FatTips/remote_docker_compose.yml at main · brokechubb/FatTips · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
services:
  postgres:
    image: postgres:16-alpine
    container_name: fattips-db
    restart: unless-stopped
    # Note: postgres:alpine runs as 'postgres' user (UID 70) by default
    environment:
      POSTGRES_USER: fattips_user
      POSTGRES_DB: fattips
    env_file:
      - .env
    volumes:
      - postgres_data:/var/lib/postgresql/data
    # Port not exposed externally - containers connect via internal Docker network
    # This allows nftables firewall to properly block external access
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U fattips_user -d fattips']
      interval: 10s
      timeout: 5s
      retries: 5
    deploy:
      resources:
        limits:
          cpus: '1.0'
          memory: 1G
        reservations:
          cpus: '0.25'
          memory: 256M
    security_opt:
      - no-new-privileges:true

  redis:
    image: redis:7-alpine
    container_name: fattips-redis
    restart: unless-stopped
    # Note: redis:alpine runs as 'redis' user (UID 100) by default
    volumes:
      - redis_data:/data
    # Port not exposed externally - containers connect via internal Docker network
    deploy:
      resources:
        limits:
          cpus: '0.25'
          memory: 256M
        reservations:
          cpus: '0.1'
          memory: 64M
    security_opt:
      - no-new-privileges:true

  bot:
    image: fattips-bot:latest
    build:
      context: .
      dockerfile: docker/Dockerfile.bot
    container_name: fattips-bot
    restart: unless-stopped
    env_file:
      - .env
    environment:
      - NODE_ENV=production
      # Override DATABASE_URL to use internal Docker network hostname
      - DATABASE_URL=postgresql://fattips_user:${POSTGRES_PASSWORD}@postgres:5432/fattips
      - REDIS_HOST=redis
      - REDIS_PORT=6379
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_started
    volumes:
      # Mount logs directory to host for persistence and easy access
      - ./logs/bot:/app/apps/bot/logs
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 512M
        reservations:
          cpus: '0.25'
          memory: 256M
    security_opt:
      - no-new-privileges:true

  api:
    build:
      context: .
      dockerfile: docker/Dockerfile.api
    container_name: fattips-api
    restart: unless-stopped
    ports:
      - '3001:3001'
    env_file:
      - .env
    environment:
      - NODE_ENV=production
      - PORT=3001
      # Override DATABASE_URL to use internal Docker network hostname
      - DATABASE_URL=postgresql://fattips_user:${POSTGRES_PASSWORD}@postgres:5432/fattips
    depends_on:
      postgres:
        condition: service_healthy
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 512M
        reservations:
          cpus: '0.25'
          memory: 256M
    security_opt:
      - no-new-privileges:true

volumes:
  postgres_data:
  redis_data: