vlo-boards-full/docker-compose.yml at main · gkju/vlo-boards-full · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
version: '3.9'

services:
    db:
      image: postgres:latest
      environment:
        - POSTGRES_PASSWORD_FILE=/run/secrets/pgpw
        - POSTGRES_USER_FILE=/run/secrets/pgusername
      volumes:
        - ./db:/var/lib/postgresql/data
      secrets:
        - pgpw
        - pgusername
      restart: on-failure
    minio:
      image: minio/minio:latest
      environment:
        - MINIO_REGION="eu-central-1"
        - MINIO_ROOT_USER_FILE=/run/secrets/minio__access
        - MINIO_ROOT_PASSWORD_FILE=/run/secrets/minio__secret
        - MINIO_BROWSER_REDIRECT_URL=https://consoleminio.suvlo.pl
      command:
        - server
        - /data
        - --console-address
        - ":9001"
      volumes:
        - ./minio-server:/data
      secrets:
        - minio__access
        - minio__secret
        - minio__endpoint
      labels:
        - "traefik.enable=true"
        - traefik.http.routers.minio.tls=true
        - "traefik.http.routers.minio.rule=Host(`minio.suvlo.pl`)"
        - "traefik.http.services.minio.loadbalancer.server.port=9000"
        - "traefik.http.routers.minio.service=minio"
        - traefik.http.routers.minio-console.tls=true
        - "traefik.http.routers.minio-console.service=minio-console"
        - "traefik.http.routers.minio-console.rule=Host(`consoleminio.suvlo.pl`)"
        - "traefik.http.services.minio-console.loadbalancer.server.port=9001"
      restart: on-failure
    clam:
      image: mailu/clamav:master-arm
      restart: on-failure
    meili:
      image: getmeili/meilisearch:latest
      volumes:
        - ./meili_data:/meili_data
      environment:
        - MEILI_MASTER_KEY=masterKey
      restart: on-failure
    boards:
      build:
        context: .
        dockerfile: ./vlo-main/Dockerfile
      environment:
        - ASPNETCORE_ENVIRONMENT=Production
        - ASPNETCORE_URLS=http://+
        - DOTNET_URLS=http://+
      depends_on:
        - db
        - minio
        - meili
        - clam
        - accounts
      secrets:
        - pgpw
        - pgusername
        - minio__access
        - minio__secret
        - minio__endpoint
        - CaptchaCredentials__PrivateKey
        - CaptchaCredentials__PublicKey
        - ConnectionStrings__IDENTITYDB
        - ConnectionStrings__NPGSQL
        - GoogleAuth__ClientId
        - GoogleAuth__SecretKey
        - MicrosoftAuth__ClientId
        - MicrosoftAuth__SecretKey
        - TwitterAuth__ClientId
        - TwitterAuth__SecretKey
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.boards.tls=true"
        - "traefik.http.routers.boards.service=boards"
        - "traefik.http.routers.boards.rule=Host(`suvlo.pl`) || Host(`boards.suvlo.pl`)"
        - "traefik.http.services.boards.loadbalancer.server.port=80"
      restart: on-failure
    accounts:
      build:
        context: .
        dockerfile: ./VLO-ACCOUNTS/Dockerfile
      environment:
        - ASPNETCORE_ENVIRONMENT=Production
        - ASPNETCORE_URLS=http://+
        - DOTNET_URLS=http://+
      depends_on:
        - db
        - minio
        - meili
        - clam
        - reverse-proxy
      secrets:
        - pgpw
        - pgusername
        - minio__access
        - minio__secret
        - minio__endpoint
        - CaptchaCredentials__PrivateKey
        - CaptchaCredentials__PublicKey
        - ConnectionStrings__IDENTITYDB
        - ConnectionStrings__NPGSQL
        - GoogleAuth__ClientId
        - GoogleAuth__SecretKey
        - MicrosoftAuth__ClientId
        - MicrosoftAuth__SecretKey
        - TwitterAuth__ClientId
        - TwitterAuth__SecretKey
        - IdentityServer__LicenseKey
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.accounts.tls=true"
        - "traefik.http.routers.accounts.service=accounts"
        - "traefik.http.routers.accounts.rule=Host(`accounts.suvlo.pl`)"
        - "traefik.http.services.accounts.loadbalancer.server.port=80"
      restart: on-failure
    reverse-proxy:
      # The official v2 Traefik docker image
      image: traefik:latest
      ports:
        - "80:80"
        - "443:443"
        - "9000:9000"
        - "9001:9001"
      command: --providers.docker
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.traefik.entrypoints=https,http,minio,minioconsole"
      volumes:
        - ./traefik/traefik.yml:/etc/traefik/traefik.yml:ro
        - ./traefik/config.yml:/etc/traefik/config.yml:ro
        - ./certs:/etc/certs:ro
        - /var/run/user/1001/docker.sock:/var/run/docker.sock:ro
      restart: on-failure
secrets:
  pgpw:
    file: ./secrets/pgpw
  pgusername:
    file: ./secrets/pgusername
  minio__access:
   file: ./secrets/minio__access
  minio__secret:
    file: ./secrets/minio__secret
  minio__endpoint:
    file: ./secrets/minio__endpoint
  CaptchaCredentials__PrivateKey:
    file: ./secrets/CaptchaCredentials__PrivateKey
  CaptchaCredentials__PublicKey:
    file: ./secrets/CaptchaCredentials__PublicKey
  ConnectionStrings__IDENTITYDB:
    file: ./secrets/ConnectionStrings__IDENTITYDB
  ConnectionStrings__NPGSQL:
    file: ./secrets/ConnectionStrings__NPGSQL
  GoogleAuth__ClientId:
    file: ./secrets/GoogleAuth__ClientId
  GoogleAuth__SecretKey:
    file: ./secrets/GoogleAuth__SecretKey
  MicrosoftAuth__ClientId:
    file: ./secrets/MicrosoftAuth__ClientId
  MicrosoftAuth__SecretKey:
    file: ./secrets/MicrosoftAuth__SecretKey
  TwitterAuth__ClientId:
    file: ./secrets/TwitterAuth__ClientId
  TwitterAuth__SecretKey:
    file: ./secrets/TwitterAuth__SecretKey
  IdentityServer__LicenseKey:
    file: ./secrets/IdentityServer__LicenseKey