securechat/docker-compose.yml at main · roman-parish/securechat · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
services:
  mongodb:
    image: mongo:7
    container_name: securechat-mongo
    restart: unless-stopped
    environment:
      MONGO_INITDB_ROOT_USERNAME: ${MONGO_USER:-admin}
      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_PASSWORD:-securechat_secret}
      MONGO_INITDB_DATABASE: securechat
    volumes:
      - mongo_data:/data/db
      - ./mongo-init.js:/docker-entrypoint-initdb.d/init.js:ro
    networks:
      - securechat-net
    healthcheck:
      test: ["CMD", "mongosh", "--eval", "db.adminCommand('ping')"]
      interval: 10s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    container_name: securechat-redis
    restart: unless-stopped
    command: redis-server --requirepass ${REDIS_PASSWORD:-redis_secret}
    volumes:
      - redis_data:/data
    networks:
      - securechat-net
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: securechat-backend
    restart: unless-stopped
    environment:
      NODE_ENV: ${NODE_ENV:-production}
      PORT: 3001
      MONGO_URI: mongodb://${MONGO_USER:-admin}:${MONGO_PASSWORD:-securechat_secret}@mongodb:27017/securechat?authSource=admin
      REDIS_URL: redis://:${REDIS_PASSWORD:-redis_secret}@redis:6379
      JWT_SECRET: ${JWT_SECRET:-change_this_jwt_secret_in_production}
      JWT_REFRESH_SECRET: ${JWT_REFRESH_SECRET:-change_this_refresh_secret_in_production}
      VAPID_PUBLIC_KEY: ${VAPID_PUBLIC_KEY:-}
      VAPID_PRIVATE_KEY: ${VAPID_PRIVATE_KEY:-}
      VAPID_EMAIL: ${VAPID_EMAIL:-admin@securechat.local}
      CLIENT_URL: ${CLIENT_URL:-http://localhost}
      RESEND_API_KEY: ${RESEND_API_KEY:-}
      EMAIL_FROM: ${EMAIL_FROM:-}
      APP_TIMEZONE: ${APP_TIMEZONE:-UTC}
      ADMIN_USERNAMES: ${ADMIN_USERNAMES:-}
    depends_on:
      mongodb:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - securechat-net
    volumes:
      - uploads_data:/app/uploads
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost:3001/api/health"]
      interval: 15s
      timeout: 5s
      retries: 5
      start_period: 20s

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        VITE_API_URL: ${VITE_API_URL:-/api}
        VITE_WS_URL: ${VITE_WS_URL:-/ws}
        VITE_VAPID_PUBLIC_KEY: ${VAPID_PUBLIC_KEY:-}
        VITE_ADMIN_USERNAMES: ${ADMIN_USERNAMES:-}
        VITE_APP_URL: ${VITE_APP_URL:-}
    container_name: securechat-frontend
    restart: unless-stopped
    networks:
      - securechat-net

  nginx:
    image: nginx:alpine
    container_name: securechat-nginx
    restart: unless-stopped
    ports:
      - "${HTTP_PORT:-80}:80"
      - "${HTTPS_PORT:-443}:443"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/ssl:/etc/nginx/ssl:ro
      - /etc/letsencrypt:/etc/letsencrypt:ro
      - uploads_data:/var/uploads:ro
    depends_on:
      backend:
        condition: service_healthy
      frontend:
        condition: service_started
    networks:
      - securechat-net

networks:
  securechat-net:
    driver: bridge

volumes:
  mongo_data:
  redis_data:
  uploads_data: