46a84a9f9a
- Fuse deploy-caddy.yml and cloudflare.yml into deploy.yml - Add env.local.j2 template for production secrets - Vault: add all production secrets - Workflow: single deploy.yml playbook - MailerService: rewrite with S/MIME signing, email tracking, unsubscribe - ngrok-sync: run as root for .env.local write access - Fix domain references to ticket.e-cosplay.fr Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
156 lines
3.2 KiB
YAML
156 lines
3.2 KiB
YAML
services:
|
|
php:
|
|
build:
|
|
context: ./docker/php/dev
|
|
dockerfile: Dockerfile
|
|
container_name: e_ticket_php
|
|
restart: unless-stopped
|
|
volumes:
|
|
- .:/app
|
|
ports:
|
|
- "9000:9000"
|
|
depends_on:
|
|
database:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
|
|
database:
|
|
image: postgres:16-alpine
|
|
container_name: e_ticket_database
|
|
environment:
|
|
POSTGRES_USER: app
|
|
POSTGRES_PASSWORD: secret
|
|
POSTGRES_DB: e_ticket
|
|
ports:
|
|
- "5432:5432"
|
|
volumes:
|
|
- db-data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U app -d e_ticket"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: e_ticket_redis
|
|
command: redis-server --requirepass e_ticket
|
|
ports:
|
|
- "6379:6379"
|
|
volumes:
|
|
- redis-data:/data
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "-a", "e_ticket", "ping"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
caddy:
|
|
image: caddy:2-alpine
|
|
container_name: e_ticket_caddy
|
|
ports:
|
|
- "8000:80"
|
|
volumes:
|
|
- ./docker/caddy/Caddyfile:/etc/caddy/Caddyfile
|
|
- .:/app
|
|
depends_on:
|
|
- php
|
|
|
|
messenger:
|
|
build:
|
|
context: ./docker/php/dev
|
|
dockerfile: Dockerfile
|
|
container_name: e_ticket_messenger
|
|
command: php bin/console messenger:consume async -vv
|
|
restart: unless-stopped
|
|
volumes:
|
|
- .:/app
|
|
depends_on:
|
|
database:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
|
|
bun:
|
|
image: oven/bun:alpine
|
|
container_name: e_ticket_bun
|
|
working_dir: /app
|
|
volumes:
|
|
- .:/app
|
|
- bun-modules:/app/node_modules
|
|
command: sh -c "bun install && bun run dev"
|
|
ports:
|
|
- "5173:5173"
|
|
|
|
mailpit:
|
|
image: axllent/mailpit
|
|
container_name: e_ticket_mailpit
|
|
ports:
|
|
- "1025:1025"
|
|
- "8025:8025"
|
|
|
|
vault:
|
|
image: hashicorp/vault:latest
|
|
container_name: e_ticket_vault
|
|
cap_add:
|
|
- IPC_LOCK
|
|
environment:
|
|
VAULT_DEV_ROOT_TOKEN_ID: e_ticket
|
|
VAULT_DEV_LISTEN_ADDRESS: 0.0.0.0:8200
|
|
ports:
|
|
- "8200:8200"
|
|
volumes:
|
|
- vault-data:/vault/file
|
|
|
|
minio:
|
|
image: minio/minio:latest
|
|
container_name: e_ticket_minio
|
|
command: server /data --console-address ":9001"
|
|
environment:
|
|
MINIO_ROOT_USER: e_ticket
|
|
MINIO_ROOT_PASSWORD: e_ticket
|
|
ports:
|
|
- "9090:9000"
|
|
- "9001:9001"
|
|
volumes:
|
|
- minio-data:/data
|
|
|
|
ngrok:
|
|
image: ngrok/ngrok:latest
|
|
container_name: e_ticket_ngrok
|
|
command: http caddy:80 --log stdout
|
|
environment:
|
|
NGROK_AUTHTOKEN: GXtZtKtRxRF5TFV5pCKD_25f1ALUyQQ9LkyQJgv1dr
|
|
ports:
|
|
- "4040:4040"
|
|
depends_on:
|
|
- caddy
|
|
|
|
ngrok-sync:
|
|
image: curlimages/curl:latest
|
|
container_name: e_ticket_ngrok_sync
|
|
user: "0:0"
|
|
volumes:
|
|
- .:/app
|
|
- ./docker/ngrok/sync.sh:/sync.sh
|
|
depends_on:
|
|
- ngrok
|
|
entrypoint: sh /sync.sh
|
|
|
|
redisinsight:
|
|
image: redis/redisinsight:latest
|
|
container_name: e_ticket_redisinsight
|
|
ports:
|
|
- "5540:5540"
|
|
depends_on:
|
|
redis:
|
|
condition: service_healthy
|
|
|
|
volumes:
|
|
db-data:
|
|
redis-data:
|
|
bun-modules:
|
|
vault-data:
|
|
minio-data:
|