feat: 프로덕션용 컴포즈 개선

- 인증서 최초 발급 로직 분리
- 인증서 갱신 봇 도입

Author: Tolerblanc

compose.prod.yml

@@ -1,24 +1,21 @@
+version: "3.8"
+
 services:
-    nginx-proxy:
+    nginx:
         image: nginx:alpine
         restart: always
         ports:
             - "80:80"
             - "443:443"
         volumes:
             - ./services/nginx/conf.d/prod_nginx.conf:/etc/nginx/conf.d/default.conf
-            - ./data/certbot/conf:/etc/letsencrypt
+            - ./data/certbot/conf:/etc/letsencrypt:ro
             - ./data/certbot/www:/var/www/certbot
             - ./apps/frontend/dist:/usr/share/nginx/html:ro
         networks:
             - frontend
-
-    certbot:
-        image: certbot/certbot
-        volumes:
-            - ./data/certbot/conf:/etc/letsencrypt
-            - ./data/certbot/www:/var/www/certbot
-        entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
+        depends_on:
+            - backend
 
     backend:
         build:
@@ -35,6 +32,8 @@ services:
         networks:
             - frontend
             - backend
+        depends_on:
+            - redis
 
     redis:
         image: redis:latest
@@ -44,11 +43,16 @@ services:
         networks:
             - backend
 
+    certbot-renewer:
+        image: certbot/certbot:latest
+        volumes:
+            - ./data/certbot/conf:/etc/letsencrypt
+            - ./data/certbot/www:/var/www/certbot
+            - ./data/certbot/log:/var/log/letsencrypt
+        entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew --webroot --webroot-path=/var/www/certbot; sleep 12h & wait $${!}; done;'"
+
 networks:
     frontend:
         driver: bridge
     backend:
         driver: bridge
-
-volumes:
-    nginx_certs: