Marc Mintel
f2c0a4581c
All checks were successful
Monorepo Pipeline / 🧪 Quality Assurance (push) Successful in 2m6s
Monorepo Pipeline / 🚀 Release (push) Has been skipped
Monorepo Pipeline / 🐳 Build Directus (Base) (push) Has been skipped
Monorepo Pipeline / 🐳 Build Gatekeeper (Product) (push) Has been skipped
Monorepo Pipeline / 🐳 Build Build-Base (push) Has been skipped
Monorepo Pipeline / 🐳 Build Production Runtime (push) Has been skipped
108 lines
4.4 KiB
YAML
108 lines
4.4 KiB
YAML
services:
|
|
app:
|
|
restart: always
|
|
networks:
|
|
- infra
|
|
env_file:
|
|
- ${ENV_FILE:-.env}
|
|
labels:
|
|
- "traefik.enable=true"
|
|
# HTTP ⇒ HTTPS redirect
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}-web.rule=Host(${TRAEFIK_HOST}) && !PathPrefix(`/.well-known/acme-challenge/`)"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}-web.entrypoints=web"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}-web.middlewares=redirect-https"
|
|
# HTTPS router
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}.rule=Host(${TRAEFIK_HOST})"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}.entrypoints=websecure"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}.tls.certresolver=le"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}.tls=true"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}.service=${PROJECT_NAME:-app}"
|
|
- "traefik.http.services.${PROJECT_NAME:-app}.loadbalancer.server.port=3000"
|
|
- "traefik.http.services.${PROJECT_NAME:-app}.loadbalancer.server.scheme=http"
|
|
# Forwarded Headers
|
|
- "traefik.http.middlewares.${PROJECT_NAME:-app}-forward.headers.customrequestheaders.X-Forwarded-Proto=https"
|
|
- "traefik.http.middlewares.${PROJECT_NAME:-app}-forward.headers.customrequestheaders.X-Forwarded-Ssl=on"
|
|
# Middlewares (Auth + Compress)
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}.middlewares=${PROJECT_NAME:-app}-forward,${AUTH_MIDDLEWARE:-compress}"
|
|
|
|
# Gatekeeper Router (to show the login page)
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}-gatekeeper.rule=Host(${TRAEFIK_HOST}) && PathPrefix(`/gatekeeper`)"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}-gatekeeper.entrypoints=websecure"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}-gatekeeper.tls.certresolver=le"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}-gatekeeper.tls=true"
|
|
- "traefik.http.routers.${PROJECT_NAME:-app}-gatekeeper.service=${PROJECT_NAME:-app}-gatekeeper"
|
|
|
|
# Auth Middleware Definition
|
|
- "traefik.http.middlewares.${PROJECT_NAME:-app}-auth.forwardauth.address=http://${PROJECT_NAME}-gatekeeper:3000/api/verify"
|
|
- "traefik.http.middlewares.${PROJECT_NAME:-app}-auth.forwardauth.trustForwardHeader=true"
|
|
- "traefik.http.middlewares.${PROJECT_NAME:-app}-auth.forwardauth.authResponseHeaders=X-Auth-User"
|
|
|
|
gatekeeper:
|
|
image: registry.infra.mintel.me/mintel/gatekeeper:${IMAGE_TAG:-latest}
|
|
restart: always
|
|
networks:
|
|
- infra
|
|
env_file:
|
|
- ${ENV_FILE:-.env}
|
|
environment:
|
|
PORT: 3000
|
|
PROJECT_NAME: ${PROJECT_NAME:-Mintel App}
|
|
PROJECT_COLOR: ${PROJECT_COLOR:-#82ed20}
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.services.${PROJECT_NAME}-gatekeeper.loadbalancer.server.port=3000"
|
|
|
|
directus:
|
|
image: registry.infra.mintel.me/mintel/directus:${IMAGE_TAG:-latest}
|
|
restart: always
|
|
networks:
|
|
- infra
|
|
env_file:
|
|
- ${ENV_FILE:-.env}
|
|
environment:
|
|
KEY: ${DIRECTUS_KEY}
|
|
SECRET: ${DIRECTUS_SECRET}
|
|
ADMIN_EMAIL: ${DIRECTUS_ADMIN_EMAIL}
|
|
ADMIN_PASSWORD: ${DIRECTUS_ADMIN_PASSWORD}
|
|
DB_CLIENT: 'pg'
|
|
DB_HOST: 'directus-db'
|
|
DB_PORT: '5432'
|
|
DB_DATABASE: ${DIRECTUS_DB_NAME:-directus}
|
|
DB_USER: ${DIRECTUS_DB_USER:-directus}
|
|
DB_PASSWORD: ${DIRECTUS_DB_PASSWORD:-mintel}
|
|
WEBSOCKETS_ENABLED: 'true'
|
|
PUBLIC_URL: ${DIRECTUS_URL}
|
|
SENTRY_DSN: ${SENTRY_DSN}
|
|
volumes:
|
|
- ./directus/uploads:/directus/uploads
|
|
- ./directus/extensions:/directus/extensions
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.${PROJECT_NAME}-directus.rule=Host(${DIRECTUS_HOST})"
|
|
- "traefik.http.routers.${PROJECT_NAME}-directus.entrypoints=websecure"
|
|
- "traefik.http.routers.${PROJECT_NAME}-directus.tls.certresolver=le"
|
|
- "traefik.http.routers.${PROJECT_NAME}-directus.tls=true"
|
|
- "traefik.http.routers.${PROJECT_NAME}-directus.middlewares=${PROJECT_NAME}-forward,${AUTH_MIDDLEWARE:-compress}"
|
|
- "traefik.http.services.${PROJECT_NAME}-directus.loadbalancer.server.port=8055"
|
|
|
|
directus-db:
|
|
image: postgres:15-alpine
|
|
restart: always
|
|
networks:
|
|
- infra
|
|
env_file:
|
|
- ${ENV_FILE:-.env}
|
|
environment:
|
|
POSTGRES_DB: ${DIRECTUS_DB_NAME:-directus}
|
|
POSTGRES_USER: ${DIRECTUS_DB_USER:-directus}
|
|
POSTGRES_PASSWORD: ${DIRECTUS_DB_PASSWORD:-mintel}
|
|
volumes:
|
|
- directus-db-data:/var/lib/postgresql/data
|
|
|
|
networks:
|
|
infra:
|
|
external: true
|
|
|
|
volumes:
|
|
directus-db-data:
|