brokencrystals/docker-compose.yml at main · octodemo/brokencrystals · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
version: '3'

services:
  db:
    image: postgres
    restart: always
    environment:
      POSTGRES_DB: bc
      POSTGRES_USER: bc
      POSTGRES_PASSWORD: bc
    volumes:
    - ./pg.sql:/docker-entrypoint-initdb.d/pg.sql

  nodejs:
    image: neuralegion/brokencrystals
    container_name: nodejs
    restart: always
    deploy:
      resources:
        limits:
          cpus: 3.5
    logging:
      options:
        max-file: "5"
        max-size: "10m"
    depends_on:
      - db
      - keycloak

  proxy:
    image: neuralegion/brokencrystals-client
    restart: always
    environment:
      CERTBOT_EMAIL: "anatol@neuralegion.com"
    ports:
      - "80:80"
      - "443:443"
    depends_on:
      - nodejs
    volumes:
      - ./nginx-config:/etc/nginx/user.conf.d:ro
      - letsencrypt:/etc/letsencrypt

  watchtower:
    image: containrrr/watchtower
    restart: always
    logging:
      options:
        max-file: "5"
        max-size: "10m"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    command: --interval 300 --debug

  keycloak-db:
    image: "postgres:12.2-alpine"
    environment:
      POSTGRES_DB: keycloak
      POSTGRES_USER: keycloak
      POSTGRES_PASSWORD: password
    restart: on-failure
    stdin_open: true
    tty: true
    volumes:
      - "./keycloak/db:/var/lib/postgresql/data/"

  keycloak:
    image: jboss/keycloak:latest
    volumes:
      - "./keycloak/imports/realm-export.json:/opt/jboss/keycloak/imports/realm-export.json"
    environment:
      DB_VENDOR: POSTGRES
      DB_ADDR: keycloak-db
      DB_DATABASE: keycloak
      DB_USER: keycloak
      DB_SCHEMA: public
      DB_PASSWORD: password
      KEYCLOAK_USER: admin
      KEYCLOAK_PASSWORD: Pa55w0rd
      KEYCLOAK_IMPORT: /opt/jboss/keycloak/imports/realm-export.json -Dkeycloak.profile.feature.upload_scripts=enabled
    healthcheck:
      test: [ "CMD", "curl", "-f", "http://localhost:8080/auth/realms/brokencrystals/health/check/database" ]
      timeout: 10s
      interval: 30s
      retries: 3
    depends_on:
      - keycloak-db

volumes:
  letsencrypt: