Team5_BE/docker-compose.yml at develop · dozzzang/Team5_BE · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
services:
  mysql:
    image: mysql:8.0
    container_name: dailyq-mysql
    restart: unless-stopped
    environment:
      MYSQL_ROOT_PASSWORD: ${DB_PASSWORD}
      MYSQL_DATABASE: ${DB_NAME}
      # MYSQL_USER/MYSQL_PASSWORD는 일반 계정용입니다. root를 쓰면 안 됩니다.
      TZ: Asia/Seoul
    command: [
      "mysqld",
      "--default-authentication-plugin=mysql_native_password",
      "--character-set-server=utf8mb4",
      "--collation-server=utf8mb4_unicode_ci",
      "--init-connect=SET NAMES utf8mb4",
      "--skip-character-set-client-handshake"
    ]
    ports:
      - "3306:3306"
    volumes:
      - mysql_data:/var/lib/mysql
      - ./dailyq/src/main/resources/static/01_schema.sql:/docker-entrypoint-initdb.d/01_schema.sql:ro
      - ./dailyq/src/main/resources/static/02_mock.sql:/docker-entrypoint-initdb.d/02_mock.sql:ro
    networks:
      - dailyq-network
    # MySQL 리소스 제한
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 512M
        reservations:
          cpus: '0.25'
          memory: 256M
    healthcheck:
      test: [ "CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -uroot -p$${MYSQL_ROOT_PASSWORD} || exit 1" ]
      interval: 10s
      timeout: 10s
      retries: 15
      start_period: 90s

  app:
    image: dailyq-app:latest
    container_name: dailyq-app
    restart: unless-stopped
    ports:
      - "80:8080"
    environment:
      - DB_HOST=mysql
      - DB_PORT=3306
      - DB_NAME=${DB_NAME}
      - DB_USERNAME=${DB_USERNAME}
      - DB_PASSWORD=${DB_PASSWORD}
      - OPENAI_API_KEY=${OPENAI_API_KEY}
      - GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID}
      - GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET}
      - KAKAO_API_KEY=${KAKAO_API_KEY}
      - JWT_SECRET=${JWT_SECRET}
      - JWT_ACCESS_TOKEN_EXPIRATION_MILLIS=${JWT_ACCESS_TOKEN_EXPIRATION_MILLIS}
      - JWT_REFRESH_TOKEN_EXPIRATION_MILLIS=${JWT_REFRESH_TOKEN_EXPIRATION_MILLIS}
      - DEV_API_PASSWORD=${DEV_API_PASSWORD}
      - CORS_ALLOWED_ORIGINS=${CORS_ALLOWED_ORIGINS}
      - FRONTEND_URL=${FRONTEND_URL}
      - COOKIE_DOMAIN=${COOKIE_DOMAIN}
      - SECURITY_HSTS_ENABLED=${SECURITY_HSTS_ENABLED:-true}
      - SPRING_PROFILES_ACTIVE=prod
      - NCP_ACCESS_KEY=${NCP_ACCESS_KEY}
      - NCP_SECRET_KEY=${NCP_SECRET_KEY}
      - NCP_BUCKET_NAME=${NCP_BUCKET_NAME}
      - NCP_CLOVA_DOMAIN_INVOKE_URL=${NCP_CLOVA_DOMAIN_INVOKE_URL}
      - NCP_CLOVA_DOMAIN_SECRET_KEY=${NCP_CLOVA_DOMAIN_SECRET_KEY}
    depends_on:
      mysql:
        condition: service_healthy
    networks:
      - dailyq-network
    # CPU/메모리 리소스 제한으로 시스템 안정성 확보
    deploy:
      resources:
        limits:
          cpus: '1.5'
          memory: 1.5G
        reservations:
          cpus: '0.75'
          memory: 768M
    healthcheck:
      test: [ "CMD-SHELL", "curl -f http://localhost:8080/actuator/health || exit 1" ]
      interval: 20s
      timeout: 15s
      retries: 6
      start_period: 150s

volumes:
  mysql_data:

networks:
  dailyq-network:
    driver: bridge