ginnoir
63889fc150
Deploy to valhalla / deploy (push) Has been cancelled
Native OAuth/OIDC for Homarr, BookStack, Gitea, and MinIO console; forward_auth with local auth disabled for code-server, uptime, and kopia; Caddy and Authentik scripts updated to match.
104 lines
3.0 KiB
YAML
104 lines
3.0 KiB
YAML
# resume stack — Reactive Resume app + Postgres, MinIO, and the Chrome printer.
|
|
#
|
|
# Volume -> bind-mount conversions (tiered per density policy):
|
|
# postgres data -> /config/resume/postgres (SSD; DB, low density)
|
|
# minio data -> /storage1/labdata/resume/minio (ZFS; object store, blobs)
|
|
# The Chrome service is stateless. app + resume-minio join edge (resume.ginnoir.com,
|
|
# storage.j-costa.com, minio.ginnoir.com); postgres stays private.
|
|
|
|
services:
|
|
postgres:
|
|
container_name: postgres_resume
|
|
image: postgres:16-alpine
|
|
restart: unless-stopped
|
|
networks: [resume]
|
|
volumes:
|
|
- /config/resume/postgres:/var/lib/postgresql/data
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
- POSTGRES_DB=postgres
|
|
- POSTGRES_USER=postgres
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
resume-minio:
|
|
container_name: minio_resume
|
|
image: minio/minio:latest
|
|
restart: unless-stopped
|
|
networks: [resume, edge]
|
|
command: server /data --console-address :9001
|
|
ports:
|
|
- "9000:9000"
|
|
- "9004:9001"
|
|
volumes:
|
|
- /storage1/labdata/resume/minio:/data
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
- MINIO_BROWSER_REDIRECT_URL=https://minio.ginnoir.com
|
|
- MINIO_IDENTITY_OPENID_CONFIG_URL=https://auth.ginnoir.com/application/o/minio/.well-known/openid-configuration
|
|
- MINIO_IDENTITY_OPENID_CLIENT_ID=${MINIO_OIDC_CLIENT_ID}
|
|
- MINIO_IDENTITY_OPENID_CLIENT_SECRET=${MINIO_OIDC_CLIENT_SECRET}
|
|
- MINIO_IDENTITY_OPENID_SCOPES=openid,profile,email
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "curl -sf http://localhost:9000/minio/health/live || exit 1"]
|
|
interval: 30s
|
|
timeout: 20s
|
|
retries: 3
|
|
start_period: 30s
|
|
|
|
chrome:
|
|
container_name: chrome
|
|
image: ghcr.io/browserless/chromium:latest
|
|
restart: unless-stopped
|
|
networks: [resume]
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
- TIMEOUT=10000
|
|
- CONCURRENT=10
|
|
- EXIT_ON_HEALTH_FAILURE=true
|
|
- PRE_REQUEST_HEALTH_CHECK=true
|
|
|
|
app:
|
|
container_name: resume
|
|
image: amruthpillai/reactive-resume:latest
|
|
restart: unless-stopped
|
|
networks: [resume, edge]
|
|
ports:
|
|
- "3000:3000"
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
resume-minio:
|
|
condition: service_healthy
|
|
chrome:
|
|
condition: service_started
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
- PORT=3000
|
|
- NODE_ENV=production
|
|
- APP_URL=https://resume.ginnoir.com
|
|
- STORAGE_URL=https://storage.j-costa.com/default
|
|
- PRINTER_ENDPOINT=http://chrome:3000
|
|
- MAIL_FROM=noreply@localhost
|
|
- STORAGE_ENDPOINT=resume-minio
|
|
- STORAGE_PORT=9000
|
|
- STORAGE_REGION=us-east-1
|
|
- STORAGE_BUCKET=default
|
|
- STORAGE_USE_SSL=false
|
|
- STORAGE_SKIP_BUCKET_CHECK=false
|
|
|
|
networks:
|
|
resume:
|
|
name: resume
|
|
driver: bridge
|
|
edge:
|
|
name: edge
|
|
external: true
|