stack-ghost.yml

version: '3.7'

x-default-opts:
  &default-opts
  logging:
    options:
      max-size: "1m"
  # driver: "gelf"
  # options:
  #   gelf-address: "udp://127.0.0.1:5000"

services:

  ghost:
    <<: *default-opts
    image: ghost:alpine
    networks:
      - proxy
      - ghost
    environment:
      # see https://docs.ghost.org/docs/config#section-running-ghost-with-config-env-variables
      database__client: mysql
      database__connection__host: db
      database__connection__user: root
      database__connection__password: YOURDBPASSWORDhere
      database__connection__database: ghost
      url: http://ghost.dogvs.cat
    deploy:
      replicas: 1
      labels:
        traefik.http.routers.ghost.rule: Host(`ghost.dogvs.cat`)
        traefik.http.routers.ghost.entryPoints: websecure
        traefik.http.routers.ghost.service: ghost
        traefik.http.services.ghost.loadbalancer.server.port: 2368

  db:
    <<: *default-opts
    image: mysql:5.7
    volumes:
      - db:/var/lib/mysql
    secrets:
      - db-password
    networks:
      - ghost
    deploy:
      endpoint_mode: dnsrr
    environment:
      MYSQL_ROOT_PASSWORD_FILE: /run/secrets/db-password

# NOTE: table locking is a concern. Maybe use --single-transaction=TRUE for innoDB
  db-backup:
    <<: *default-opts
    image: mysql:5.7
    command: sh -c "while true; do /usr/bin/mysqldump -u root --password=$$(< $$MYSQL_ROOT_PASSWORD_FILE) --all-databases --host=db > /backup/backup$$(date +'%H').sql ; sleep 3600; done"
    volumes:
      - db-backup:/backup
    secrets:
      - db-password
    networks:
      - ghost
    environment:
      MYSQL_ROOT_PASSWORD_FILE: /run/secrets/db-password
    deploy:
      restart_policy:
        delay: 600s

  #TODO: backup for static content


networks:
  ghost: {}
  proxy:
    external: true

volumes:
  db:
    driver: rexray/dobs
    driver_opts:
      size: 1
  db-backup:
    driver: rexray/dobs
    driver_opts:
      size: 1

secrets:
  db-password:
    file: ./secret-ghost-db
    name: db-password