TimeTracker/docker-compose.example.yml at main · ThingThingHub/TimeTracker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
services:
  app:
    image: ghcr.io/drytrix/timetracker:latest
    container_name: timetracker-app
    environment:
      - TZ=${TZ:-Europe/Brussels}
      - CURRENCY=${CURRENCY:-EUR}
      - ROUNDING_MINUTES=${ROUNDING_MINUTES:-1}
      - SINGLE_ACTIVE_TIMER=${SINGLE_ACTIVE_TIMER:-true}
      - ALLOW_SELF_REGISTER=${ALLOW_SELF_REGISTER:-true}
      - IDLE_TIMEOUT_MINUTES=${IDLE_TIMEOUT_MINUTES:-30}
      - ADMIN_USERNAMES=${ADMIN_USERNAMES:-admin}
      # Security (required in production)
      - SECRET_KEY=${SECRET_KEY}
      # Version (inherited from image, but can be overridden)
      - APP_VERSION=${APP_VERSION:-}
      # Database (bundled Postgres)
      - DATABASE_URL=postgresql+psycopg2://timetracker:timetracker@db:5432/timetracker
      # CSRF & cookies (safe for HTTP local; tighten for HTTPS)
      - WTF_CSRF_ENABLED=${WTF_CSRF_ENABLED:-true}
      - WTF_CSRF_TIME_LIMIT=${WTF_CSRF_TIME_LIMIT:-3600}
      - WTF_CSRF_SSL_STRICT=${WTF_CSRF_SSL_STRICT:-false}
      - SESSION_COOKIE_SECURE=${SESSION_COOKIE_SECURE:-false}
      - REMEMBER_COOKIE_SECURE=${REMEMBER_COOKIE_SECURE:-false}
      - CSRF_COOKIE_SECURE=${CSRF_COOKIE_SECURE:-false}
      - CSRF_COOKIE_HTTPONLY=${CSRF_COOKIE_HTTPONLY:-false}
      - CSRF_COOKIE_SAMESITE=${CSRF_COOKIE_SAMESITE:-Lax}
      - CSRF_COOKIE_NAME=${CSRF_COOKIE_NAME:-XSRF-TOKEN}
      - SESSION_COOKIE_SAMESITE=${SESSION_COOKIE_SAMESITE:-Lax}
      - PREFERRED_URL_SCHEME=${PREFERRED_URL_SCHEME:-http}
      # Analytics (optional)
      - SENTRY_DSN=${SENTRY_DSN:-}
      - SENTRY_TRACES_RATE=${SENTRY_TRACES_RATE:-0.0}
      - OTEL_EXPORTER_OTLP_ENDPOINT=${OTEL_EXPORTER_OTLP_ENDPOINT:-}
      - OTEL_EXPORTER_OTLP_TOKEN=${OTEL_EXPORTER_OTLP_TOKEN:-}
      - ENABLE_TRACING=${ENABLE_TRACING:-true}
      - ENABLE_METRICS=${ENABLE_METRICS:-true}
      - OTEL_METRICS_EXPORT_INTERVAL_MS=${OTEL_METRICS_EXPORT_INTERVAL_MS:-60000}
      - OTEL_DEBUG_LOGGING=${OTEL_DEBUG_LOGGING:-false}
      - ENABLE_TELEMETRY=${ENABLE_TELEMETRY:-false}
      - TELE_SALT=${TELE_SALT:-}
      # AI helper (off by default; no Ollama in this compose — use external provider or root docker-compose --profile ai)
      - AI_ENABLED=${AI_ENABLED:-false}
      - AI_PROVIDER=${AI_PROVIDER:-ollama}
      - AI_BASE_URL=${AI_BASE_URL:-http://127.0.0.1:11434}
      - AI_MODEL=${AI_MODEL:-llama3.1}
      - AI_API_KEY=${AI_API_KEY:-}
      - AI_TIMEOUT_SECONDS=${AI_TIMEOUT_SECONDS:-60}
      - AI_CONTEXT_LIMIT=${AI_CONTEXT_LIMIT:-40}
    ports:
      - "8080:8080"
    volumes:
      - app_data:/data
      - app_uploads:/app/app/static/uploads
      - ./logs:/app/logs
    depends_on:
      db:
        condition: service_healthy
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "-s", "-o", "/dev/null", "http://localhost:8080/_health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  # Optional: Peppol Bridge (adapter) for self-hosted Peppol e-invoicing.
  # TimeTracker points PEPPOL_ACCESS_POINT_URL to http://peppol-bridge:8088/send
  # and uses PEPPOL_ACCESS_POINT_TOKEN to authenticate to the bridge.
  peppol-bridge:
    build:
      context: .
      dockerfile: peppol_bridge/Dockerfile
    container_name: timetracker-peppol-bridge
    environment:
      - PEPPOL_BRIDGE_AUTH_TOKEN=${PEPPOL_BRIDGE_AUTH_TOKEN:?Set PEPPOL_BRIDGE_AUTH_TOKEN}
      - PEPPOL_BRIDGE_TIMEOUT_S=30
      # Provider preset: e-invoice.be (recommended for low-volume)
      - PEPPOL_BRIDGE_PROVIDER=einvoice
      - EINVOICE_BASE_URL=${EINVOICE_BASE_URL:-https://api.e-invoice.be}
      - EINVOICE_API_KEY=${EINVOICE_API_KEY:?Set EINVOICE_API_KEY}
      # Alternative provider: Peppyrus (free)
      # - PEPPOL_BRIDGE_PROVIDER=peppyrus
      # - PEPPYRUS_BASE_URL=${PEPPYRUS_BASE_URL:-https://api.peppyrus.be/v1}
      # - PEPPYRUS_API_KEY=${PEPPYRUS_API_KEY:?Set PEPPYRUS_API_KEY}
    ports: []
    restart: unless-stopped

  db:
    image: postgres:16-alpine
    container_name: timetracker-db
    environment:
      - POSTGRES_DB=${POSTGRES_DB:-timetracker}
      - POSTGRES_USER=${POSTGRES_USER:-timetracker}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-timetracker}
      - TZ=${TZ:-Europe/Brussels}
    volumes:
      - db_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
    restart: unless-stopped

volumes:
  app_data:
    driver: local
  app_uploads:
    driver: local
  db_data:
    driver: local