infrastructure/ansible/roles/commento/files/docker-compose.yml

version: "2.3"

services:
  commento:
    image: ghcr.io/souramoo/commentoplusplus:latest
    restart: unless-stopped
    depends_on:
      - db
    networks:
      - default
      - traefik
    labels:
      - traefik.enable=true
      - traefik.http.routers.commento.rule=Host(`commento.theorangeone.net`)
    environment:
      - COMMENTO_POSTGRES=postgres://commento:commento@db:5432/commento?sslmode=disable
      - COMMENTO_ORIGIN=https://commento.theorangeone.net
      - COMMENTO_GZIP_STATIC=true
      - COMMENTO_FORBID_NEW_OWNERS=true
      - COMMENTO_GITHUB_KEY={{ vault_commento_github_client_id }}
      - COMMENTO_GITHUB_SECRET={{ vault_commento_github_client_secret }}
      - COMMENTO_SMTP_HOST=smtp.eu.mailgun.org
      - COMMENTO_SMTP_PORT=587
      - COMMENTO_SMTP_USERNAME={{ vault_commento_smtp_username }}
      - COMMENTO_SMTP_PASSWORD={{ vault_commento_smtp_password }}
      - COMMENTO_SMTP_FROM_ADDRESS={{ vault_commento_from_email }}
      - COMMENTO_GITLAB_KEY={{ vault_commento_gitlab_application_id }}
      - COMMENTO_GITLAB_SECRET={{ vault_commento_gitlab_application_secret }}

  db:
    image: postgres:14-alpine
    restart: unless-stopped
    volumes:
      - ./postgres:/var/lib/postgresql/data
    environment:
      - POSTGRES_PASSWORD=commento
      - POSTGRES_USER=commento

networks:
  traefik:
    external: true