pestcontrol_livingdatabase/docker-compose.yml at main · springinnovate/pestcontrol_livingdatabase · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
services:
  app:
    hostname: app_api
    build: app
    volumes:
      - ./app:/usr/local/pcld_api
      - pcld_data:/usr/local/data
    logging:
      driver: local
      options:
        max-size: "10m"
        max-file: "3"
    deploy:
      resources:
        limits:
          memory: 2G
          cpus: '2'
        reservations:
          memory: 1G
          cpus: '2'
    tty: true
    entrypoint: >
      sh -c "rsync -av /usr/local/pcld_api/live_database/ /usr/local/data/live_database/ && waitress-serve --host=0.0.0.0 --port=5000 app:app"
    expose:
      - "5000"
    depends_on:
      - redis
      - reverse-proxy
      - celery_worker
    environment:
      - INIT_COVARIATES=True
      - CELERY_BROKER_URL=redis://redis:6379/0
      - CELERY_RESULT_BACKEND=redis://redis:6379/0
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.app.rule=Host(`pcld.ecoshard.org`)"
      - "traefik.http.routers.app.entrypoints=websecure"
      - "traefik.http.routers.app.tls=true"
      - "traefik.http.routers.app.tls.certresolver=letsencrypt"

  app_dev:
    extends:
      service: app
    profiles:
      - development
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.app_dev.rule=Host(`localhost`)"
      - "traefik.http.routers.app_dev.entrypoints=websecure"
      - "traefik.http.routers.app_dev.tls=true"

  celery_worker:
    container_name: celery_worker
    hostname: celery_worker
    build: app
    volumes:
      - ./app:/usr/local/pcld_api
      - pcld_data:/usr/local/data
    environment:
      - CELERY_BROKER_URL=redis://redis:6379/0
      - CELERY_RESULT_BACKEND=redis://redis:6379/0
      - INIT_COVARIATES=False
      - ENV GOOGLE_APPLICATION_CREDENTIALS=/usr/local/pcld_api/secrets/service-account-key.json
    deploy:
      resources:
        limits:
          memory: 2G
        reservations:
          memory: 1G
    command: celery -A app.celery worker --loglevel=info --concurrency=4 --max-tasks-per-child=10
    depends_on:
      - redis

  redis:
    image: "redis:alpine"
    ports:
      - "6379:6379"

  reverse-proxy:
    image: traefik:v2.11
    command:
      # --- providers ----------------------------
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entryPoints.web.address=:80"
      - "--entryPoints.web.http.redirections.entryPoint.to=websecure"
      - "--entryPoints.web.http.redirections.entryPoint.scheme=https"
      - "--entryPoints.websecure.address=:443"
      - "--certificatesResolvers.letsencrypt.acme.httpChallenge=true"
      - "--certificatesResolvers.letsencrypt.acme.httpChallenge.entryPoint=web"
      - "--certificatesResolvers.letsencrypt.acme.email=rich@springinnovate.org"
      - "--certificatesResolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "./letsencrypt:/letsencrypt"

volumes:
  pcld_data: