he-staff/docker-compose.yml at draft · TeachBooks/he-staff · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
services:
  nginx:
    image: nginx:stable-alpine
    container_name: nginx
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/web_server/htdocs:/usr/share/nginx/html
      - /var/web_server/htdocs/default.conf:/etc/nginx/conf.d/default.conf
      - /var/web_server/htdocs/he/config/certs:/var/web_server/htdocs/he/config/certs
      - /var/web_server/ssl:/etc/nginx/ssl
    restart: always
    networks:
      - web_network
    depends_on:
      backend:
        condition: service_healthy

  # Backend service
  backend:
    image: ghcr.io/teachbooks/he-backend:latest  # Fixed from nginx:alpine
    container_name: backend
    restart: always
    networks:
      - web_network
    volumes:
      - /var/web_server/saml/certs:/app/saml/certs:ro
    environment:
      - SECRET_KEY=${SECRET_KEY:?SECRET_KEY environment variable is required - set it in .env file}
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/api/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s

networks:
  web_network:
    driver: bridge