135 lines
4.1 KiB
YAML
135 lines
4.1 KiB
YAML
services:
|
|
# =========================================================
|
|
# Backend Go
|
|
# =========================================================
|
|
backend:
|
|
build:
|
|
context: ..
|
|
dockerfile: docker/backend/Dockerfile
|
|
container_name: gestion-backend
|
|
restart: unless-stopped
|
|
environment:
|
|
- DB_HOST=${DB_HOST:-postgres}
|
|
- DB_PORT=${DB_PORT:-5432}
|
|
- DB_USER=${DB_USER:-postgres}
|
|
- DB_PASSWORD=${DB_PASSWORD}
|
|
- DB_NAME=${DB_NAME:-gestion_db}
|
|
- DB_SSLMODE=${DB_SSLMODE:-disable}
|
|
- SESSION_SECRET=${SESSION_SECRET}
|
|
- USER_JWT_SECRET=${USER_JWT_SECRET}
|
|
- USER_JWT_SECRET_OLD=${USER_JWT_SECRET_OLD}
|
|
- ADMIN_JWT_SECRET=${ADMIN_JWT_SECRET}
|
|
- ADMIN_JWT_SECRET_OLD=${ADMIN_JWT_SECRET_OLD}
|
|
- REDIS_HOST=${REDIS_HOST:-redis}
|
|
- REDIS_PORT=${REDIS_PORT:-6379}
|
|
- REDIS_PASSWORD=${REDIS_PASSWORD}
|
|
- TOMTOM_API_KEY=${TOMTOM_API_KEY}
|
|
- API_PORT=${API_PORT:-8080}
|
|
ports:
|
|
- "${API_PORT:-8080}:8080"
|
|
volumes:
|
|
- backend_uploads:/app/uploads
|
|
networks:
|
|
- gestion-network
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
|
|
# =========================================================
|
|
# Frontend Nginx + ModSecurity
|
|
# =========================================================
|
|
frontend:
|
|
build:
|
|
context: ..
|
|
dockerfile: docker/frontend/Dockerfile
|
|
container_name: gestion-frontend
|
|
restart: unless-stopped
|
|
environment:
|
|
- MODSEC_RULE_ENGINE=On
|
|
- PARANOIA=2
|
|
- ANOMALY_INBOUND=5
|
|
- ANOMALY_OUTBOUND=4
|
|
- BACKEND_PORT=${API_PORT:-8080}
|
|
ports:
|
|
- "80:80"
|
|
networks:
|
|
- gestion-network
|
|
|
|
# =========================================================
|
|
# PostgreSQL
|
|
# =========================================================
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
container_name: gestion-postgres
|
|
restart: unless-stopped
|
|
environment:
|
|
- POSTGRES_USER=${DB_USER:-postgres}
|
|
- POSTGRES_PASSWORD=${DB_PASSWORD}
|
|
- POSTGRES_DB=${DB_NAME:-gestion_db}
|
|
- PGDATA=/var/lib/postgresql/data/pgdata
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
ports:
|
|
- "${DB_PORT:-5432}:5432"
|
|
networks:
|
|
- gestion-network
|
|
healthcheck:
|
|
test:
|
|
[
|
|
"CMD-SHELL",
|
|
"pg_isready -U ${DB_USER:-postgres} -d ${DB_NAME:-gestion_db}",
|
|
]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 10s
|
|
|
|
# =========================================================
|
|
# Redis
|
|
# =========================================================
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: gestion-redis
|
|
restart: unless-stopped
|
|
command: >
|
|
redis-server
|
|
--requirepass ${REDIS_PASSWORD}
|
|
--appendonly yes
|
|
--appendfsync everysec
|
|
--maxmemory 256mb
|
|
--maxmemory-policy allkeys-lru
|
|
volumes:
|
|
- redis_data:/data
|
|
ports:
|
|
- "${REDIS_PORT:-6379}:6379"
|
|
networks:
|
|
- gestion-network
|
|
healthcheck:
|
|
test:
|
|
[
|
|
"CMD",
|
|
"redis-cli",
|
|
"--no-auth-warning",
|
|
"-a",
|
|
"${REDIS_PASSWORD}",
|
|
"ping",
|
|
]
|
|
interval: 10s
|
|
timeout: 3s
|
|
retries: 5
|
|
start_period: 10s
|
|
|
|
networks:
|
|
gestion-network:
|
|
driver: bridge
|
|
|
|
volumes:
|
|
postgres_data:
|
|
driver: local
|
|
redis_data:
|
|
driver: local
|
|
backend_uploads:
|
|
driver: local
|