ginnoir
7aa95fa00a
Every service now reads stack.env via env_file with container-exact var
names — no ${VAR} parse-time interpolation, no Portainer UI env vars
(except stacks/dev, kept on UI-env interpolation as documented exception).
- media: drop PUID/PGID/TZ env lines (env_file covers); resolve ${ROOT}
- foundry: secrets via env_file; FOUNDRY_PATCH_URLS -> CONTAINER_PATCH_URLS
- monitoring: HOMARR_SECRET_ENCRYPTION_KEY -> SECRET_ENCRYPTION_KEY
- notify: FRESHRSS_USER composed in stack.env; TZ via env_file
- owncloud: container-exact OWNCLOUD_*/MYSQL_* keys; runtime $$ healthcheck
- resume/famapp: composites (DATABASE_URL etc.) written out in stack.env
- authentik: container-exact keys; image tag pinned in compose
- notes: couchdb creds via env_file
- remote: gains stack.env (no secrets; convention completeness)
- CLAUDE.md: env convention, valhalla-lab registration-only note, correct
on-host Portainer working-copy path (/config/portainer/compose/<id>)
Validated with docker compose config on valhalla for all 15 stacks.
98 lines
2.6 KiB
YAML
98 lines
2.6 KiB
YAML
# resume stack — Reactive Resume app + Postgres, MinIO, and the Chrome printer.
|
|
#
|
|
# Volume -> bind-mount conversions (tiered per density policy):
|
|
# postgres data -> /config/resume/postgres (SSD; DB, low density)
|
|
# minio data -> /storage1/labdata/resume/minio (ZFS; object store, blobs)
|
|
# The Chrome service is stateless. app + resume-minio join edge (resume.ginnoir.com,
|
|
# storage.j-costa.com, minio.ginnoir.com); postgres stays private.
|
|
|
|
services:
|
|
postgres:
|
|
container_name: postgres_resume
|
|
image: postgres:16-alpine
|
|
restart: unless-stopped
|
|
networks: [resume]
|
|
volumes:
|
|
- /config/resume/postgres:/var/lib/postgresql/data
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
- POSTGRES_DB=postgres
|
|
- POSTGRES_USER=postgres
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
resume-minio:
|
|
container_name: minio_resume
|
|
image: minio/minio:latest
|
|
restart: unless-stopped
|
|
networks: [resume, edge]
|
|
command: server /data --console-address :9001
|
|
ports:
|
|
- "9000:9000"
|
|
- "9004:9001"
|
|
volumes:
|
|
- /storage1/labdata/resume/minio:/data
|
|
env_file:
|
|
- stack.env
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "curl -sf http://localhost:9000/minio/health/live || exit 1"]
|
|
interval: 30s
|
|
timeout: 20s
|
|
retries: 3
|
|
start_period: 30s
|
|
|
|
chrome:
|
|
container_name: chrome
|
|
image: ghcr.io/browserless/chromium:latest
|
|
restart: unless-stopped
|
|
networks: [resume]
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
- TIMEOUT=10000
|
|
- CONCURRENT=10
|
|
- EXIT_ON_HEALTH_FAILURE=true
|
|
- PRE_REQUEST_HEALTH_CHECK=true
|
|
|
|
app:
|
|
container_name: resume
|
|
image: amruthpillai/reactive-resume:latest
|
|
restart: unless-stopped
|
|
networks: [resume, edge]
|
|
ports:
|
|
- "3000:3000"
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
resume-minio:
|
|
condition: service_healthy
|
|
chrome:
|
|
condition: service_started
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
- PORT=3000
|
|
- NODE_ENV=production
|
|
- APP_URL=https://resume.ginnoir.com
|
|
- STORAGE_URL=https://storage.j-costa.com/default
|
|
- PRINTER_ENDPOINT=http://chrome:3000
|
|
- MAIL_FROM=noreply@localhost
|
|
- STORAGE_ENDPOINT=resume-minio
|
|
- STORAGE_PORT=9000
|
|
- STORAGE_REGION=us-east-1
|
|
- STORAGE_BUCKET=default
|
|
- STORAGE_USE_SSL=false
|
|
- STORAGE_SKIP_BUCKET_CHECK=false
|
|
|
|
networks:
|
|
resume:
|
|
name: resume
|
|
driver: bridge
|
|
edge:
|
|
name: edge
|
|
external: true
|