md-evals/docker-compose.prod.yaml at main · JNZader/md-evals · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
services:
  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_USER: md_evals
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: md_evals
    volumes:
      - md-evals-pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U md_evals"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - md-evals-net
    restart: unless-stopped

  server:
    build:
      context: .
      dockerfile: apps/server/Dockerfile
    depends_on:
      db:
        condition: service_healthy
    environment:
      DATABASE_URL: postgresql+asyncpg://md_evals:${POSTGRES_PASSWORD}@db:5432/md_evals
      JWT_SECRET: ${JWT_SECRET}
      STATE_SECRET: ${STATE_SECRET}
      GITHUB_CLIENT_ID: ${GITHUB_CLIENT_ID}
      GITHUB_CLIENT_SECRET: ${GITHUB_CLIENT_SECRET}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
      FRONTEND_URL: https://evals.javierzader.com
      BACKEND_URL: https://md-evals-api.javierzader.com
      ALLOWED_ORIGINS: '["https://evals.javierzader.com","https://md-evals-api.javierzader.com"]'
      DEBUG: "false"
    labels:
      - "traefik.enable=true"
      # HTTP → HTTPS redirect
      - "traefik.http.routers.md-evals-http.entryPoints=http"
      - "traefik.http.routers.md-evals-http.rule=Host(`md-evals-api.javierzader.com`)"
      - "traefik.http.routers.md-evals-http.middlewares=md-evals-redirect"
      # HTTPS with Let's Encrypt
      - "traefik.http.routers.md-evals-https.entryPoints=https"
      - "traefik.http.routers.md-evals-https.rule=Host(`md-evals-api.javierzader.com`)"
      - "traefik.http.routers.md-evals-https.tls=true"
      - "traefik.http.routers.md-evals-https.tls.certresolver=letsencrypt"
      - "traefik.http.routers.md-evals-https.middlewares=md-evals-gzip,md-evals-cors"
      # Service port
      - "traefik.http.services.md-evals-svc.loadbalancer.server.port=8000"
      # Middlewares (unique names to avoid conflicts with other apps)
      - "traefik.http.middlewares.md-evals-redirect.redirectscheme.scheme=https"
      - "traefik.http.middlewares.md-evals-gzip.compress=true"
      # CORS middleware for cross-origin requests from Cloudflare
      - "traefik.http.middlewares.md-evals-cors.headers.accessControlAllowOriginList=https://evals.javierzader.com"
      - "traefik.http.middlewares.md-evals-cors.headers.accessControlAllowMethods=GET,POST,PUT,DELETE,OPTIONS"
      - "traefik.http.middlewares.md-evals-cors.headers.accessControlAllowHeaders=Authorization,Content-Type"
      - "traefik.http.middlewares.md-evals-cors.headers.accessControlAllowCredentials=true"
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
      interval: 30s
      timeout: 10s
      start_period: 15s
      retries: 3
    networks:
      - md-evals-net
      - coolify
    restart: unless-stopped

volumes:
  md-evals-pgdata:

networks:
  md-evals-net:
    driver: bridge
  coolify:
    external: true
    name: coolify