118 lines
3.3 KiB
YAML
118 lines
3.3 KiB
YAML
services:
|
|
probo:
|
|
image: "artifact.probo.inc/probo/probo:latest"
|
|
environment:
|
|
# Required secrets (use secure values in production)
|
|
PROBOD_ENCRYPTION_KEY: ${PROBOD_ENCRYPTION_KEY}
|
|
AUTH_COOKIE_SECRET: ${AUTH_COOKIE_SECRET}
|
|
AUTH_PASSWORD_PEPPER: ${AUTH_PASSWORD_PEPPER}
|
|
TRUST_AUTH_TOKEN_SECRET: ${TRUST_AUTH_TOKEN_SECRET}
|
|
|
|
# Application settings
|
|
PROBOD_BASE_URL: ${PROBOD_BASE_URL}
|
|
API_ADDR: ${API_ADDR}
|
|
API_CORS_ALLOWED_ORIGINS: ${API_CORS_ALLOWED_ORIGINS}
|
|
|
|
# PostgreSQL database
|
|
PG_ADDR: "postgres:5432"
|
|
PG_USERNAME: "postgres"
|
|
PG_PASSWORD: "postgres"
|
|
PG_DATABASE: "probod"
|
|
PG_POOL_SIZE: "100"
|
|
|
|
# S3-compatible storage (SeaweedFS)
|
|
AWS_REGION: "us-east-1"
|
|
AWS_BUCKET: "probod"
|
|
AWS_ACCESS_KEY_ID: "probod"
|
|
AWS_SECRET_ACCESS_KEY: "thisisnotasecret"
|
|
AWS_ENDPOINT: "http://seaweedfs:8333"
|
|
AWS_USE_PATH_STYLE: "true"
|
|
|
|
# Observability - Metrics & Tracing
|
|
METRICS_ADDR: "probo:8081"
|
|
TRACING_ADDR: ""
|
|
|
|
# Email notifications
|
|
SMTP_ADDR: "your.smtp.server:587"
|
|
SMTP_TLS_REQUIRED: "false"
|
|
MAILER_SENDER_NAME: "Probo"
|
|
MAILER_SENDER_EMAIL: "no-reply@notification.getprobo.com"
|
|
|
|
# Chrome for PDF generation
|
|
CHROME_DP_ADDR: "chrome:9222"
|
|
ports:
|
|
- "8080:8080"
|
|
- "8081:8081"
|
|
- "8443:8443"
|
|
volumes:
|
|
- "probo-data:/data"
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
seaweedfs:
|
|
condition: service_started
|
|
chrome:
|
|
condition: service_started
|
|
|
|
|
|
postgres:
|
|
image: "artifact.probo.inc/dockerhub/library/postgres@sha256:7ad98329d513dd497293b951c195ca354274a77f12ddbbbbf85e68a811823d72"
|
|
shm_size: "1g"
|
|
command: >
|
|
postgres -c "shared_buffers=4GB"
|
|
-c "max_connections=200"
|
|
-c "log_statement=all"
|
|
ports:
|
|
- "5432:5432"
|
|
volumes:
|
|
- "./compose/postgres:/docker-entrypoint-initdb.d:ro"
|
|
- "postgres-data:/var/lib/postgresql/data:rw"
|
|
environment:
|
|
POSTGRES_USER: "postgres"
|
|
POSTGRES_PASSWORD: "postgres"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
seaweedfs:
|
|
image: "artifact.probo.inc/dockerhub/chrislusf/seaweedfs@sha256:cea8339d21dad1b200adce581dd7434d254b8f5975f142c3b4c930ba78647eef"
|
|
command: >
|
|
server
|
|
-s3
|
|
-s3.config=/etc/seaweedfs/s3.json
|
|
-s3.port=8333
|
|
-volume.max=100
|
|
-master.volumeSizeLimitMB=1024
|
|
-dir=/data
|
|
ports:
|
|
- "8333:8333"
|
|
- "9333:9333"
|
|
- "8888:8888"
|
|
volumes:
|
|
- "./compose/seaweedfs/s3.json:/etc/seaweedfs/s3.json:ro"
|
|
- "seaweedfs-data:/data:rw"
|
|
|
|
chrome:
|
|
image: "artifact.probo.inc/dockerhub/chromedp/headless-shell@sha256:b24482ae166e2c67135f5a8ba9575c257efdd8e2fd6b2e931f9d88ede3d72f3b"
|
|
ports:
|
|
- "9222:9222"
|
|
command:
|
|
- "--headless"
|
|
- "--disable-gpu"
|
|
- "--disable-dev-shm-usage"
|
|
- "--hide-scrollbars"
|
|
- "--mute-audio"
|
|
- "--no-default-browser-check"
|
|
- "--no-first-run"
|
|
- "--disable-background-networking"
|
|
- "--disable-background-timer-throttling"
|
|
- "--disable-extensions"
|
|
|
|
|
|
volumes:
|
|
probo-data:
|
|
postgres-data:
|
|
seaweedfs-data:
|