78 lines
2.3 KiB
YAML
78 lines
2.3 KiB
YAML
# Stack « signature » — serveur Debian DMZ mutualisé, derrière Nginx Proxy Manager.
|
|
# Variables lues dans deploy.env (généré par deploy/deploy.sh) : NGINX_REAL_IP_FROM, DB_*.
|
|
# docker-compose.override.yml (généré) : raccordement au réseau de NPM, ou port hôte en repli.
|
|
name: signature
|
|
|
|
services:
|
|
app:
|
|
build: { context: ., dockerfile: docker/php/Dockerfile }
|
|
image: cabm/signature:latest
|
|
container_name: signature_app
|
|
env_file: backend/.env
|
|
volumes:
|
|
- addin:/srv/addin
|
|
- images:/var/www/html/public/img
|
|
- storage:/var/www/html/storage
|
|
depends_on:
|
|
db: { condition: service_healthy }
|
|
networks: [signature_net]
|
|
restart: unless-stopped
|
|
|
|
scheduler:
|
|
image: cabm/signature:latest
|
|
container_name: signature_scheduler
|
|
env_file: backend/.env
|
|
user: www-data
|
|
command: ["php", "artisan", "schedule:work"]
|
|
volumes:
|
|
- storage:/var/www/html/storage
|
|
depends_on:
|
|
app: { condition: service_started }
|
|
networks: [signature_net]
|
|
restart: unless-stopped
|
|
|
|
nginx:
|
|
image: nginx:1.28-alpine
|
|
container_name: signature_nginx
|
|
# HTTP uniquement : TLS terminé par Nginx Proxy Manager. Aucun port publié ici.
|
|
environment:
|
|
NGINX_REAL_IP_FROM: ${NGINX_REAL_IP_FROM:-172.16.0.0/12}
|
|
volumes:
|
|
- ./docker/nginx/signature.conf.template:/etc/nginx/templates/default.conf.template:ro
|
|
- ./docker/nginx/admin-allow.inc:/etc/nginx/conf.d/admin-allow.inc:ro
|
|
- addin:/srv/addin:ro
|
|
- ./backend/public:/var/www/html/public:ro
|
|
- images:/var/www/html/public/img:ro
|
|
depends_on: [app]
|
|
networks: [signature_net]
|
|
restart: unless-stopped
|
|
|
|
db:
|
|
image: mariadb:11.4
|
|
container_name: signature_db
|
|
environment:
|
|
MARIADB_DATABASE: ${DB_DATABASE:-signature}
|
|
MARIADB_USER: ${DB_USERNAME:-signature}
|
|
MARIADB_PASSWORD: ${DB_PASSWORD:?DB_PASSWORD requis (deploy.env)}
|
|
MARIADB_RANDOM_ROOT_PASSWORD: "1"
|
|
volumes:
|
|
- db:/var/lib/mysql
|
|
healthcheck:
|
|
test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 12
|
|
start_period: 30s
|
|
networks: [signature_net]
|
|
restart: unless-stopped
|
|
|
|
networks:
|
|
signature_net:
|
|
name: signature_net
|
|
|
|
volumes:
|
|
addin:
|
|
images:
|
|
storage:
|
|
db:
|