forked from Servora/StellarCert
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathdocker-compose.yml
More file actions
159 lines (152 loc) · 4.15 KB
/
docker-compose.yml
File metadata and controls
159 lines (152 loc) · 4.15 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
services:
# PostgreSQL Database
postgres:
image: postgres:15-alpine
container_name: stellarcert_db
environment:
POSTGRES_DB: stellarwave
POSTGRES_USER: stellarwave_user
POSTGRES_PASSWORD: stellarwave_password
ports:
- "5432:5432"
volumes:
- postgres_data:/var/lib/postgresql/data
- ./backend/src/database/migrations:/docker-entrypoint-initdb.d/migrations
networks:
- stellarcert_network
healthcheck:
test: ["CMD-SHELL", "pg_isready -U stellarwave_user -d stellarwave"]
interval: 10s
timeout: 5s
retries: 5
start_period: 30s
# Redis (used by BullMQ job queues)
redis:
image: redis:7-alpine
container_name: stellarcert_redis
ports:
- "6379:6379"
volumes:
- redis_data:/data
networks:
- stellarcert_network
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 10s
timeout: 3s
retries: 5
# Backend API Service
backend:
build:
context: ./backend
dockerfile: Dockerfile
target: production
container_name: stellarcert_backend
ports:
- "3000:3000"
environment:
NODE_ENV: production
PORT: 3000
DB_TYPE: postgres
DB_HOST: postgres
DB_PORT: 5432
DB_USERNAME: stellarwave_user
DB_PASSWORD: stellarwave_password
DB_NAME: stellarwave
REDIS_URL: redis://redis:6379
STELLAR_NETWORK: TESTNET
STELLAR_HORIZON_URL: https://horizon-testnet.stellar.org
STELLAR_ISSUER_SECRET_KEY: ${STELLAR_ISSUER_SECRET_KEY:-}
STELLAR_ISSUER_PUBLIC_KEY: ${STELLAR_ISSUER_PUBLIC_KEY:-}
JWT_SECRET: ${JWT_SECRET:-change_me_in_production}
JWT_EXPIRES_IN: ${JWT_EXPIRES_IN:-3600}
ALLOWED_ORIGINS: http://localhost:5173,http://frontend:5173
CORS_ORIGIN: http://localhost:5173,http://frontend:5173
LOG_LEVEL: info
SENTRY_DSN: ${SENTRY_DSN:-}
METRICS_ENABLED: true
depends_on:
postgres:
condition: service_healthy
redis:
condition: service_healthy
networks:
- stellarcert_network
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1"]
interval: 30s
timeout: 10s
retries: 3
start_period: 40s
# Frontend Service
frontend:
build:
context: ./frontend
dockerfile: Dockerfile
container_name: stellarcert_frontend
ports:
- "5173:5173"
environment:
VITE_API_URL: http://localhost:3000/api
VITE_STELLAR_NETWORK: TESTNET
VITE_HORIZON_URL: https://horizon-testnet.stellar.org
VITE_ENABLE_NOTIFICATIONS: true
VITE_ENABLE_METRICS: true
depends_on:
- backend
networks:
- stellarcert_network
restart: unless-stopped
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:5173"]
interval: 30s
timeout: 10s
retries: 3
start_period: 20s
# Nginx Reverse Proxy (Optional - for production)
nginx:
image: nginx:alpine
container_name: stellarcert_nginx
ports:
- "80:80"
- "443:443"
volumes:
- ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
- ./nginx/ssl:/etc/nginx/ssl:ro
depends_on:
- frontend
- backend
networks:
- stellarcert_network
restart: unless-stopped
profiles:
- production
# Prometheus (Optional - for monitoring)
prometheus:
image: prom/prometheus:latest
container_name: stellarcert_prometheus
ports:
- "9090:9090"
volumes:
- ./monitoring/prometheus.yml:/etc/prometheus/prometheus.yml:ro
- prometheus_data:/prometheus
command:
- "--config.file=/etc/prometheus/prometheus.yml"
- "--storage.tsdb.path=/prometheus"
- "--web.console.libraries=/etc/prometheus/console_libraries"
- "--web.console.templates=/etc/prometheus/consoles"
- "--storage.tsdb.retention.time=200h"
- "--web.enable-lifecycle"
networks:
- stellarcert_network
restart: unless-stopped
profiles:
- monitoring
networks:
stellarcert_network:
driver: bridge
volumes:
postgres_data:
redis_data:
prometheus_data: