f29b39b40c
- docker-compose.yaml: remove port binding; add VIRTUAL_HOST/LETSENCRYPT_HOST env vars for nginx-proxy auto-routing; add internal + external proxy networks - .woodpecker.yml: consolidate build steps into single ci step; add deploy-main step that builds + deploys on every push to main; keep deploy-tag for registry-pull deploys on version tags - deploy/deploy.sh: simplify for manual/emergency use on existing server; add --from-registry flag for registry pull vs local build - Remove deploy/setup-server.sh and deploy/nginx/ (not needed on existing server) Co-Authored-By: Paperclip <noreply@paperclip.ing>
50 lines
1.3 KiB
YAML
50 lines
1.3 KiB
YAML
services:
|
|
bridge:
|
|
build: .
|
|
# No port binding — nginx-proxy routes traffic via the shared proxy network
|
|
env_file: .env
|
|
environment:
|
|
# nginx-proxy / acme-companion auto-routing
|
|
- VIRTUAL_HOST=${VIRTUAL_HOST:-ghl.cast.ph}
|
|
- VIRTUAL_PORT=${PORT:-3002}
|
|
- LETSENCRYPT_HOST=${VIRTUAL_HOST:-ghl.cast.ph}
|
|
- LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL:-ops@cast.ph}
|
|
depends_on:
|
|
mongo:
|
|
condition: service_healthy
|
|
networks:
|
|
- internal
|
|
- proxy # shared nginx-proxy network — must match the nginx-proxy container's network
|
|
restart: unless-stopped
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
mongo:
|
|
image: mongo:7
|
|
# No ports exposed — only reachable by bridge on the internal network
|
|
volumes:
|
|
- mongo-data:/data/db
|
|
networks:
|
|
- internal
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD", "mongosh", "--eval", "db.adminCommand('ping')"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 20s
|
|
|
|
networks:
|
|
internal:
|
|
# Private network for bridge ↔ mongo
|
|
proxy:
|
|
external: true
|
|
# Must match the name of the existing nginx-proxy Docker network on the server.
|
|
# Check with: docker network ls | grep proxy
|
|
|
|
volumes:
|
|
mongo-data:
|