struxadotcloud/struxa

public

feat: global unslop6531421a month ago128 lines · 4.2 KB

1	# Production Docker Compose
2	# Usage: docker compose -f docker-compose.prod.yml --env-file .env.prod up -d
3	#
4	# Required .env.prod variables:
5	# IMAGE_TAG - release version to deploy (e.g. 1.0.0)
6	# MYSQL_ROOT_PASSWORD - strong root password for MySQL
7	# MYSQL_DATABASE - database name (e.g. struxav2)
8	# MYSQL_USER - app database user
9	# MYSQL_PASSWORD - app database password
10	# DATABASE_URL - full DSN using service name: mysql://user:pass@mysql:3306/struxav2
11	# BETTER_AUTH_SECRET - min 32-char random secret
12	# BETTER_AUTH_URL - public URL of the web app (e.g. https://panel.example.com)
13	# CORS_ORIGIN - allowed CORS origin URL
14	# JWT_PRIVATE_KEY - PEM or base64-encoded private key
15	# JWT_PUBLIC_KEY - PEM or base64-encoded public key
16	# DATABASE_ENCRYPTION_KEY - 64-char hex string
17	# APP_URL - public URL of the app
18	# TURNSTILE_SECRET_KEY - (optional) Cloudflare Turnstile secret
19	# BOOTSTRAP_SECRET - (optional) shared secret protecting /api/setup/bootstrap
20	# MINIO_ENDPOINT - internal MinIO URL (e.g. http://minio:9000)
21	# MINIO_ACCESS_KEY - MinIO root user / access key
22	# MINIO_SECRET_KEY - MinIO root password / secret key
23	# MINIO_BUCKET - storage bucket name (default: struxa)
24
25	services:
26	mysql:
27	image: mysql:8.4
28	restart: unless-stopped
29	environment:
30	MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
31	MYSQL_DATABASE: ${MYSQL_DATABASE}
32	MYSQL_USER: ${MYSQL_USER}
33	MYSQL_PASSWORD: ${MYSQL_PASSWORD}
34	volumes:
35	- mysql_data:/var/lib/mysql
36	healthcheck:
37	test: ["CMD",
38	interval: 5s
39	timeout: 5s
40	retries: 30
41	start_period: 60s
42	networks:
43	- struxa
44
45	minio:
46	image: minio/minio:latest
47	restart: unless-stopped
48	command: server /data --console-address ":9001"
49	environment:
50	MINIO_ROOT_USER: ${MINIO_ACCESS_KEY}
51	MINIO_ROOT_PASSWORD: ${MINIO_SECRET_KEY}
52	volumes:
53	- minio_data:/data
54	healthcheck:
55	test: ["CMD",
56	interval: 10s
57	timeout: 5s
58	retries: 10
59	networks:
60	- struxa
61
62	migrate:
63	image: ghcr.io/struxadotcloud/migrate:${IMAGE_TAG}
64	environment:
65	DATABASE_URL: ${DATABASE_URL}
66	depends_on:
67	mysql:
68	condition: service_healthy
69	restart: on-failure:5
70	networks:
71	- struxa
72
73	web:
74	image: ghcr.io/struxadotcloud/dashboard:${IMAGE_TAG}
75	restart: unless-stopped
76	ports:
77	- "${WEB_PORT:-3001}:3001"
78	environment:
79	DATABASE_URL: ${DATABASE_URL}
80	BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
81	BETTER_AUTH_URL: ${BETTER_AUTH_URL}
82	CORS_ORIGIN: ${CORS_ORIGIN}
83	NODE_ENV: production
84	TURNSTILE_SECRET_KEY: ${TURNSTILE_SECRET_KEY}
85	BOOTSTRAP_SECRET: ${BOOTSTRAP_SECRET:-}
86	JWT_PRIVATE_KEY: ${JWT_PRIVATE_KEY}
87	JWT_PUBLIC_KEY: ${JWT_PUBLIC_KEY}
88	DATABASE_ENCRYPTION_KEY: ${DATABASE_ENCRYPTION_KEY}
89	APP_URL: ${APP_URL}
90	MINIO_ENDPOINT: ${MINIO_ENDPOINT:-http://minio:9000}
91	MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY}
92	MINIO_SECRET_KEY: ${MINIO_SECRET_KEY}
93	MINIO_BUCKET: ${MINIO_BUCKET:-struxa}
94	depends_on:
95	migrate:
96	condition: service_completed_successfully
97	minio:
98	condition: service_healthy
99	networks:
100	- struxa
101
102	watchkeeper:
103	image: ghcr.io/struxadotcloud/watchkeeper:${IMAGE_TAG}
104	restart: unless-stopped
105	environment:
106	DATABASE_URL: ${DATABASE_URL}
107	BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
108	BETTER_AUTH_URL: ${BETTER_AUTH_URL}
109	CORS_ORIGIN: ${CORS_ORIGIN}
110	NODE_ENV: production
111	TURNSTILE_SECRET_KEY: ${TURNSTILE_SECRET_KEY}
112	JWT_PRIVATE_KEY: ${JWT_PRIVATE_KEY}
113	JWT_PUBLIC_KEY: ${JWT_PUBLIC_KEY}
114	DATABASE_ENCRYPTION_KEY: ${DATABASE_ENCRYPTION_KEY}
115	APP_URL: ${APP_URL}
116	depends_on:
117	migrate:
118	condition: service_completed_successfully
119	networks:
120	- struxa
121
122	volumes:
123	mysql_data:
124	minio_data:
125
126	networks:
127	struxa:
128	driver: bridge