syncref/docker-compose.yml at master · pbexe/syncref · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
version: '3'

services:
  traefik:
    image: traefik:v2.0
    container_name: traefik
    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--certificatesresolvers.mytlschallenge.acme.tlschallenge=true"
      - "--certificatesresolvers.mytlschallenge.acme.email=contact@milesbudden.com"
      - "--certificatesresolvers.mytlschallenge.acme.storage=/letsencrypt/acme.json"
    ports:
      - 80:80
      - 443:443
      - 8080:8080
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./letsencrypt:/letsencrypt
    depends_on:
      - app
    networks:
      - internal
      - proxy

  app:
    build: ./src
    container_name: app
    command: ["./start.sh", "db"]
    volumes:
      - static_volume:/code/static
      - ./src/logs/main/:/code/logs/
      - media_volume:/code/media
    ports:
      - 8000:8000
    labels:
      - "traefik.enable=true"
      - "traefik.http.middlewares.redirect-https.redirectscheme.scheme=https"
      - "traefik.http.routers.app-http.entrypoints=web"
      - "traefik.http.routers.app-http.rule=Host(`syncref.milesbudden.com`)"
      - "traefik.http.routers.app-http.middlewares=redirect-https@docker"
      - "traefik.http.routers.app-https.rule=Host(`syncref.milesbudden.com`)"
      - "traefik.http.routers.app-https.entrypoints=websecure"
      - "traefik.http.routers.app-https.tls.certresolver=mytlschallenge"
      - traefik.docker.network=proxy
    networks:
      - internal
      - proxy
    environment:
      NODE_ENV: production
      DJANGO_SUPERUSER_PASSWORD: ${DJANGO_SUPERUSER_PASSWORD}
      USERNAME_FIELD: ${USERNAME_FIELD}
      EMAIL_FIELD: ${EMAIL_FIELD}
    depends_on:
      - db

  nginx:
    image: nginx:1.15-alpine
    container_name: nginx
    restart: always
    volumes:
      - ./traefik-files/nginx.conf:/etc/nginx/conf.d/default.conf
      - static_volume:/static
      - media_volume:/media
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.static-http.entrypoints=websecure"
      - "traefik.http.routers.static-http.rule=Host(`syncref.milesbudden.com`) && (PathPrefix(`/static`) || PathPrefix(`/media`))"
      - "traefik.http.routers.static-http.tls.certresolver=mytlschallenge"
      - traefik.docker.network=proxy
    depends_on:
      - app
    networks:
      - internal
      - proxy

  db:
    image: postgres
    volumes:
      - postgres_data:/var/lib/postgresql/data
    # env_file: .env
    ports:
      - "5432"
    labels:
      - traefik.enable=false
    networks:
      - internal
    environment:
      POSTGRES_HOST_AUTH_METHOD: "trust"
      # POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}

  grobid:
    image: lfoppiano/grobid:0.5.6
    labels:
      - traefik.enable=false
    networks:
      - internal
    ports:
      - "8080"

volumes:
  static_volume:
  postgres_data:
  media_volume:

networks:
  proxy:
    external: true
  internal:
    external: false