fix: fixup multi problem

2026-07-30 19:29:57 +02:00
parent 0848d3c0a0
commit ac8bdbcab7
14 changed files with 492 additions and 163 deletions
@@ -0,0 +1,23 @@
+# === Omnex — déploiement local (docker compose) ===
+# Secrets générés pour le dev local. Ne jamais versionner .env.
+
+# --- Secrets obligatoires ---
+OMNEX_JWT_SECRET=0879032aa29538641920360c1990e39f7e86123b1fa869e9e3e60d44ceca0a34
+OMNEX_SEED_PASSWORD=62dc702dfe26d117216d2994
+
+# --- Postgres ---
+POSTGRES_USER=omnex
+POSTGRES_PASSWORD=770f17edeb9d1f38ad13e53f55e29963
+POSTGRES_DB=omnex
+
+# --- Redis (sessions) ---
+REDIS_PASSWORD=630fa654c76f1256fea3ba3c51a718a4
+
+# --- API ---
+OMNEX_ENV=dev
+OMNEX_SEED_USERNAME=admin
+OMNEX_ALLOWED_ORIGINS=http://localhost:3000,http://localhost:5173
+OMNEX_DEMO_DOMAIN=demo.omnex.app
+KUBECONFIG=/home/xor_fakers/.kube/config
+FRONTEND_IMAGE_APP=xor1234/frontend-mln:helm
+BACKEND_IMAGE_APP=xor1234/backend-mln:helm
@@ -0,0 +1,73 @@
+services:
+  postgres:
+    image: postgres:16-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-omnex}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-omnex}
+      POSTGRES_DB: ${POSTGRES_DB:-omnex}
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-omnex} -d ${POSTGRES_DB:-omnex}"]
+      interval: 5s
+      timeout: 3s
+      retries: 10
+    # Pas de port exposé : accès interne uniquement (défense en profondeur).
+
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    command: ["redis-server", "--requirepass", "${REDIS_PASSWORD:-omnexredis}", "--maxmemory", "256mb", "--maxmemory-policy", "allkeys-lru"]
+    volumes:
+      - redisdata:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD:-omnexredis}", "ping"]
+      interval: 5s
+      timeout: 3s
+      retries: 10
+
+  web:
+    image: xor1234/omnex-web:latest
+    restart: unless-stopped
+    depends_on:
+      api:
+        condition: service_healthy
+    ports:
+      - "3000:80"
+
+  api:
+    image: xor1234/omnex-api:latest
+    restart: unless-stopped
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    environment:
+      OMNEX_ENV: ${OMNEX_ENV:-dev}
+      OMNEX_ADDR: ":8080"
+      OMNEX_JWT_SECRET: ${OMNEX_JWT_SECRET}
+      OMNEX_ALLOWED_ORIGINS: ${OMNEX_ALLOWED_ORIGINS:-http://localhost:3000,http://localhost:5173}
+      OMNEX_DATABASE_URL: "host=postgres user=${POSTGRES_USER:-omnex} password=${POSTGRES_PASSWORD:-omnex} dbname=${POSTGRES_DB:-omnex} port=5432 sslmode=disable"
+      OMNEX_REDIS_URL: "redis://:${REDIS_PASSWORD:-omnexredis}@redis:6379/0"
+      OMNEX_SEED_USERNAME: ${OMNEX_SEED_USERNAME:-admin}
+      OMNEX_SEED_PASSWORD: ${OMNEX_SEED_PASSWORD}
+      OMNEX_DEMO_DOMAIN: ${OMNEX_DEMO_DOMAIN:-demo.omnex.app}
+      FRONTEND_IMAGE_APP: ${FRONTEND_IMAGE_APP:-xor1234/frontend-mln:latest}
+      BACKEND_IMAGE_APP: ${BACKEND_IMAGE_APP:-xor1234/backend-mln:latest}
+      KUBECONFIG: /kubeconfig/config
+    volumes:
+      - ../deploy/chart-gestion:/charts:ro
+      - /home/xor_fakers/.kube/config:/kubeconfig/config:ro
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8080/healthz"]
+      interval: 5s
+      timeout: 3s
+      retries: 10
+    ports:
+      - "8080:8080"
+
+volumes:
+  pgdata:
+  redisdata: