JobHunter_SpringBoot_RestfulAPI_React/docker-compose.hub.yml at master · JasonTM17/JobHunter_SpringBoot_RestfulAPI_React · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
services:
  db:
    image: mysql:8.4
    container_name: jobhunter-db
    restart: unless-stopped
    environment:
      MYSQL_DATABASE: ${MYSQL_DATABASE:-jobhunter}
      MYSQL_USER: ${MYSQL_USER:-jobhunter}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD:-jobhunter}
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-root}
      TZ: ${TZ:-Asia/Ho_Chi_Minh}
    command:
      - --character-set-server=utf8mb4
      - --collation-server=utf8mb4_unicode_ci
    ports:
      - "${DB_PORT:-3307}:3306"
    volumes:
      - jobhunter-db-data:/var/lib/mysql
    healthcheck:
      test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -uroot -p$${MYSQL_ROOT_PASSWORD} --silent"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 30s
    deploy:
      resources:
        limits:
          memory: 512m
    networks:
      - jobhunter-net

  backend:
    image: ${DOCKERHUB_USERNAME:?Missing DOCKERHUB_USERNAME}/jobhunter-backend:${IMAGE_TAG:-latest}
    container_name: jobhunter-backend
    restart: unless-stopped
    env_file:
      - path: ./.env
        required: false
    environment:
      # Spring profile - dev,docker enables Flyway + seed + verbose logging.
      # Override in .env to 'prod' for production (requires JWT_BASE64_SECRET + CORS_ALLOWED_ORIGINS).
      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES_ACTIVE:-dev,docker}
      SERVER_PORT: 8080

      # Database - use compose service name for internal connectivity.
      DB_URL: jdbc:mysql://db:3306/${MYSQL_DATABASE:-jobhunter}?useUnicode=true&characterEncoding=UTF-8&serverTimezone=UTC&allowPublicKeyRetrieval=true&useSSL=false
      DB_USERNAME: ${MYSQL_USER:-jobhunter}
      DB_PASSWORD: ${MYSQL_PASSWORD:-jobhunter}

      # Flyway - enabled for MySQL; Hibernate ddl-auto=none lets Flyway own schema.
      FLYWAY_ENABLED: ${FLYWAY_ENABLED:-true}
      SON_JPA_DDL_AUTO: ${SON_JPA_DDL_AUTO:-none}

      # Admin bootstrap - MUST be set in .env for production.
      JOBHUNTER_BOOTSTRAP_ADMIN_EMAIL: ${JOBHUNTER_BOOTSTRAP_ADMIN_EMAIL}
      JOBHUNTER_BOOTSTRAP_ADMIN_PASSWORD: ${JOBHUNTER_BOOTSTRAP_ADMIN_PASSWORD}
      JOBHUNTER_BOOTSTRAP_ADMIN_NAME: ${JOBHUNTER_BOOTSTRAP_ADMIN_NAME:-Super Admin}
      JOBHUNTER_BOOTSTRAP_ADMIN_ENABLED: ${JOBHUNTER_BOOTSTRAP_ADMIN_ENABLED:-true}

      # JWT + CORS - for local Docker, defaults allow http://localhost:3001. Override in .env for production.
      CORS_ALLOWED_ORIGINS: ${CORS_ALLOWED_ORIGINS:-http://localhost:3000,http://localhost:3001,http://127.0.0.1:3000,http://127.0.0.1:3001}
      JWT_BASE64_SECRET: ${JWT_BASE64_SECRET:?JWT_BASE64_SECRET must be set in .env}
      JWT_ACCESS_TOKEN_TTL: ${JWT_ACCESS_TOKEN_TTL:-900}
      JWT_REFRESH_TOKEN_TTL: ${JWT_REFRESH_TOKEN_TTL:-604800}
      JWT_COOKIE_SECURE: ${JWT_COOKIE_SECURE:-false}
      JWT_COOKIE_SAME_SITE: ${JWT_COOKIE_SAME_SITE:-Lax}

      # Seed - disabled in production unless explicitly enabled.
      JOBHUNTER_SEED_ENABLED: ${JOBHUNTER_SEED_ENABLED:-false}

      # Upload / storage.
      UPLOAD_BASE_URI: ${UPLOAD_BASE_URI:-file:///app/storage/}
      UPLOAD_MAX_SIZE_BYTES: ${UPLOAD_MAX_SIZE_BYTES:-5242880}
      UPLOAD_MAX_FILE_SIZE: ${UPLOAD_MAX_FILE_SIZE:-10MB}
      UPLOAD_MAX_REQUEST_SIZE: ${UPLOAD_MAX_REQUEST_SIZE:-10MB}

      # Mail.
      MAIL_ENABLED: ${MAIL_ENABLED:-false}
      MAIL_TEMPLATE_PORTAL_URL: ${MAIL_TEMPLATE_PORTAL_URL:-http://localhost:3001}
      MANAGEMENT_HEALTH_MAIL_ENABLED: ${MANAGEMENT_HEALTH_MAIL_ENABLED:-false}

      # Scheduler - disabled by default in production.
      JOBHUNTER_SCHEDULER_ENABLED: ${JOBHUNTER_SCHEDULER_ENABLED:-false}
      JOBHUNTER_MAIL_CRON_ENABLED: ${JOBHUNTER_MAIL_CRON_ENABLED:-false}
      JOBHUNTER_WEEKLY_RECOMMENDATION_ENABLED: ${JOBHUNTER_WEEKLY_RECOMMENDATION_ENABLED:-false}
      JOBHUNTER_LOG_CLEANUP_ENABLED: ${JOBHUNTER_LOG_CLEANUP_ENABLED:-false}

      # Actuator health + Prometheus metrics.
      MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE: ${MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE:-health,info,prometheus,metrics}
      MANAGEMENT_ENDPOINT_HEALTH_SHOW_DETAILS: ${MANAGEMENT_ENDPOINT_HEALTH_SHOW_DETAILS:-never}
      MANAGEMENT_METRICS_EXPORT_PROMETHEUS_ENABLED: ${MANAGEMENT_METRICS_EXPORT_PROMETHEUS_ENABLED:-true}
      MANAGEMENT_TRACING_ENABLED: ${MANAGEMENT_TRACING_ENABLED:-false}
      MANAGEMENT_TRACING_SAMPLING_PROBABILITY: ${MANAGEMENT_TRACING_SAMPLING_PROBABILITY:-0.10}
      OTEL_SERVICE_NAME: ${OTEL_SERVICE_NAME:-jobhunter-backend}
      OTEL_EXPORTER_OTLP_ENDPOINT: ${OTEL_EXPORTER_OTLP_ENDPOINT:-http://otel-collector:4318}
      OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: ${OTEL_EXPORTER_OTLP_TRACES_ENDPOINT:-http://otel-collector:4318/v1/traces}
      OTEL_EXPORTER_OTLP_METRICS_ENDPOINT: ${OTEL_EXPORTER_OTLP_METRICS_ENDPOINT:-http://otel-collector:4318/v1/metrics}
      OTEL_RESOURCE_ATTRIBUTES: ${OTEL_RESOURCE_ATTRIBUTES:-deployment.environment=local-production,service.namespace=jobhunter}
    depends_on:
      db:
        condition: service_healthy
    ports:
      - "${BACKEND_PORT:-8080}:8080"
    volumes:
      - jobhunter-backend-storage:/app/storage
      - jobhunter-backend-logs:/app/logs
    healthcheck:
      test: ["CMD-SHELL", "curl -fsS http://localhost:8080/actuator/health || exit 1"]
      interval: 15s
      timeout: 5s
      retries: 10
      start_period: 60s
    deploy:
      resources:
        limits:
          memory: 1g
    networks:
      - jobhunter-net

  frontend:
    image: ${DOCKERHUB_USERNAME:?Missing DOCKERHUB_USERNAME}/jobhunter-frontend:${IMAGE_TAG:-latest}
    container_name: jobhunter-frontend
    restart: unless-stopped
    environment:
      NEXT_PUBLIC_API_BASE_URL: ${NEXT_PUBLIC_API_BASE_URL:-http://localhost:8080}
      NEXT_PUBLIC_STORAGE_BASE_URL: ${NEXT_PUBLIC_STORAGE_BASE_URL:-http://localhost:8080}
      INTERNAL_API_BASE_URL: ${INTERNAL_API_BASE_URL:-http://backend:8080}
      NEXT_PUBLIC_CLIENT_ERROR_REPORTING_ENABLED: ${NEXT_PUBLIC_CLIENT_ERROR_REPORTING_ENABLED:-true}
      OTEL_SERVICE_NAME: ${OTEL_FRONTEND_SERVICE_NAME:-jobhunter-frontend}
      OTEL_RESOURCE_ATTRIBUTES: ${OTEL_FRONTEND_RESOURCE_ATTRIBUTES:-deployment.environment=local-production,service.namespace=jobhunter}
      NODE_ENV: production
    depends_on:
      backend:
        condition: service_healthy
    ports:
      - "${FRONTEND_PORT:-3001}:3000"
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:3000/ > /dev/null || exit 1"]
      interval: 20s
      timeout: 5s
      retries: 8
      start_period: 30s
    deploy:
      resources:
        limits:
          memory: 512m
    networks:
      - jobhunter-net

networks:
  jobhunter-net:
    name: jobhunter-net

volumes:
  jobhunter-db-data:
  jobhunter-backend-storage:
  jobhunter-backend-logs: