struxadotcloud/struxa

public

fix: make install more resilient to slow/crashed MySQL migrations4054fcb3 months ago126 lines · 4.1 KB

1	# Production Docker Compose
2	# Usage: docker compose -f docker-compose.prod.yml --env-file .env.prod up -d
3	#
4	# Required .env.prod variables:
5	# IMAGE_TAG — release version to deploy (e.g. 1.0.0)
6	# MYSQL_ROOT_PASSWORD — strong root password for MySQL
7	# MYSQL_DATABASE — database name (e.g. struxav2)
8	# MYSQL_USER — app database user
9	# MYSQL_PASSWORD — app database password
10	# DATABASE_URL — full DSN using service name: mysql://user:pass@mysql:3306/struxav2
11	# BETTER_AUTH_SECRET — min 32-char random secret
12	# BETTER_AUTH_URL — public URL of the web app (e.g. https://panel.example.com)
13	# CORS_ORIGIN — allowed CORS origin URL
14	# JWT_PRIVATE_KEY — PEM or base64-encoded private key
15	# JWT_PUBLIC_KEY — PEM or base64-encoded public key
16	# DATABASE_ENCRYPTION_KEY — 64-char hex string
17	# APP_URL — public URL of the app
18	# TURNSTILE_SECRET_KEY — (optional) Cloudflare Turnstile secret
19	# MINIO_ENDPOINT — internal MinIO URL (e.g. http://minio:9000)
20	# MINIO_ACCESS_KEY — MinIO root user / access key
21	# MINIO_SECRET_KEY — MinIO root password / secret key
22	# MINIO_BUCKET — storage bucket name (default: struxa)
23
24	services:
25	mysql:
26	image: mysql:8.4
27	restart: unless-stopped
28	environment:
29	MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
30	MYSQL_DATABASE: ${MYSQL_DATABASE}
31	MYSQL_USER: ${MYSQL_USER}
32	MYSQL_PASSWORD: ${MYSQL_PASSWORD}
33	volumes:
34	- mysql_data:/var/lib/mysql
35	healthcheck:
36	test: ["CMD",
37	interval: 5s
38	timeout: 5s
39	retries: 30
40	start_period: 60s
41	networks:
42	- struxa
43
44	minio:
45	image: minio/minio:latest
46	restart: unless-stopped
47	command: server /data --console-address ":9001"
48	environment:
49	MINIO_ROOT_USER: ${MINIO_ACCESS_KEY}
50	MINIO_ROOT_PASSWORD: ${MINIO_SECRET_KEY}
51	volumes:
52	- minio_data:/data
53	healthcheck:
54	test: ["CMD",
55	interval: 10s
56	timeout: 5s
57	retries: 10
58	networks:
59	- struxa
60
61	migrate:
62	image: ghcr.io/struxadotcloud/migrate:${IMAGE_TAG}
63	environment:
64	DATABASE_URL: ${DATABASE_URL}
65	depends_on:
66	mysql:
67	condition: service_healthy
68	restart: on-failure:5
69	networks:
70	- struxa
71
72	web:
73	image: ghcr.io/struxadotcloud/dashboard:${IMAGE_TAG}
74	restart: unless-stopped
75	ports:
76	- "${WEB_PORT:-3001}:3001"
77	environment:
78	DATABASE_URL: ${DATABASE_URL}
79	BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
80	BETTER_AUTH_URL: ${BETTER_AUTH_URL}
81	CORS_ORIGIN: ${CORS_ORIGIN}
82	NODE_ENV: production
83	TURNSTILE_SECRET_KEY: ${TURNSTILE_SECRET_KEY}
84	JWT_PRIVATE_KEY: ${JWT_PRIVATE_KEY}
85	JWT_PUBLIC_KEY: ${JWT_PUBLIC_KEY}
86	DATABASE_ENCRYPTION_KEY: ${DATABASE_ENCRYPTION_KEY}
87	APP_URL: ${APP_URL}
88	MINIO_ENDPOINT: ${MINIO_ENDPOINT:-http://minio:9000}
89	MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY}
90	MINIO_SECRET_KEY: ${MINIO_SECRET_KEY}
91	MINIO_BUCKET: ${MINIO_BUCKET:-struxa}
92	depends_on:
93	migrate:
94	condition: service_completed_successfully
95	minio:
96	condition: service_healthy
97	networks:
98	- struxa
99
100	watchkeeper:
101	image: ghcr.io/struxadotcloud/watchkeeper:${IMAGE_TAG}
102	restart: unless-stopped
103	environment:
104	DATABASE_URL: ${DATABASE_URL}
105	BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
106	BETTER_AUTH_URL: ${BETTER_AUTH_URL}
107	CORS_ORIGIN: ${CORS_ORIGIN}
108	NODE_ENV: production
109	TURNSTILE_SECRET_KEY: ${TURNSTILE_SECRET_KEY}
110	JWT_PRIVATE_KEY: ${JWT_PRIVATE_KEY}
111	JWT_PUBLIC_KEY: ${JWT_PUBLIC_KEY}
112	DATABASE_ENCRYPTION_KEY: ${DATABASE_ENCRYPTION_KEY}
113	APP_URL: ${APP_URL}
114	depends_on:
115	migrate:
116	condition: service_completed_successfully
117	networks:
118	- struxa
119
120	volumes:
121	mysql_data:
122	minio_data:
123
124	networks:
125	struxa:
126	driver: bridge