newsku/docker-compose.yml at master · Fauteck/newsku · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
services:
  newsku:
    image: ghcr.io/fauteck/newsku:latest
    container_name: newsku
    restart: unless-stopped

    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

    environment:
      TZ: Europe/Berlin
      SALT: "${SALT}"
      ALLOW_SIGNUP: "${ALLOW_SIGNUP:-0}"
      DB_HOST: postgres-newsku
      DB_PORT: "5432"
      DB_DATABASE: "${POSTGRES_DB}"
      DB_USER: "${POSTGRES_USER}"
      DB_PASSWORD: "${POSTGRES_PASSWORD}"
      GREADER_URL: "${GREADER_URL}"
      GREADER_USERNAME: "${GREADER_USERNAME:-}"
      GREADER_API_PASSWORD: "${GREADER_API_PASSWORD:-}"
      ROOT_URL: "${ROOT_URL:-http://localhost:8080}"
      FRONTEND_URL: "${FRONTEND_URL}"

      APP_ENCRYPTION_KEY: "${APP_ENCRYPTION_KEY}"

      SMTP_HOST: "${SMTP_HOST:-}"
      SMTP_PORT: "${SMTP_PORT:-587}"
      SMTP_USERNAME: "${SMTP_USERNAME:-}"
      SMTP_PASSWORD: "${SMTP_PASSWORD:-}"
      SMTP_FROM: "${SMTP_FROM:-}"
      SMTP_TRANSPORT_STRATEGY: "${SMTP_TRANSPORT_STRATEGY:-SMTP_TLS}"

      OPENAI_MAX_RETRIES: "${OPENAI_MAX_RETRIES:-3}"
      OPENAI_TIMEOUT_MINUTES: "${OPENAI_TIMEOUT_MINUTES:-2}"
      NEWSKU_OPENAI_QUOTA_COOLDOWN_MINUTES: "${NEWSKU_OPENAI_QUOTA_COOLDOWN_MINUTES:-60}"

      IMAGE_CACHE_DIR: "${IMAGE_CACHE_DIR:-/app/cache/images}"
      IMAGE_CACHE_MAX_SIZE_MB: "${IMAGE_CACHE_MAX_SIZE_MB:-500}"
      IMAGE_CACHE_MAX_AGE_DAYS: "${IMAGE_CACHE_MAX_AGE_DAYS:-7}"

      LOGIN_RATE_LIMIT_MAX_ATTEMPTS: "${LOGIN_RATE_LIMIT_MAX_ATTEMPTS:-10}"
      LOGIN_RATE_LIMIT_WINDOW_MS: "${LOGIN_RATE_LIMIT_WINDOW_MS:-60000}"

      FEED_SYNC_CRON: "${FEED_SYNC_CRON:-0 15,35,55 * * * *}"

      DEMO_MODE: "${DEMO_MODE:-0}"
      ANNOUNCEMENT: "${ANNOUNCEMENT:-}"

      OIDC_DISCOVERY_URL: "${OIDC_DISCOVERY_URL:-}"
      OIDC_CLIENT_ID: "${OIDC_CLIENT_ID:-}"
      OIDC_AUTO_SIGNUP_USERS: "${OIDC_AUTO_SIGNUP_USERS:-0}"
      OIDC_EMAIL_CLAIM: "${OIDC_EMAIL_CLAIM:-email}"
      OIDC_USERNAME_CLAIM: "${OIDC_USERNAME_CLAIM:-preferred_username}"
      OIDC_NAME: "${OIDC_NAME:-SSO}"
    expose:
      - "8080"

    depends_on:
      postgres-newsku:
        condition: service_healthy

    healthcheck:
      test: ["CMD-SHELL", "wget -qO /dev/null http://localhost:8080/ || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s

    networks:
      - newsku-net
      - proxy

  postgres-newsku:
    image: postgres:17-alpine
    container_name: newsku_postgres
    restart: unless-stopped

    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

    environment:
      TZ: Europe/Berlin
      POSTGRES_DB: "${POSTGRES_DB}"
      POSTGRES_USER: "${POSTGRES_USER}"
      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"

    volumes:
      - /srv/docker-data/newsku/postgres:/var/lib/postgresql/data

    healthcheck:
      test: ["CMD-SHELL", "PGPASSWORD=\"$$POSTGRES_PASSWORD\" psql -h 127.0.0.1 -U \"$$POSTGRES_USER\" -d \"$$POSTGRES_DB\" -c 'SELECT 1' -q 2>/dev/null || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 30s

    networks:
      - newsku-net

networks:
  newsku-net:
    name: newsku-net
    driver: bridge
  proxy:
    external: true
    name: proxy