Nikola Derežić
16eaa5bfa1
Docker overwrites /etc/hosts at container runtime, so copying it during build (COPY command) or mounting it as volume doesn't work reliably. Moved to extra_hosts in docker-compose files for both standalone and swarm deployments. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
85 lines
3.4 KiB
YAML
85 lines
3.4 KiB
YAML
# docker-compose.yml
|
|
version: "3.9"
|
|
|
|
networks:
|
|
traefik-network:
|
|
name: traefik-network
|
|
external: true
|
|
util-bills-mongo-network:
|
|
name: "util-bills-mongo-network"
|
|
attachable: false
|
|
external: false
|
|
internal: true # bridge network, isolated from host and other networks
|
|
|
|
services:
|
|
web-app:
|
|
image: registry.budakova.org/knee-cola/utility-bills-tracker:${IMAGE_VERSION}
|
|
networks:
|
|
- traefik-network
|
|
- util-bills-mongo-network
|
|
# NextJS will do name resolution for `rezije.app` and will crash if it
|
|
# resolves to an IP adress different from the one assigned to the Docker container.
|
|
# This will prevent that from happening.
|
|
extra_hosts:
|
|
- "rezije.app:0.0.0.0"
|
|
environment:
|
|
MONGODB_URI: mongodb://rezije.app:w4z4piJBgCdAm4tpawqB@mongo:27017/utility-bills
|
|
GOOGLE_ID: 355397364527-adjrokm6hromcaaar0qfhk050mfr35ou.apps.googleusercontent.com
|
|
GOOGLE_SECRET: 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
|
|
AUTH_SECRET: Gh0jQ35oq6DR8HkLR3heA8EaEDtxYN/xkP6blvukZ0w=
|
|
LINKEDIN_ID: 776qlcsykl1rag
|
|
LINKEDIN_SECRET: ugf61aJ2iyErLK40
|
|
HOSTNAME: rezije.app # IP address at which the server will be listening (0.0.0.0 = listen on all addresses)
|
|
NEXTAUTH_URL: https://rezije.app # URL next-auth will use while redirecting user during authentication (if not set - will use HOSTNAME)
|
|
PORT: ${PORT:-3000}
|
|
# Share link security
|
|
SHARE_LINK_SECRET: ef68362357315d5decb27d24ff9abdb4a02a3351cd2899f79bf238dce0fe08c5
|
|
SHARE_TTL_INITIAL_DAYS: 10
|
|
SHARE_TTL_AFTER_VISIT_HOURS: 1
|
|
# Upload rate limiting
|
|
UPLOAD_RATE_LIMIT_PER_IP: 5
|
|
UPLOAD_RATE_LIMIT_WINDOW_MS: 3600000
|
|
container_name: evidencija-rezija__web-app
|
|
restart: unless-stopped # u slučaju rušenja containera pokušavaj ga pokrenuti dok ne uspije = BESKONAČNO
|
|
depends_on:
|
|
- mongo
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.docker.network=traefik-network # mreže preko koje ide komunikacija sa Traefikom
|
|
- traefik.http.services.web-app.loadbalancer.server.port=3000
|
|
- traefik.http.routers.web-app.entrypoints=http
|
|
- traefik.http.routers.web-app.rule=Host(`${FQDN:-rezije.app}`)
|
|
|
|
mongo:
|
|
image: mongo:4.4.27
|
|
container_name: evidencija-rezija__mongo
|
|
restart: unless-stopped # u slučaju rušenja containera pokušavaj ga pokrenuti dok ne uspije = BESKONAČNO
|
|
environment:
|
|
MONGO_INITDB_ROOT_USERNAME: root
|
|
MONGO_INITDB_ROOT_PASSWORD: example
|
|
volumes:
|
|
- /home/knee-cola/docker/evidencija-rezija/mongo-volume:/data/db
|
|
- /home/knee-cola/docker/evidencija-rezija/mongo-backup:/backup
|
|
networks:
|
|
- util-bills-mongo-network
|
|
mongo-express:
|
|
image: mongo-express
|
|
environment:
|
|
ME_CONFIG_MONGODB_ADMINUSERNAME: root
|
|
ME_CONFIG_MONGODB_ADMINPASSWORD: HjktJCPWMBtM1ACrDaw7
|
|
ME_CONFIG_MONGODB_URL: mongodb://root:HjktJCPWMBtM1ACrDaw7@mongo:27017/
|
|
networks:
|
|
- traefik-network
|
|
- util-bills-mongo-network
|
|
container_name: evidencija-rezija__mongo-express
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- mongo
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.docker.network=traefik-network # mreže preko koje ide komunikacija sa Traefikom
|
|
- traefik.http.services.mongo-express.loadbalancer.server.port=8081
|
|
- traefik.http.routers.mongo-express.entrypoints=http
|
|
- traefik.http.routers.mongo-express.rule=Host(`mongo.rezije.app`)
|
|
|