89 lines
2 KiB
YAML
89 lines
2 KiB
YAML
version: "2.3"
|
|
|
|
x-website: &website
|
|
image: registry.gitlab.com/realorangeone/website:latest
|
|
user: "{{ docker_user.id }}"
|
|
restart: unless-stopped
|
|
init: true
|
|
environment:
|
|
- TZ={{ timezone }}
|
|
- DEBUG=false
|
|
- SECRET_KEY={{ vault_website_secret_key }}
|
|
- DATABASE_URL=postgres://website:website@db/website?conn_max_age=600
|
|
- CACHE_URL=redis://redis/0
|
|
- QUEUE_STORE_URL=redis://redis/1
|
|
- RENDITION_CACHE_URL=redis://redis/2
|
|
- SPOTIFY_PROXY_URL=http://spotify_public_proxy
|
|
- UNSPLASH_CLIENT_ID={{ vault_unsplash_client_id }}
|
|
- SENTRY_DSN={{ vault_website_sentry_dsn }}
|
|
- BASE_HOSTNAME=theorangeone.net
|
|
- WEB_CONCURRENCY=3
|
|
- SEO_INDEX=true
|
|
- ACTIVITYPUB_HOST=mastodon.theorangeone.net
|
|
volumes:
|
|
- ./media:/app/media
|
|
tmpfs:
|
|
- /tmp
|
|
|
|
services:
|
|
nginx:
|
|
<<: *website
|
|
user: root
|
|
command: /app/etc/entrypoints/nginx
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.routers.website.rule=Host(`theorangeone.net`) || Host(`jakehoward.tech`)
|
|
networks:
|
|
- default
|
|
- traefik
|
|
depends_on:
|
|
- django
|
|
|
|
worker:
|
|
<<: *website
|
|
command: /app/etc/entrypoints/worker
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
|
|
cron:
|
|
<<: *website
|
|
command: /app/etc/entrypoints/cron
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
|
|
django:
|
|
<<: *website
|
|
command: /app/etc/entrypoints/web
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
|
|
db:
|
|
image: postgres:14-alpine
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./postgres:/var/lib/postgresql/data
|
|
environment:
|
|
- POSTGRES_PASSWORD=website
|
|
- POSTGRES_USER=website
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./redis:/data
|
|
|
|
spotify_public_proxy:
|
|
image: ghcr.io/realorangeone/spotify-public-proxy:latest
|
|
restart: unless-stopped
|
|
environment:
|
|
- PORT=80
|
|
- SPOTIFY_CLIENT_ID={{ vault_spotify_client_id }}
|
|
- SPOTIFY_CLIENT_SECRET={{ vault_spotify_client_secret }}
|
|
- SENTRY_DSN={{ vault_spotify_sentry_dsn }}
|
|
|
|
networks:
|
|
traefik:
|
|
external: true
|