docker-compose.yml

x-service-defaults: &service-defaults
  restart: always
  networks:
    - default

x-app-template: &app-template
  <<: *service-defaults
  image: ghcr.io/dtcooper/jewpizza-app:${PINNED_CONTAINER_VERSION:-latest}
  build:
    context: .
    dockerfile: backend/Dockerfile
    args:
      - "DEBUG=${DEBUG:-0}"
  volumes:
    - ./.env:/.env:ro
    - ./serve:/serve
  depends_on:
    - db
    - redis

services:
  app:
    <<: *app-template
    environment:
      - "TZ=${TIMEZONE:-US/Eastern}"
    networks:
      default:
        # Allow overriding for this container, so we can run multiple at once
        ipv4_address: "${APP_IP_OVERRIDE:-172.22.0.2}"  # Referenced in nginx/image/etc/nginx/templates/jewpizza.conf.j2

  tasks:
    <<: *app-template
    environment:
      - RUN_HUEY=1
      - "TZ=${TIMEZONE:-US/Eastern}"
    networks:
      default:
        ipv4_address: 172.22.0.3

  radio:
    <<: *service-defaults
    image: ghcr.io/dtcooper/jewpizza-radio:${PINNED_CONTAINER_VERSION:-latest}
    build:
      context: radio
      args:
        - "DEBUG=${DEBUG:-0}"
    init: true
    volumes:
      - ./.env:/.env:ro
    # Wait on app in /entrypoint.sh but don't list here, to avoid restarting container
    depends_on:
      - icecast
    environment:
      - "TZ=${TIMEZONE:-US/Eastern}"
    extra_hosts:
      - "host.docker.internal:host-gateway"
    labels:
      - "autoheal=true"
    networks:
      default:
        ipv4_address: 172.22.0.4

  nginx:
    <<: *service-defaults
    image: ghcr.io/dtcooper/jewpizza-nginx:${PINNED_CONTAINER_VERSION:-latest}
    build:
      context: nginx
    volumes:
      - nginx_secrets:/etc/letsencrypt
      - ./.env:/.env:ro
      - ./serve:/serve
    environment:
      - "CERTBOT_DNS_PROPAGATION_SECONDS=${CERTBOT_DNS_PROPAGATION_SECONDS:-90}"
      - "CERTBOT_EMAIL=${EMAIL_ADDRESS:?EMAIL_ADDRESS needs to be set. See .env file.}"
      - "DEBUG=${DEBUG:-0}"
      - "DIGITALOCEAN_API_TOKEN=${DIGITALOCEAN_API_TOKEN:-}"
      - "STAGING=${LETSENCRYPT_STAGING:-0}"
    ports:
      - "${HTTP_PORT:-80}:80"
      - "${HTTPS_PORT:-443}:443"
    networks:
      default:
        ipv4_address: 172.22.0.5

  icecast:
    <<: *service-defaults
    image: ghcr.io/dtcooper/jewpizza-icecast:${PINNED_CONTAINER_VERSION:-latest}
    build:
      context: icecast
    environment:
      - "DOMAIN_NAME=${DOMAIN_NAME:?DOMAIN_NAME needs to be set. See .env file.}"
      - "EMAIL_ADDRESS=${EMAIL_ADDRESS:?EMAIL_ADDRESS needs to be set. See .env file.}"
      - "ICECAST_ADMIN_PASSWORD=${ICECAST_ADMIN_PASSWORD:?ICECAST_ADMIN_PASSWORD needs to be set. See .env file.}"
      - "ICECAST_SOURCE_PASSWORD=${ICECAST_SOURCE_PASSWORD:?ICECAST_SOURCE_PASSWORD needs to be set. See .env file.}"
      - "TZ=${TIMEZONE:-US/Eastern}"
    ports:
      - "${ICECAST_PORT:-8888}:8888"
    networks:
      default:
        ipv4_address: 172.22.0.6  # Referenced in nginx/image/etc/nginx/templates/jewpizza.conf.j2

  db:
    <<: *service-defaults
    image: library/postgres:14.4-alpine
    volumes:
      - postgres_data:/var/lib/postgresql/data/
      - ./scripts/init-db.sh:/docker-entrypoint-initdb.d/init-db.sh
    environment:
      - POSTGRES_PASSWORD=postgres
      - "TZ=${TIMEZONE:-US/Eastern}"
    networks:
      default:
        ipv4_address: 172.22.0.7

  redis:
    <<: *service-defaults
    image: library/redis:7.0-alpine
    volumes:
      - redis_data:/data
    environment:
      - "TZ=${TIMEZONE:-US/Eastern}"
    networks:
      default:
        ipv4_address: 172.22.0.8  # Referenced in nginx/image/etc/nginx/templates/jewpizza.conf.j2

  umami:
    <<: *service-defaults
    image: ghcr.io/mikecao/umami:postgresql-v1.33.1
    depends_on:
      - db
    environment:
      - DATABASE_URL=postgresql://postgres:postgres@db:5432/umami
      - DATABASE_TYPE=postgresql
      - TELEMETRY_DISABLED=1
      - "HASH_SALT=${SECRET_KEY:?SECRET_KEY needs to be set. See .env file.}"
      - "IGNORE_IP=${UMAMI_IGNORE_IPS:-}"
      - "TZ=${TIMEZONE:-US/Eastern}"
    networks:
      default:
        ipv4_address: 172.22.0.9  # Referenced in nginx/image/etc/nginx/templates/jewpizza.conf.j2

  logs:
    <<: *service-defaults
    image: amir20/dozzle:v3.12.7
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - DOZZLE_TAILSIZE=2500
      - DOZZLE_NO_ANALYTICS=true
      - "DOZZLE_BASE=/cmsadmin/tools/logs"
      - "TZ=${TIMEZONE:-US/Eastern}"
    networks:
      default:
        ipv4_address: 172.22.0.10  # Referenced in nginx/image/etc/nginx/templates/jewpizza.conf.j2

  autoheal:
    <<: *service-defaults
    image: willfarrell/autoheal:1.2.0
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - AUTOHEAL_START_PERIOD=30
      - "TZ=${TIMEZONE:-US/Eastern}"
    networks:
      default:
        ipv4_address: 172.22.0.11

volumes:
  nginx_secrets:
  postgres_data:
  redis_data:

networks:
  default:
    name: jewpizza
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: "172.22.0.0/16"
          gateway: "172.22.0.1"