107 lines
3.4 KiB
YAML
107 lines
3.4 KiB
YAML
# 와카뷰 — msn.iykyka.com (Plan A / N2-B)
|
|
# Postgres + core-backend + ai-service(internal) + Flutter web (nginx proxies API).
|
|
#
|
|
# Usage:
|
|
# cp .env.example .env # fill secrets
|
|
# docker compose up -d --build
|
|
# # edge proxy → web:80 (AI/Postgres not published)
|
|
#
|
|
# Local smoke without domain:
|
|
# PUBLIC_API_BASE=http://localhost:8088 docker compose up -d --build
|
|
|
|
services:
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
environment:
|
|
POSTGRES_USER: ${POSTGRES_USER:-ykavu}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD in .env}
|
|
POSTGRES_DB: ${POSTGRES_DB:-ykavu}
|
|
volumes:
|
|
- ykavu_pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-ykavu} -d ${POSTGRES_DB:-ykavu}"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
restart: unless-stopped
|
|
# N2-A: no host port — internal only
|
|
|
|
ai-service:
|
|
build:
|
|
context: ./ai-service
|
|
environment:
|
|
GEMINI_API_KEY: ${GEMINI_API_KEY:-}
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-fsS", "http://127.0.0.1:8001/health"]
|
|
interval: 10s
|
|
timeout: 3s
|
|
retries: 5
|
|
restart: unless-stopped
|
|
# N2-A3: internal only — do not publish ports
|
|
|
|
core-backend:
|
|
build:
|
|
context: ./core-backend
|
|
environment:
|
|
DATABASE_URL: postgres://${POSTGRES_USER:-ykavu}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-ykavu}?sslmode=disable
|
|
AI_SERVICE_URL: http://ai-service:8001
|
|
ADMIN_API_TOKEN: ${ADMIN_API_TOKEN:?set ADMIN_API_TOKEN in .env}
|
|
ALLOW_DEMO_INVITE: ${ALLOW_DEMO_INVITE:-1}
|
|
FCM_SERVER_KEY: ${FCM_SERVER_KEY:-}
|
|
# Prefer HTTP v1 (service account). Mount secrets/firebase-service-account.json on the host.
|
|
FCM_SERVICE_ACCOUNT_FILE: ${FCM_SERVICE_ACCOUNT_FILE:-/secrets/firebase-service-account.json}
|
|
FCM_SERVICE_ACCOUNT_JSON: ${FCM_SERVICE_ACCOUNT_JSON:-}
|
|
volumes:
|
|
- ./secrets:/secrets:ro
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
ai-service:
|
|
condition: service_healthy
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-fsS", "http://127.0.0.1:8080/health"]
|
|
interval: 10s
|
|
timeout: 3s
|
|
retries: 5
|
|
restart: unless-stopped
|
|
# Not published — reached via web nginx proxy (same origin)
|
|
|
|
web:
|
|
build:
|
|
context: .
|
|
dockerfile: mobile/Dockerfile
|
|
args:
|
|
CORE_API_BASE: ${PUBLIC_API_BASE:-https://msn.iykyka.com}
|
|
# N4-W4 Web Push — set in host .env (never commit). Empty → install: fallback.
|
|
FIREBASE_API_KEY: ${FIREBASE_API_KEY:-}
|
|
FIREBASE_AUTH_DOMAIN: ${FIREBASE_AUTH_DOMAIN:-}
|
|
FIREBASE_PROJECT_ID: ${FIREBASE_PROJECT_ID:-}
|
|
FIREBASE_STORAGE_BUCKET: ${FIREBASE_STORAGE_BUCKET:-}
|
|
FIREBASE_MESSAGING_SENDER_ID: ${FIREBASE_MESSAGING_SENDER_ID:-}
|
|
FIREBASE_APP_ID: ${FIREBASE_APP_ID:-}
|
|
FIREBASE_VAPID_KEY: ${FIREBASE_VAPID_KEY:-}
|
|
ports:
|
|
- "${WEB_HOST_PORT:-8088}:80"
|
|
depends_on:
|
|
core-backend:
|
|
condition: service_healthy
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-qO-", "http://127.0.0.1/"]
|
|
interval: 10s
|
|
timeout: 3s
|
|
retries: 5
|
|
restart: unless-stopped
|
|
# Join Nginx Proxy Manager network so msn.iykyka.com can reach web by name.
|
|
networks:
|
|
- default
|
|
- npm
|
|
|
|
volumes:
|
|
ykavu_pgdata:
|
|
|
|
networks:
|
|
default:
|
|
npm:
|
|
external: true
|
|
name: nginx-proxy_default
|