bdb05a95f6
- Remove root .env.example (now only in docker/ folder) - Update .gitignore to not track root .env.example - Keep docker/.env.example as single source of truth
143 lines
3.8 KiB
YAML
143 lines
3.8 KiB
YAML
# Synapsis - Docker Compose (Production)
|
|
# Uses pre-built image from GitHub Container Registry
|
|
#
|
|
# Quick Start:
|
|
# 1. Download this file, Caddyfile, and .env.example
|
|
# 2. Copy .env.example to .env and fill in your values
|
|
# 3. Run: docker compose up -d
|
|
#
|
|
# Services:
|
|
# - Synapsis Next.js application (from GHCR)
|
|
# - PostgreSQL database (persistent storage)
|
|
# - Caddy reverse proxy with automatic SSL
|
|
|
|
services:
|
|
# ============================================
|
|
# PostgreSQL Database
|
|
# ============================================
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
container_name: synapsis-db
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: ${DB_USER:-synapsis}
|
|
POSTGRES_PASSWORD: ${DB_PASSWORD:-changeme}
|
|
POSTGRES_DB: ${DB_NAME:-synapsis}
|
|
PGDATA: /var/lib/postgresql/data/pgdata
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
networks:
|
|
- synapsis-network
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-synapsis} -d ${DB_NAME:-synapsis}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 1G
|
|
reservations:
|
|
memory: 256M
|
|
|
|
# ============================================
|
|
# Synapsis Application (from GHCR)
|
|
# ============================================
|
|
app:
|
|
image: ghcr.io/cyph3rasi/synapsis:latest
|
|
container_name: synapsis-app
|
|
restart: unless-stopped
|
|
environment:
|
|
# Database connection
|
|
DATABASE_URL: postgresql://${DB_USER:-synapsis}:${DB_PASSWORD:-changeme}@postgres:5432/${DB_NAME:-synapsis}
|
|
|
|
# Authentication
|
|
AUTH_SECRET: ${AUTH_SECRET}
|
|
|
|
# Domain configuration
|
|
NEXT_PUBLIC_NODE_DOMAIN: ${DOMAIN:-localhost}
|
|
|
|
# Admin emails
|
|
ADMIN_EMAILS: ${ADMIN_EMAILS}
|
|
|
|
# Optional settings
|
|
BOT_MAX_PER_USER: ${BOT_MAX_PER_USER:-5}
|
|
|
|
# Port configuration (auto or specific port)
|
|
PORT: ${PORT:-3000}
|
|
|
|
# Node environment
|
|
NODE_ENV: production
|
|
volumes:
|
|
# Uploads directory (if using local file storage)
|
|
- uploads_data:/app/uploads
|
|
# Shared volume for port coordination with Caddy
|
|
- port_data:/var/run/synapsis
|
|
networks:
|
|
- synapsis-network
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
# Increased start period to allow migrations to run
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:3000/api/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 60s
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 1G
|
|
reservations:
|
|
memory: 256M
|
|
|
|
# ============================================
|
|
# Caddy Reverse Proxy (Automatic SSL)
|
|
# ============================================
|
|
caddy:
|
|
image: caddy:2-alpine
|
|
container_name: synapsis-caddy
|
|
restart: unless-stopped
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
volumes:
|
|
- ./docker/Caddyfile:/etc/caddy/Caddyfile:ro
|
|
- ./scripts/caddy-entrypoint.sh:/usr/local/bin/caddy-entrypoint.sh:ro
|
|
- caddy_data:/data
|
|
- caddy_config:/config
|
|
# Shared volume for port coordination with app
|
|
- port_data:/var/run/synapsis
|
|
networks:
|
|
- synapsis-network
|
|
depends_on:
|
|
app:
|
|
condition: service_healthy
|
|
environment:
|
|
- DOMAIN=${DOMAIN:-localhost}
|
|
# Use custom entrypoint to read dynamic port from app
|
|
entrypoint: ["/usr/local/bin/caddy-entrypoint.sh"]
|
|
|
|
# ============================================
|
|
# Persistent Volumes
|
|
# ============================================
|
|
volumes:
|
|
postgres_data:
|
|
driver: local
|
|
uploads_data:
|
|
driver: local
|
|
caddy_data:
|
|
driver: local
|
|
caddy_config:
|
|
driver: local
|
|
port_data:
|
|
driver: local
|
|
|
|
# ============================================
|
|
# Networks
|
|
# ============================================
|
|
networks:
|
|
synapsis-network:
|
|
driver: bridge
|