACK_NAME}_app_secret_key_${SECRET_APP_SECRET_KEY_VERSION}
|
||
|
|
keycloak_client_secret:
|
||
|
|
external: true
|
||
|
|
name: ${STACK_NAME}_keycloak_client_secret_${SECRET_KEYCLOAK_CLIENT_SECRET_VERSION}
|
||
|
|
|
||
|
|
volumes:
|
||
|
|
redis:
|