Prepare production and Coolify deployment with original exports and datetime pickers

2026-09-09 17:59:20 -04:00
parent 574f29a68e
commit 64d7acc9c0
38 changed files with 1296 additions and 8 deletions
@@ -0,0 +1,105 @@
+# Use the Docker Compose build pack, with this file as its compose location.
+# Coolify owns generated URLs and secrets; never commit a rendered .env.
+x-environment: &environment
+  NODE_ENV: production
+  DATABASE_URL: postgres://manyangles:${SERVICE_PASSWORD_64_POSTGRES}@postgres:5432/manyangles
+  NEXT_PUBLIC_APP_URL: ${SERVICE_URL_WEB}
+  BETTER_AUTH_URL: ${SERVICE_URL_WEB}
+  BETTER_AUTH_SECRET: ${SERVICE_PASSWORD_64_AUTH}
+  S3_ENDPOINT: http://garage:3900
+  S3_PUBLIC_ENDPOINT: ${SERVICE_URL_GARAGE}
+  S3_REGION: garage
+  S3_BUCKET: manyangles
+  S3_ACCESS_KEY: GK${SERVICE_HEX_24_S3KEY}
+  S3_SECRET_KEY: ${SERVICE_HEX_64_S3SECRET}
+  S3_FORCE_PATH_STYLE: "true"
+  EMAIL_PROVIDER: resend
+  EMAIL_FROM: ${EMAIL_FROM}
+  RESEND_API_KEY: ${RESEND_API_KEY}
+  RESEND_WEBHOOK_SECRET: ${RESEND_WEBHOOK_SECRET}
+  WORKER_CONCURRENCY: "1"
+x-runtime: &runtime
+  restart: unless-stopped
+  init: true
+  security_opt: ["no-new-privileges:true"]
+  cap_drop: [ALL]
+services:
+  postgres:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: manyangles
+      POSTGRES_USER: manyangles
+      POSTGRES_PASSWORD: ${SERVICE_PASSWORD_64_POSTGRES}
+    volumes: ["postgres-data:/var/lib/postgresql/data"]
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U manyangles -d manyangles"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+  garage:
+    image: dxflrs/garage:v2.3.0
+    restart: unless-stopped
+    command: ["/garage", "-c", "/etc/garage.toml", "server", "--single-node", "--default-bucket"]
+    environment:
+      SERVICE_URL_GARAGE_3900: ${SERVICE_URL_GARAGE_3900}
+      GARAGE_RPC_SECRET: ${SERVICE_HEX_64_RPC}
+      GARAGE_ADMIN_TOKEN: ${SERVICE_PASSWORD_64_GARAGEADMIN}
+      GARAGE_DEFAULT_ACCESS_KEY: GK${SERVICE_HEX_24_S3KEY}
+      GARAGE_DEFAULT_SECRET_KEY: ${SERVICE_HEX_64_S3SECRET}
+      GARAGE_DEFAULT_BUCKET: manyangles
+    expose: ["3900"]
+    volumes:
+      - ./docker/garage.production.toml:/etc/garage.toml:ro
+      - garage-meta:/var/lib/garage/meta
+      - garage-data:/var/lib/garage/data
+    healthcheck:
+      test: ["CMD", "/garage", "-c", "/etc/garage.toml", "status"]
+      interval: 10s
+      timeout: 5s
+      retries: 10
+  migrate:
+    build: {context: ., target: migrate}
+    environment:
+      DATABASE_URL: postgres://manyangles:${SERVICE_PASSWORD_64_POSTGRES}@postgres:5432/manyangles
+    restart: "no"
+    depends_on:
+      postgres: {condition: service_healthy}
+  storage-init:
+    build: {context: ., target: worker}
+    command: ["bun", "packages/storage/src/configure.ts"]
+    environment: *environment
+    restart: "no"
+    depends_on:
+      garage: {condition: service_healthy}
+  web:
+    <<: *runtime
+    build:
+      context: .
+      target: web
+      args:
+        NEXT_PUBLIC_APP_URL: ${SERVICE_URL_WEB}
+    environment:
+      <<: *environment
+      SERVICE_URL_WEB_3000: ${SERVICE_URL_WEB_3000}
+    expose: ["3000"]
+    depends_on:
+      migrate: {condition: service_completed_successfully}
+      storage-init: {condition: service_completed_successfully}
+    healthcheck:
+      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:3000/api/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
+      interval: 30s
+      timeout: 5s
+      start_period: 20s
+      retries: 3
+  worker:
+    <<: *runtime
+    build: {context: ., target: worker}
+    environment: *environment
+    depends_on:
+      migrate: {condition: service_completed_successfully}
+      storage-init: {condition: service_completed_successfully}
+volumes:
+  postgres-data:
+  garage-meta:
+  garage-data: