slimfact/docker-compose.yaml at main · simsustech/slimfact · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
services:
  api:
    image: "ghcr.io/simsustech/slimfact:latest"
    labels:
      caddy: ${HOST}
      caddy.reverse_proxy: "{{upstreams 80}}"
    volumes:
      - ./jwks/:/app/dist/server/jwks/
    environment:
      # Modular API
      VITE_API_HOST: ${HOST}
      OIDC_ISSUER_NAME: ${OIDC_ISSUER_NAME}
      POSTGRES_HOST: ${POSTGRES_HOST}
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_PASSWORD_FILE: /run/secrets/POSTGRES_PASSWORD
      MAIL_HOST: ${MAIL_HOST}
      MAIL_PORT: ${MAIL_PORT}
      MAIL_FROM: ${MAIL_FROM}
      MAIL_USER: ${MAIL_USER}
      MAIL_PASS: ${MAIL_PASS}
      LICENSE_KEY: ${LICENSE_KEY}
      OIDC_COOKIES_KEYS: /run/secrets/OIDC_COOKIES_KEYS
      OTP_SECRET_FILE: /run/secrets/OTP_SECRET
      OTP_VALIDITY_SECONDS: 3600
      EMAIL_FOOTER: "Footer"
      VITE_TITLE: SlimFact dev
      VITE_LANG: en-US
      # VITE_OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}

    # entrypoint: ["/bin/sh", "-c", "tail -f /dev/null"]
    secrets:
      - POSTGRES_PASSWORD
      - OTP_SECRET
      - OIDC_COOKIES_KEYS
    networks:
      web:
      slimfact:
        aliases:
          - api
    restart: unless-stopped

  database:
    image: postgres
    environment:
      POSTGRES_PASSWORD_FILE: /run/secrets/POSTGRES_PASSWORD
      POSTGRES_DB: ${POSTGRES_DB}
    volumes:
      - ./database:/var/lib/postgresql/data
    secrets:
      - POSTGRES_PASSWORD
    networks:
      slimfact:
        aliases:
          - database
    restart: unless-stopped

secrets:
  POSTGRES_PASSWORD:
    file: ./env/POSTGRES_PASSWORD
  OTP_SECRET:
    file: ./env/OTP_SECRET
  OIDC_COOKIES_KEYS:
    file: ./env/OIDC_COOKIES_KEYS

networks:
  slimfact:
  web:
    external: true