docker-compose.yml

version: '3.9'

services:
  # Strichliste Frontend
  frontend:
    image: "ghcr.io/shokinn/strichliste-frontend:${DOCKER_STRICHLISTE_VERSION_TAG}"
    # This docker-compose does not include a traefik container,
    # however a configuration through labels is provided for ease of use when it's deployed with traefik.
    labels:
      traefik.enable: 'true'
      traefik.docker.network: strichliste-docker_frontend # You have to specify the exact name of the network here as shown by `docker network ls`.
      traefik.http.routers.strichliste.entrypoints: websecure # Define your own https entrypoint here.
      traefik.http.routers.strichliste.rule: Host(`${DOCKER_NAME}.${DOCKER_DEFAULT_SERVICE_DOMAIN}`)
      traefik.http.routers.strichliste.tls: 'true'
      traefik.http.routers.strichliste.tls.certresolver: le_production # Define your own cert resolver here.
      traefik.http.services.strichliste.loadbalancer.server.scheme: http
      traefik.http.services.strichliste.loadbalancer.server.port: '8080'
    environment:
      - "APP_ENV:prod"
      - MARIADB_USER=${DOCKER_MARIADB_USER}
      - MARIADB_PASSWORD=${DOCKER_MARIADB_PASSWORD}
      - MARIADB_DATABASE=${DOCKER_MARIADB_DATABASE}
      - MARIADB_HOST=${DOCKER_MARIADB_HOST}
    restart: unless-stopped
    hostname: ${DOCKER_NAME}.${DOCKER_DEFAULT_SERVICE_DOMAIN}
    ports:
      - "8080:8080"
    networks:
      - reverse_proxy
      - frontend
    depends_on:
      - backend
  
  # Strichlise backend
  backend:
    image: "ghcr.io/shokinn/strichliste-backend:${DOCKER_STRICHLISTE_VERSION_TAG}"
    user: '1000'
    volumes:
      - ./config/services.yaml:/var/www/strichliste/config/services.yaml
      - ./config/strichliste.yaml:/var/www/strichliste/config/strichliste.yaml
      - ./config/doctrine.yaml:/var/www/strichliste/config/packages/doctrine.yaml
    environment:
      - "APP_ENV:prod"
      - MARIADB_USER=${DOCKER_MARIADB_USER}
      - MARIADB_PASSWORD=${DOCKER_MARIADB_PASSWORD}
      - MARIADB_DATABASE=${DOCKER_MARIADB_DATABASE}
      - MARIADB_HOST=${DOCKER_MARIADB_HOST}
      - DATABASE_URL=mysql://${DOCKER_MARIADB_USER}:${DOCKER_MARIADB_PASSWORD}@${DOCKER_MARIADB_HOST}/${DOCKER_MARIADB_DATABASE}
    restart: unless-stopped
    networks:
      - frontend
      - db
    depends_on:
      database:
        condition: service_healthy
  
  # Strichlise database
  database:
    image: "mariadb:${DOCKER_DB_VERSION_TAG}"
    volumes:
      - strichlistedb:/var/lib/mysql
    environment:
      - MARIADB_ROOT_PASSWORD=${DOCKER_MARIADB_ROOT_PASSWORD}
      - MARIADB_USER=${DOCKER_MARIADB_USER}
      - MARIADB_PASSWORD=${DOCKER_MARIADB_PASSWORD}
      - MARIADB_DATABASE=${DOCKER_MARIADB_DATABASE}
      - MARIADB_HOST=${DOCKER_MARIADB_HOST}
      - MARIADB_MYSQL_LOCALHOST_USER=y
    restart: unless-stopped
    networks:
      - db
    healthcheck:
      test: [ "CMD", "healthcheck.sh", "--su-mysql", "--connect" ]
      interval: 1m30s
      timeout: 10s
      retries: 3
      start_period: 30s


# Database backup
  db-backup:
    build: ./docker/backup
    environment:
      MYSQL_CONTAINER_NAME: database
      MYSQL_ROOT_PASSWORD: ${DOCKER_MARIADB_ROOT_PASSWORD}
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - strichlistedb_backup:/db_backups # Change the hostpath to a directory where you want to store your backups
    restart: unless-stopped
    networks:
      - db 
    depends_on:
      database:
        condition: service_healthy


volumes:
  strichlistedb:
  strichlistedb_backup:


networks:
  reverse_proxy:
    driver: bridge
    ipam:
      driver: default
    labels:
      com.docker.network.bridge.name: docker2
      com.docker.network.bridge.enable_ip_masquerade: true
      com.docker.network.bridge.enable_icc: true
      com.docker.network.driver.mtu: 1500
  frontend:
    driver: bridge
    ipam:
      driver: default
    labels:
      com.docker.network.bridge.name: docker2
      com.docker.network.bridge.enable_ip_masquerade: true
      com.docker.network.bridge.enable_icc: true
      com.docker.network.driver.mtu: 1500
  db:
    driver: bridge
    ipam:
      driver: default
    labels:
      com.docker.network.bridge.name: docker2
      com.docker.network.bridge.enable_ip_masquerade: true
      com.docker.network.bridge.enable_icc: true
      com.docker.network.driver.mtu: 1500