watch-party/docker-compose.yml

106 lines
2.6 KiB
YAML

name: watch-party
services:
# Frontend (Vite built → nginx). Only public-facing service on LAN.
web:
build:
context: ./frontend
dockerfile: Dockerfile
args:
PUBLIC_BASE_PATH: ${PUBLIC_BASE_PATH}
FRONTEND_MODE: ${FRONTEND_MODE:-production}
image: watchparty-frontend:prod
container_name: watchparty-frontend
environment:
BACKEND_ORIGIN: ${BACKEND_ORIGIN}
ports:
- "${WEB_PORT:-3000}:80"
depends_on:
api:
condition: service_healthy
restart: unless-stopped
networks: [internal]
healthcheck:
test: ["CMD", "wget", "-qO-", "http://localhost/"]
interval: 15s
timeout: 5s
retries: 5
# Backend DB (internal only)
db:
image: postgres:16-alpine
platform: ${COMPOSE_PLATFORM}
environment:
POSTGRES_DB: ${POSTGRES_DB}
POSTGRES_USER: ${POSTGRES_USER}
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
TZ: ${TZ}
ports:
- "${POSTGRES_PORT:-5432}:5432" ####### TEMPORARY EXPOSE #########
volumes:
- pgdata:/var/lib/postgresql/data
command: >
postgres
-c listen_addresses='*'
-c shared_buffers=64MB
-c max_connections=50
-c log_min_duration_statement=500ms
-c log_destination=stderr
-c logging_collector=on
-c timezone='${TZ:-Asia/Tokyo}'
healthcheck:
test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB"]
interval: 5s
timeout: 3s
retries: 20
restart: unless-stopped
networks: [internal]
# One-off migration job (idempotent)
migrate:
build:
context: ./backend
dockerfile: Dockerfile
image: watchparty-backend:latest
entrypoint: ["/app/migrate"]
env_file:
- ./.env
volumes:
- ./backend/secrets/firebase_credentials.json:/secrets/firebase_credentials.json:ro
depends_on:
db:
condition: service_healthy
restart: "no"
networks: [internal]
# API server (internal port only; reached via web → proxy)
api:
image: watchparty-backend:latest
env_file:
- ./.env
depends_on:
db:
condition: service_healthy
migrate:
condition: service_completed_successfully
expose:
- "8082"
volumes:
- ./backend/secrets/firebase_credentials.json:/secrets/firebase_credentials.json:ro
restart: unless-stopped
networks: [internal]
healthcheck:
test: ["CMD", "wget", "-qO-", "http://localhost:8082/healthz"]
interval: 10s
timeout: 5s
retries: 10
ports:
- "${APP_PORT:-8082}:8082" ####### TEMPORARY EXPOSE #########
networks:
internal:
driver: bridge
volumes:
pgdata: