-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathdocker-compose.yml
104 lines (97 loc) · 2.58 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
version: "3.6"
services:
yivi:
image: ghcr.io/privacybydesign/irma:edge
command: >
server -v --requestors '{"tosti": {"auth_method": "token", "key": "${YIVI_TOKEN}"}}' --production --no-email --url https://yivi.tosti.science.ru.nl --port 80
restart: unless-stopped
networks:
- web
environment:
YIVI_TOKEN: ${YIVI_TOKEN}
database:
image: postgres:13.3-alpine
restart: unless-stopped
networks:
- db
volumes:
- db-data:/var/lib/postgresql/data
environment:
POSTGRES_USER: tosti
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
POSTGRES_DB: tosti
healthcheck:
test: ["CMD", "pg_isready", "-U", "tosti"]
interval: 10s
timeout: 5s
retries: 5
web:
image: ghcr.io/kioui/tosti:latest
restart: unless-stopped
networks:
- web
- db
expose:
- "80"
depends_on:
- database
- yivi
volumes:
- media:/media
- cache:/app/cache
environment:
POSTGRES_USER: tosti
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
POSTGRES_DB: tosti
POSTGRES_HOST: database
POSTGRES_PORT: 5432
DJANGO_SECRET_KEY: ${DJANGO_SECRET_KEY}
DJANGO_ALLOWED_HOSTS: tosti.science.ru.nl,new.tosti.science.ru.nl
SENTRY_DSN: ${SENTRY_DSN}
YIVI_SERVER_URL: https://yivi.tosti.science.ru.nl
YIVI_SERVER_TOKEN: ${YIVI_TOKEN}
SAML_ENTITY_ID: tosti.science.ru.nl
SAML_BASE_URL: https://tosti.science.ru.nl
SAML_METADATA_FILE: ${SAML_METADATA_FILE}
SAML_PUBLIC_KEY_FILE: ${SAML_PUBLIC_KEY_FILE}
SAML_PRIVATE_KEY_FILE: ${SAML_PRIVATE_KEY_FILE}
EMAIL_HOST: smtp.science.ru.nl
EMAIL_PORT: 25
EMAIL_DEFAULT_SENDER: "[email protected]"
EMAIL_HOST_USER: "[email protected]"
DEFAULT_FROM_EMAIL: "TOSTI <[email protected]>"
SERVER_EMAIL: "[email protected]"
healthcheck:
test: ["CMD", "python", "manage.py", "check"]
interval: 10s
timeout: 5s
retries: 5
cron:
image: ghcr.io/kioui/tosti:latest
entrypoint: ["/bin/sh", "/entrypoint_cron.sh"]
restart: unless-stopped
networks:
- web
- db
depends_on:
- database
- yivi
volumes:
- media:/media
- cache:/app/cache
environment:
POSTGRES_USER: tosti
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
POSTGRES_DB: tosti
POSTGRES_HOST: database
POSTGRES_PORT: 5432
DJANGO_SECRET_KEY: ${DJANGO_SECRET_KEY}
networks:
web:
external: true
name: caddy_reverseproxy
db:
volumes:
db-data:
media:
cache: