mirror of
https://github.com/rgrgogu/new_starr.git
synced 2026-09-27 00:12:54 +08:00
109 lines
4.6 KiB
YAML
109 lines
4.6 KiB
YAML
# ═══════════════════════════════════════════════════════════════════════════════
|
|
# $APP_NAME — Docker Compose (self-hosted)
|
|
#
|
|
# Prerequisites:
|
|
# 1. Backend → cp .env.example .env and fill in all CHANGE_ME values
|
|
# 2. Frontend → cd ../new_starr_app && cp .env.example .env → fill in values
|
|
# → npm run build (must run BEFORE building the Docker image)
|
|
# 3. Run: docker compose up -d
|
|
#
|
|
# ⚠ SSL NOTE — db.config.js and the session store both require SSL from
|
|
# PostgreSQL. The bundled `postgres` service here ships without SSL by
|
|
# default, so the backend will refuse to connect. Two options:
|
|
#
|
|
# Option A (recommended) — use a managed PostgreSQL with SSL:
|
|
# Set DB_HOST / DB_PORT / DB_NAME / DB_USER / DB_PASSWORD in .env to
|
|
# your managed provider (CockroachDB, Supabase, Neon, etc.) and remove
|
|
# the `postgres` service + its depends_on entry below.
|
|
#
|
|
# Option B — fix the code to make SSL optional:
|
|
# Add DB_SSL=false to .env and update db.config.js + the session store
|
|
# connection string in server.js to read that flag. Then the bundled
|
|
# postgres service works without SSL.
|
|
#
|
|
# Redis / Valkey:
|
|
# In Docker the service is reachable by its service name, not 127.0.0.1.
|
|
# Set this in .env: REDIS_URL=redis://valkey:6379
|
|
# ═══════════════════════════════════════════════════════════════════════════════
|
|
|
|
services:
|
|
|
|
# ── Backend (Express) ───────────────────────────────────────────────────────
|
|
backend:
|
|
build: .
|
|
ports:
|
|
- "3024:3024"
|
|
env_file: .env
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
valkey:
|
|
condition: service_started
|
|
garage:
|
|
condition: service_healthy
|
|
restart: unless-stopped
|
|
|
|
# ── Frontend (React / Nginx) ─────────────────────────────────────────────────
|
|
# Run `npm run build` inside ../new_starr_app before starting this service.
|
|
frontend:
|
|
build: ../new_starr_app
|
|
ports:
|
|
- "80:80"
|
|
restart: unless-stopped
|
|
|
|
# ── PostgreSQL ───────────────────────────────────────────────────────────────
|
|
# See SSL NOTE above before using this service.
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
environment:
|
|
POSTGRES_DB: ${DB_NAME}
|
|
POSTGRES_USER: ${DB_USER}
|
|
POSTGRES_PASSWORD: ${DB_PASSWORD}
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${DB_USER} -d ${DB_NAME}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
restart: unless-stopped
|
|
|
|
# ── Valkey (Redis-compatible cache) ─────────────────────────────────────────
|
|
valkey:
|
|
image: valkey/valkey:8-alpine
|
|
volumes:
|
|
- valkey_data:/data
|
|
restart: unless-stopped
|
|
|
|
# ── Garage (S3-compatible self-hosted storage) ────────────────────────────────
|
|
# Exposes the S3 API on port 3900. Point your reverse proxy at this port
|
|
# to serve S3_PUBLIC_URL (e.g. https://cdn.yourdomain.com → http://garage:3900).
|
|
# GARAGE_RPC_SECRET must be set in .env (generate with: openssl rand -hex 32).
|
|
#
|
|
# garage-init.sh starts the daemon in the background, runs one-time cluster
|
|
# initialization (layout, bucket, key), then hands control back to the daemon.
|
|
garage:
|
|
image: dxflrs/garage
|
|
entrypoint: ["/bin/sh", "/garage-init.sh"]
|
|
volumes:
|
|
- ./config/garage.toml:/etc/garage.toml:ro
|
|
- ./scripts/garage-init.sh:/garage-init.sh:ro
|
|
- garage_meta:/var/lib/garage/meta
|
|
- garage_data:/var/lib/garage/data
|
|
ports:
|
|
- "3900:3900"
|
|
env_file: .env
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "test -f /var/lib/garage/meta/.ready && garage status > /dev/null 2>&1"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
start_period: 30s
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
postgres_data:
|
|
valkey_data:
|
|
garage_meta:
|
|
garage_data:
|