148 lines
4.5 KiB
YAML
148 lines
4.5 KiB
YAML
# Banatie Production - VPS Isolated Deployment
|
|
# Last Updated: December 2025
|
|
|
|
services:
|
|
banatie-api:
|
|
build:
|
|
context: /home/usul/workspace/projects/banatie-service
|
|
dockerfile: apps/api-service/Dockerfile
|
|
container_name: banatie-api
|
|
restart: unless-stopped
|
|
networks:
|
|
- banatie-internal
|
|
- proxy-network
|
|
depends_on:
|
|
banatie-postgres:
|
|
condition: service_healthy
|
|
banatie-minio:
|
|
condition: service_healthy
|
|
env_file:
|
|
- /opt/banatie/.env
|
|
- /opt/banatie/secrets.env
|
|
environment:
|
|
- IS_DOCKER=true
|
|
- NODE_ENV=production
|
|
volumes:
|
|
- /opt/banatie/logs/api:/app/apps/api-service/logs
|
|
- /opt/banatie/data/api-results:/app/apps/api-service/results
|
|
- /opt/banatie/data/api-uploads:/app/apps/api-service/uploads
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:3000/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 60s
|
|
|
|
banatie-landing:
|
|
build:
|
|
context: /home/usul/workspace/projects/banatie-service
|
|
dockerfile: apps/landing/Dockerfile
|
|
container_name: banatie-landing
|
|
restart: unless-stopped
|
|
networks:
|
|
- banatie-internal
|
|
- proxy-network
|
|
depends_on:
|
|
- banatie-postgres
|
|
env_file:
|
|
- /opt/banatie/.env
|
|
- /opt/banatie/secrets.env
|
|
environment:
|
|
- IS_DOCKER=true
|
|
- NODE_ENV=production
|
|
- WAITLIST_LOGS_PATH=/app/waitlist-logs
|
|
- HOSTNAME=0.0.0.0
|
|
volumes:
|
|
- /opt/banatie/data/waitlist-logs:/app/waitlist-logs
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:3000"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 30s
|
|
|
|
banatie-postgres:
|
|
image: postgres:15-alpine
|
|
container_name: banatie-postgres
|
|
restart: unless-stopped
|
|
networks:
|
|
- banatie-internal
|
|
volumes:
|
|
- /opt/banatie/data/postgres:/var/lib/postgresql/data
|
|
- /opt/banatie/scripts/init-db.sql:/docker-entrypoint-initdb.d/01-init.sql:ro
|
|
environment:
|
|
POSTGRES_DB: ${POSTGRES_DB}
|
|
POSTGRES_USER: ${POSTGRES_USER}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
banatie-minio:
|
|
image: quay.io/minio/minio:latest
|
|
container_name: banatie-minio
|
|
restart: unless-stopped
|
|
networks:
|
|
- banatie-internal
|
|
- proxy-network
|
|
volumes:
|
|
- /opt/banatie/data/minio/drive1:/data1
|
|
- /opt/banatie/data/minio/drive2:/data2
|
|
- /opt/banatie/data/minio/drive3:/data3
|
|
- /opt/banatie/data/minio/drive4:/data4
|
|
environment:
|
|
MINIO_ROOT_USER: ${MINIO_ROOT_USER}
|
|
MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
|
|
MINIO_BROWSER_REDIRECT_URL: https://storage.banatie.app
|
|
MINIO_SERVER_URL: https://cdn.banatie.app
|
|
command: server /data{1...4} --console-address ":9001"
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
banatie-storage-init:
|
|
image: minio/mc:latest
|
|
container_name: banatie-storage-init
|
|
networks:
|
|
- banatie-internal
|
|
depends_on:
|
|
banatie-minio:
|
|
condition: service_healthy
|
|
env_file:
|
|
- /opt/banatie/secrets.env
|
|
entrypoint:
|
|
- /bin/sh
|
|
- -c
|
|
- |
|
|
echo '=== MinIO Storage Initialization ==='
|
|
mc alias set storage http://banatie-minio:9000 ${MINIO_ROOT_USER} ${MINIO_ROOT_PASSWORD}
|
|
mc mb --ignore-existing storage/banatie
|
|
mc admin user add storage ${MINIO_ACCESS_KEY} ${MINIO_SECRET_KEY} || echo 'User may already exist'
|
|
mc admin policy attach storage readwrite --user=${MINIO_ACCESS_KEY} || echo 'Policy may already be attached'
|
|
cat > /tmp/lifecycle.json <<'LCEOF'
|
|
{"Rules":[{"ID":"temp-cleanup","Status":"Enabled","Filter":{"Prefix":"temp/"},"Expiration":{"Days":7}}]}
|
|
LCEOF
|
|
mc ilm import storage/banatie < /tmp/lifecycle.json || echo 'Lifecycle policy may already exist'
|
|
# Enable public read access for CDN
|
|
mc anonymous set download storage/banatie || echo 'Anonymous access may already be set'
|
|
echo 'Public read access enabled for CDN'
|
|
echo '=== Storage Initialization Completed ==='
|
|
exit 0
|
|
restart: "no"
|
|
|
|
networks:
|
|
banatie-internal:
|
|
driver: bridge
|
|
internal: true
|
|
|
|
proxy-network:
|
|
name: services_proxy-network
|
|
external: true
|
|
|