strive-api/docker-compose.yml at main · SatanLittleHelper/strive-api · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
version: '3.8'

services:
  app:
    build: .
    ports:
      - "8080:8080"
    environment:
      - PORT=8080
      - LOG_LEVEL=INFO
      - LOG_FORMAT=json
      - DB_HOST=postgres
      - DB_PORT=5432
      - DB_USER=postgres
      - DB_PASSWORD=password
      - DB_NAME=strive
      - DB_SSL_MODE=disable
      - JWT_ISSUER=strive-api
      - JWT_AUDIENCE=strive-app
      - JWT_CLOCK_SKEW=2m
      - CORS_ALLOWED_ORIGINS=http://localhost:4200, http://127.0.0.1:4200, http://192.168.1.186:4200, https://satanlittlehelper.github.io
      - CORS_ALLOWED_METHODS=GET,POST,PUT,DELETE,OPTIONS
      - CORS_ALLOWED_HEADERS=Accept,Authorization,Content-Type,X-Request-ID
      - CORS_EXPOSED_HEADERS=X-Request-ID
      - CORS_ALLOW_CREDENTIALS=true
      - CORS_MAX_AGE=86400
      - COOKIE_SECURE=true
      - COOKIE_SAMESITE=None
      - COOKIE_DOMAIN=
      - RATE_LIMIT_ENABLED=true
      - RATE_LIMIT_AUTH_PER_MINUTE=20
      - RATE_LIMIT_GENERAL_PER_MINUTE=60
      - RATE_LIMIT_BURST_SIZE=10
      - WGER_API_ENABLED=true
      - WGER_API_BASE_URL=https://wger.de/api/v2
      - WGER_API_KEY=
      - WGER_API_TIMEOUT=30s
      - WGER_API_RETRY_COUNT=3
      - SECURITY_HSTS_MAX_AGE=31536000
      - SECURITY_HSTS_INCLUDE_SUBDOMAINS=true
      - SECURITY_X_FRAME_OPTIONS=DENY
      - SECURITY_X_CONTENT_TYPE_OPTIONS=nosniff
      - SECURITY_REFERRER_POLICY=strict-origin-when-cross-origin
      - SECURITY_XSS_PROTECTION=1; mode=block
    depends_on:
      postgres:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  postgres:
    image: postgres:15-alpine
    container_name: strive-postgres
    environment:
      POSTGRES_DB: strive
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: password
    ports:
      - "5432:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./migrations:/docker-entrypoint-initdb.d
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d strive"]
      interval: 5s
      timeout: 5s
      retries: 5

volumes:
  postgres_data: