273 lines
7.7 KiB
YAML
273 lines
7.7 KiB
YAML
services:
|
|
# PostgreSQL - Base de datos core (app)
|
|
postgres-a76:
|
|
image: postgres:18-alpine
|
|
container_name: anexo76-postgres-a76
|
|
environment:
|
|
POSTGRES_DB: anexo76_core
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_PASSWORD: ${POSTGRES_APP_PASSWORD:-postgres}
|
|
POSTGRES_INITDB_ARGS: "--encoding=UTF8"
|
|
ports:
|
|
- "5939:5432"
|
|
volumes:
|
|
- postgres_app_data:/var/lib/postgresql/data
|
|
- ./scripts/postgres-app-entrypoint.sh:/docker-entrypoint-initdb.d/init-app.sh:ro
|
|
networks:
|
|
- backend-net
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres -d anexo76_core || exit 1"]
|
|
interval: 5s
|
|
timeout: 3s
|
|
retries: 10
|
|
start_period: 20s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 512M
|
|
reservations:
|
|
memory: 256M
|
|
shm_size: 128mb
|
|
|
|
# PostgreSQL - Base de datos Keycloak
|
|
postgres-keycloak:
|
|
image: postgres:18-alpine
|
|
container_name: anexo76-postgres-keycloak
|
|
environment:
|
|
POSTGRES_DB: keycloak
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_PASSWORD: ${POSTGRES_KEYCLOAK_PASSWORD:-postgres}
|
|
POSTGRES_INITDB_ARGS: "--encoding=UTF8"
|
|
ports:
|
|
- "5233:5432"
|
|
volumes:
|
|
- postgres_keycloak_data:/var/lib/postgresql/data
|
|
- ./scripts/postgres-keycloak-entrypoint.sh:/docker-entrypoint-initdb.d/init-keycloak.sh:ro
|
|
networks:
|
|
- auth-net
|
|
- backend-net
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres -d keycloak || exit 1"]
|
|
interval: 5s
|
|
timeout: 3s
|
|
retries: 10
|
|
start_period: 20s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 512M
|
|
reservations:
|
|
memory: 256M
|
|
shm_size: 128mb
|
|
|
|
# Keycloak - Servidor de autenticación
|
|
keycloak:
|
|
image: quay.io/keycloak/keycloak:26.4
|
|
container_name: anexo76-keycloak
|
|
environment:
|
|
KEYCLOAK_ADMIN: ${KEYCLOAK_ADMIN:-admin}
|
|
KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD:-admin}
|
|
KC_DB: postgres
|
|
KC_DB_URL_HOST: postgres-keycloak
|
|
KC_DB_URL_PORT: "5432"
|
|
KC_DB_URL_DATABASE: keycloak
|
|
KC_DB_URL: jdbc:postgresql://postgres-keycloak:5432/keycloak
|
|
KC_DB_USERNAME: postgres
|
|
KC_DB_PASSWORD: ${POSTGRES_KEYCLOAK_PASSWORD:-postgres}
|
|
KC_DB_SCHEMA: public
|
|
KC_HOSTNAME: anexo76-dev.aduanasoft.com
|
|
KC_HTTP_ENABLED: "true"
|
|
KC_HOSTNAME_STRICT: "false"
|
|
KC_HOSTNAME_STRICT_HTTPS: "false"
|
|
KC_PROXY: edge
|
|
KC_PROXY_HEADERS: "xforwarded"
|
|
KC_HEALTH_ENABLED: "true"
|
|
KC_METRICS_ENABLED: "true"
|
|
KC_HOSTNAME_PATH: /kcauth
|
|
KC_LOG_LEVEL: INFO
|
|
JAVA_OPTS_APPEND: "-Xms256m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true"
|
|
command:
|
|
- start
|
|
- --db=postgres
|
|
- --db-url-host=postgres-keycloak
|
|
- --http-relative-path=/kcauth
|
|
- --db-url-port=5432
|
|
- --db-url-database=keycloak
|
|
- --db-username=postgres
|
|
- --db-password=${POSTGRES_KEYCLOAK_PASSWORD:-postgres}
|
|
- --http-enabled=true
|
|
- --hostname-strict=false
|
|
- --proxy-headers=xforwarded
|
|
ports:
|
|
- "8880:8080"
|
|
- "9000:9000"
|
|
depends_on:
|
|
postgres-keycloak:
|
|
condition: service_healthy
|
|
volumes:
|
|
- keycloak_data:/opt/keycloak/data
|
|
networks:
|
|
- auth-net
|
|
- backend-net
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "exec 3<>/dev/tcp/127.0.0.1/9000; echo -e 'GET /kcauth/health/ready HTTP/1.1\r\nhost: 127.0.0.1\r\nConnection: close\r\n\r\n' >&3; grep -q 'HTTP/1.1 200' <&3 || exit 1"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 30
|
|
start_period: 30s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 768M
|
|
reservations:
|
|
memory: 512M
|
|
|
|
# Backend - FastAPI
|
|
backend:
|
|
image: dev.aduanasoft.com/anexo76/backend:latest
|
|
container_name: anexo76-backend
|
|
environment:
|
|
- DEBUG=${DEBUG:-True}
|
|
- ENVIRONMENT=${ENVIRONMENT:-development}
|
|
- PYTHONUNBUFFERED=1
|
|
- PYTHONDONTWRITEBYTECODE=1
|
|
- CORE_DB_HOST=${CORE_DB_HOST:-postgres-a76}
|
|
- CORE_DB_PORT=${CORE_DB_PORT:-5432}
|
|
- CORE_DB_NAME=${CORE_DB_NAME:-anexo76_core}
|
|
- CORE_DB_USER=${CORE_DB_USER:-postgres}
|
|
- CORE_DB_PASSWORD=${POSTGRES_APP_PASSWORD:-postgres}
|
|
- KEYCLOAK_SERVER_URL=${KEYCLOAK_SERVER_URL:-http://keycloak:8080/kcauth}
|
|
- KEYCLOAK_REALM=${KEYCLOAK_REALM:-master}
|
|
- KEYCLOAK_CLIENT_ID=${KEYCLOAK_CLIENT_ID:-anexo76-backend}
|
|
- KEYCLOAK_CLIENT_SECRET=${KEYCLOAK_CLIENT_SECRET:-dev-secret}
|
|
- CORS_ORIGINS=${CORS_ORIGINS:-https://anexo76-dev.aduanasoft.com,http://localhost:3000}
|
|
ports:
|
|
- "3467:8000"
|
|
depends_on:
|
|
postgres-a76:
|
|
condition: service_healthy
|
|
keycloak:
|
|
condition: service_healthy
|
|
volumes:
|
|
- ./scripts/backend-entrypoint.sh:/entrypoint.sh:ro
|
|
networks:
|
|
- backend-net
|
|
- frontend-net
|
|
restart: unless-stopped
|
|
entrypoint: ["/entrypoint.sh"]
|
|
command:
|
|
[
|
|
"gunicorn",
|
|
"main:app",
|
|
"-k",
|
|
"uvicorn.workers.UvicornWorker",
|
|
"-w",
|
|
"${WEB_CONCURRENCY:-4}",
|
|
"-b",
|
|
"0.0.0.0:8000",
|
|
"--log-level",
|
|
"info"
|
|
]
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "curl -f http://localhost:8000/api/health || exit 1"]
|
|
interval: 15s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 60s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 512M
|
|
reservations:
|
|
memory: 256M
|
|
|
|
# Frontend - SvelteKit
|
|
frontend:
|
|
image: dev.aduanasoft.com/anexo76/frontend:latest
|
|
container_name: anexo76-frontend
|
|
environment:
|
|
- NODE_ENV=${NODE_ENV:-development}
|
|
- VITE_API_URL=${VITE_API_URL:-https://anexo76-dev.aduanasoft.com/api}
|
|
- INTERNAL_API_URL=${INTERNAL_API_URL:-http://backend:8000/api/}
|
|
- VITE_KEYCLOAK_URL=${VITE_KEYCLOAK_URL:-https://anexo76-dev.aduanasoft.com/kcauth/}
|
|
- VITE_KEYCLOAK_REALM=${VITE_KEYCLOAK_REALM:-master}
|
|
- VITE_KEYCLOAK_CLIENT_ID=${VITE_KEYCLOAK_CLIENT_ID:-anexo76-frontend}
|
|
- KEYCLOAK_URL=${KEYCLOAK_URL:-http://keycloak:8080/kcauth}
|
|
- KEYCLOAK_REALM=${KEYCLOAK_REALM:-master}
|
|
- KEYCLOAK_CLIENT_ID=${KEYCLOAK_CLIENT_ID:-anexo76-backend}
|
|
- KEYCLOAK_CLIENT_SECRET=${KEYCLOAK_CLIENT_SECRET:-dev-secret}
|
|
ports:
|
|
- "5111:5173"
|
|
depends_on:
|
|
backend:
|
|
condition: service_healthy
|
|
entrypoint: ["/frontend-entrypoint.sh"]
|
|
volumes:
|
|
- ./scripts/frontend-entrypoint.sh:/frontend-entrypoint.sh:ro
|
|
networks:
|
|
- frontend-net
|
|
- backend-net
|
|
- auth-net
|
|
restart: unless-stopped
|
|
command: ["pnpm", "start"]
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:5173/ || exit 1"]
|
|
interval: 15s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 45s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 1G
|
|
reservations:
|
|
memory: 512M
|
|
|
|
volumes:
|
|
postgres_app_data:
|
|
driver: local
|
|
postgres_keycloak_data:
|
|
driver: local
|
|
keycloak_data:
|
|
driver: local
|
|
frontend_node_modules:
|
|
driver: local
|
|
backend_cache:
|
|
driver: local
|
|
|
|
networks:
|
|
backend-net:
|
|
driver: bridge
|
|
auth-net:
|
|
driver: bridge
|
|
frontend-net:
|
|
driver: bridge
|