docker-compose.prod.yml

version: "3"

######
# Configuration for https://www.cornerwise.org
# In addition to the standard application/db/cache containers, this includes an
# nginx # container (nginx), a container that dynamically generates the nginx
# configuration (nginx-gen), and a container that automatically requests and
# renews the SSL certificate from Lets Encrypt. Finally, there is
# jsbuild container, which runs the JS/CSS build process and stores the
# results in the static_jsbuild volume.

services:
  nginx:
    image: nginx
    container_name: nginx
    labels:
      com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true"
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - nginx_conf:/etc/nginx/conf.d
      - nginx_vhost:/etc/nginx/vhost.d
      - nginx_html:/usr/share/nginx/html
      - nginx_certs:/etc/nginx/certs
      - ./docker-support/cornerwise.org_location.conf:/etc/nginx/vhost.d/default_location
      - static_resources:/static
      - media:/media
  nginx-gen:
    image: jwilder/docker-gen
    container_name: nginx-gen
    command: -notify-sighup nginx -watch -wait 5s:30s /etc/docker-gen/templates/nginx.tmpl /etc/nginx/conf.d/default.conf
    restart: always
    volumes:
      - nginx_conf:/etc/nginx/conf.d
      - nginx_vhost:/etc/nginx/vhost.d
      - nginx_html:/usr/share/nginx/html
      - nginx_certs:/etc/nginx/certs
      - ./docker-support/nginx.tmpl:/etc/docker-gen/templates/nginx.tmpl:ro
      - ./docker-support/cornerwise.org_location.conf:/etc/nginx/vhost.d/default_location
      - /var/run/docker.sock:/tmp/docker.sock:ro
  nginx-letsencrypt:
    image: jrcs/letsencrypt-nginx-proxy-companion
    restart: always
    volumes:
      - nginx_conf:/etc/nginx/conf.d
      - nginx_vhost:/etc/nginx/vhost.d
      - nginx_html:/usr/share/nginx/html
      - nginx_certs:/etc/nginx/certs
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      NGINX_DOCKER_GEN_CONTAINER: nginx-gen
      NGINX_PROXY_CONTAINER: nginx
  jsbuild:
    build:
      context: ./docker-support
      dockerfile: ./Dockerfile-jsbuild
    image: bdsand/cornerwise_jsbuild
    volumes:
      - static_jsbuild:/static
      - ./client:/client
    environment:
      CLIENT_DIR: "/client"
      OUTPUT_DIR: "/static"
  postgres:
    image: mdillon/postgis:9.4-alpine
    volumes:
      - data:/var/lib/postgresql/data
  redis:
    image: redis:latest
    volumes:
      - redis_data:/data
  cornerwise:
    build: .
    image: bdsand/cornerwise:latest
    env_file:
      - ./docker-support/common.env
      - ./docker-support/prod.env
    environment:
      ADMINS: "bdougsand+cornerwise@gmail.com"
      APP_MODE: "production"
      ALLOWED_HOSTS: ".cornerwise.org"
      DJANGO_SERVE_STATIC: "0"
      DJANGO_SERVE_MEDIA: "0"
      GOOGLE_APPLICATION_CREDENTIALS: "/google_credentials.json"
      VIRTUAL_HOST: "cornerwise.org,somerville.cornerwise.org,cambridge.cornerwise.org,cornerwise.somervillema.gov,www.cornerwise.org"
      LETSENCRYPT_HOST: "cornerwise.org,www.cornerwise.org,somerville.cornerwise.org,cambridge.cornerwise.org"
      LETSENCRYPT_EMAIL: "bdougsand+letsencrypt@gmail.com"
      ADMINS: "bdougsand+cornerwise@gmail.com"
      SITE_REDIRECT: 1
      CELERY_WORKER_COUNT: 1
    expose:
      - "3000"
    links:
      - postgres
      - redis
    restart: unless-stopped
    working_dir: /app/
    command: bash /app/start.sh
    volumes:
      - media:/media
      - static_jsbuild:/static/build
      - static_resources:/static_build
      - ./server:/app
      - ./client:/static
      - ./server/cornerwise/google_credentials.json:/google_credentials.json
      - ./docs/scraper-schema.json:/app/scraper-schema.json
volumes:
  redis_data:
    driver: local
  data:
    driver: local
  media:
    driver: local
  nginx_conf:
    driver: local
  nginx_vhost:
    driver: local
  nginx_html:
    driver: local
  nginx_certs:
    driver: local
  # Built CSS and JS will go here:
  static_jsbuild:
    driver: local
  # ./admin.py collectstatic will put static files here:
  static_resources:
    driver: local