docker-compose.yaml

# This file is used to run your application locally with Docker Compose

version: "3.8"
services:
  full-stack-template-ingress:
    container_name: full-stack-template-ingress
    image: nginx:stable-alpine
    restart: unless-stopped
    networks:
      - default
    ports:
      # WARNING: Do not ever remove the 127.0.0.1 as on some systems Docker host ports are exposed outside the Firewall!
      - "127.0.0.1:9999:80"
    volumes:
      - "./docker-nginx.conf:/etc/nginx/nginx.conf:delegated"

  full-stack-template-admin:
    container_name: full-stack-template-admin
    build:
      context: ./admin
      dockerfile: ${dockerfile}
      args:
        USER_UID: ${taito_host_user_uid}
    restart: unless-stopped
    networks:
      - default
    ports:
      - "8080"
      # WARNING: Do not ever remove the 127.0.0.1 as on some systems Docker host ports are exposed outside the Firewall!
      - "127.0.0.1:9997:9997" # For lazy compilation
    volumes:
      - "./admin:/develop:delegated"
      - "./shared:/develop/shared:delegated"
      - "/develop/node_modules"
      - "/develop/.vite"
    environment:
      # Paths
      BASE_PATH: /admin
      REPLACE_BASE_PATH: /admin # For Dockerfile.build
      ASSETS_PATH: /admin
      REPLACE_ASSETS_PATH: /admin # For Dockerfile.build
      ASSETS_DOMAIN: ""
      REPLACE_ASSETS_DOMAIN: "" # For Dockerfile.build
      API_ROOT: ""
      API_URL: /api
      COMMON_PUBLIC_PORT: 9999
      COMPILE_PORT: 9997 # For lazy compilation
      # Host specific variables
      DOCKER_HOST: ${DOCKER_HOST}

  full-stack-template-client:
    container_name: full-stack-template-client
    build:
      context: ./client
      dockerfile: ${dockerfile}
      args:
        USER_UID: ${taito_host_user_uid}
    restart: unless-stopped
    networks:
      - default
    ports:
      - "8080"
    volumes:
      - "./client:/develop:delegated"
      - "./shared:/develop/shared:delegated"
      - "/develop/node_modules"
      - "/develop/.vite"
    secrets:
      - DATABASE_PASSWORD
    environment:
      # Paths
      BASE_PATH: ""
      REPLACE_BASE_PATH: "" # For Dockerfile.build
      ASSETS_PATH: ""
      REPLACE_ASSETS_PATH: "" # For Dockerfile.build
      ASSETS_DOMAIN: ""
      REPLACE_ASSETS_DOMAIN: "" # For Dockerfile.build
      API_ROOT: ""
      API_URL: /api
      COMMON_PUBLIC_PORT: 9999
      COMPILE_PORT: 9998 # For lazy compilation
      # Host specific variables
      DOCKER_HOST: ${DOCKER_HOST}
      # Services
      # NOTE: Database connection is for tests only
      DATABASE_HOST: full-stack-template-database
      DATABASE_PORT: ${db_database_port}
      DATABASE_NAME: ${db_database_name}
      DATABASE_USER: ${db_database_app_username}

  full-stack-template-server:
    container_name: full-stack-template-server
    build:
      context: ./server
      dockerfile: ${dockerfile}
      args:
        USER_UID: ${taito_host_user_uid}
    restart: unless-stopped
    networks:
      - default
    ports:
      - "8080"
      # WARNING: Do not ever remove the 127.0.0.1 as on some systems Docker host ports are exposed outside the Firewall!
      - "127.0.0.1:4229:9229"
    volumes:
      - "./server:/develop:delegated"
      - "./shared:/develop/shared:delegated"
      - "/develop/node_modules"
      - "/develop/vendor"
    secrets:
      - DATABASE_PASSWORD
      - REDIS_PASSWORD
      - SESSION_SECRET
      - EXAMPLE_SECRET
    environment:
      # Paths and bind
      BASE_PATH: /api
      API_PORT: 8080
      API_BINDADDR: 0.0.0.0
      COMMON_PUBLIC_PORT: 9999
      # Common variables
      COMMON_COMPANY: companyname
      COMMON_PROJECT: full-stack-template
      COMMON_DEBUG: "false"
      COMMON_LOG_FORMAT: text
      COMMON_LOG_LEVEL: info # trace, debug, info, warn, error, fatal
      COMMON_ENV: local
      COMMON_URL: http://localhost:9999
      # Services
      SENTRY_DSN: #sentryDSN
      DATABASE_HOST: full-stack-template-database
      DATABASE_PORT: ${db_database_port}
      DATABASE_NAME: ${db_database_name}
      DATABASE_USER: ${db_database_app_username}
      DATABASE_POOL_MIN: "1"
      DATABASE_POOL_MAX: "10"
      DATABASE_SSL_ENABLED: "${db_database_ssl_enabled}"
      DATABASE_SSL_CLIENT_CERT_ENABLED: "${db_database_ssl_client_cert_enabled}"
      DATABASE_SSL_SERVER_CERT_ENABLED: "${db_database_ssl_server_cert_enabled}"
      REDIS_HOST: full-stack-template-redis
      REDIS_PORT: 6379
      BUCKET_BUCKET: bucket
      BUCKET_REGION: milkyway
      BUCKET_ENDPOINT: http://full-stack-template-storage:9000/
      BUCKET_FORCE_PATH_STYLE: "true"
      BUCKET_KEY_ID: minio
      BUCKET_KEY_SECRET: ${taito_default_password}
      # Enable api docs and GraphQL/Swagger playground in local environment
      API_DOCS_ENABLED: true
      API_PLAYGROUND_ENABLED: true

  full-stack-template-worker:
    container_name: full-stack-template-worker
    build:
      context: ./worker
      dockerfile: ${dockerfile}
      args:
        USER_UID: ${taito_host_user_uid}
    tty: true
    restart: unless-stopped
    networks:
      - default
    ports:
      - "8080"
      # WARNING: Do not ever remove the 127.0.0.1 as on some systems Docker host ports are exposed outside the Firewall!
      - "127.0.0.1:5229:9229"
    volumes:
      - "./worker:/develop:delegated"
      - "./shared:/develop/shared:delegated"
      - "/develop/node_modules"
    secrets:
      - DATABASE_PASSWORD
      - REDIS_PASSWORD
      - EXAMPLE_SECRET
    environment:
      # Paths and bind
      API_PORT: 8080
      API_BINDADDR: 0.0.0.0
      COMMON_PUBLIC_PORT: 9999
      # Common variables
      COMMON_COMPANY: companyname
      COMMON_PROJECT: full-stack-template
      COMMON_DEBUG: "false"
      COMMON_LOG_FORMAT: text
      COMMON_LOG_LEVEL: info # trace, debug, info, warn, error, fatal
      COMMON_ENV: local
      COMMON_DOMAIN: localhost
      # Services
      SENTRY_DSN: #sentryDSN
      DATABASE_HOST: full-stack-template-database
      DATABASE_PORT: ${db_database_port}
      DATABASE_NAME: ${db_database_name}
      DATABASE_USER: ${db_database_app_username}
      DATABASE_POOL_MIN: "1"
      DATABASE_POOL_MAX: "10"
      DATABASE_SSL_ENABLED: "${db_database_ssl_enabled}"
      DATABASE_SSL_CLIENT_CERT_ENABLED: "${db_database_ssl_client_cert_enabled}"
      DATABASE_SSL_SERVER_CERT_ENABLED: "${db_database_ssl_server_cert_enabled}"
      REDIS_HOST: full-stack-template-redis
      REDIS_PORT: 6379
      BUCKET_BUCKET: bucket
      BUCKET_REGION: milkyway
      BUCKET_ENDPOINT: http://full-stack-template-storage:9000/
      BUCKET_FORCE_PATH_STYLE: "true"
      BUCKET_KEY_ID: minio
      BUCKET_KEY_SECRET: ${taito_default_password}

  full-stack-template-www:
    container_name: full-stack-template-www
    build:
      context: ./www
      dockerfile: ${dockerfile}
      args:
        USER_UID: ${taito_host_user_uid}
    restart: unless-stopped
    networks:
      - default
    ports:
      # TODO: Temporary hack for https://github.com/gatsbyjs/gatsby/issues/3721
      # WARNING: Do not ever remove the 127.0.0.1 as on some systems Docker host ports are exposed outside the Firewall!
      - "127.0.0.1:7463:8080"
    volumes:
      - "./www:/develop:delegated"
      - "/develop/node_modules"
      - "/develop/site/node_modules" # FOR GATSBY ONLY
      # FOR GATSBY ONLY:
      # - "/develop/site/node_modules"
    environment:
      # Paths
      BASE_PATH: /docs
      REPLACE_BASE_PATH: /docs # For Dockerfile.build
      ASSETS_PATH: /docs
      REPLACE_ASSETS_PATH: /docs # For Dockerfile.build
      ASSETS_DOMAIN: ""
      REPLACE_ASSETS_DOMAIN: "" # For Dockerfile.build
      COMMON_PUBLIC_PORT: 9999

  full-stack-template-redis:
    container_name: full-stack-template-redis
    image: bitnami/redis:6.0
    restart: unless-stopped
    networks:
      - default
    ports:
      - "6379"
    secrets:
      - REDIS_PASSWORD
    environment:
      REDIS_PASSWORD_FILE: "/run/secrets/REDIS_PASSWORD"
      REDIS_AOF_ENABLED: "no"

  # "EXTERNAL RESOURCES"

  full-stack-template-database:
    container_name: full-stack-template-database
    image: postgres:15
    restart: unless-stopped
    networks:
      - default
    ports:
      # WARNING: Do not ever remove the 127.0.0.1 as on some systems Docker host ports are exposed outside the Firewall!
      - "127.0.0.1:6000:5432"
    secrets:
      - DATABASE_PASSWORD
    environment:
      POSTGRES_DB: ${db_database_name}
      POSTGRES_USER: ${db_database_app_username}
      POSTGRES_PASSWORD_FILE: /run/secrets/DATABASE_PASSWORD
      MYSQL_ROOT_PASSWORD: ${taito_default_password}

  full-stack-template-storage:
    container_name: full-stack-template-storage
    build:
      context: ./storage
      dockerfile: ${dockerfile}
      args:
        USER_UID: ${taito_host_user_uid}
    restart: unless-stopped
    command: server /develop --console-address ":8888"
    networks:
      - default
    ports:
      - "9000"
      - "8888:8888"
    environment:
      MINIO_ROOT_USER: minio
      MINIO_ROOT_PASSWORD: ${taito_default_password}
      # Subpath not yet supported: https://github.com/minio/minio/issues/12727
      # MINIO_BROWSER_REDIRECT_URL: http://localhost:9999/minio

  # "TOOLS"

  # full-stack-template-pgadmin:
  #   container_name: full-stack-template-pgadmin
  #   image: dpage/pgadmin4
  #   restart: unless-stopped
  #   ports:
  #     - "8081:80"
  #   environment:
  #     PGADMIN_DEFAULT_EMAIL: admin@admin.com
  #     PGADMIN_DEFAULT_PASSWORD: root

  # full-stack-template-pgweb:
  #   container_name: full-stack-template-pgweb
  #   image: sosedoff/pgweb
  #   restart: unless-stopped
  #   ports:
  #     - "8081:8081"
  #   command: pgweb --bind=0.0.0.0 --listen=8080 --prefix pgweb --url postgres://${db_database_app_username}:${taito_default_password}@full-stack-template-database:${db_database_port}/${db_database_name}?sslmode=disable

secrets:
  DATABASE_PASSWORD:
    file: ./secrets/${taito_env}/${db_database_app_secret}
  REDIS_PASSWORD:
    file: ./secrets/${taito_env}/${taito_project}-${taito_env}-redis.password
  SESSION_SECRET:
    file: ./secrets/${taito_env}/${taito_project}-${taito_env}-session.secret
  EXAMPLE_SECRET:
    file: ./secrets/${taito_env}/${taito_project}-${taito_env}-example.secret

networks:
  default: