Musivault/docker-compose.yml at main · Jeanball/Musivault · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
version: '3.8'

services:
  # MongoDB database
  mongodb:
    image: mongo:7
    container_name: musivault-mongodb
    restart: unless-stopped
    environment:
      MONGO_INITDB_DATABASE: musivault
    volumes:
      - mongodb_data:/data/db
    networks:
      - musivault-network
    healthcheck:
      test: echo 'db.runCommand("ping").ok' | mongosh localhost:27017/musivault --quiet
      interval: 10s
      timeout: 5s
      retries: 5

  # Backend API
  backend:
    image: ghcr.io/jeanball/musivault/backend:${IMAGE_TAG:-latest}
    container_name: musivault-backend
    restart: unless-stopped
    environment:
      - NODE_ENV=production
      - PORT=5000
      - MONGO_URI=${MONGO_URI:-mongodb://mongodb:27017/musivault}
      - SESSION_SECRET=${SESSION_SECRET}
      - JWT_SECRET=${JWT_SECRET:-${SESSION_SECRET}}
      - DISCOGS_KEY=${DISCOGS_KEY}
      - DISCOGS_SECRET=${DISCOGS_SECRET}
      # Initial admin (optional - remove after first run)
      - ADMIN_EMAIL=${ADMIN_EMAIL:-}
      - ADMIN_USERNAME=${ADMIN_USERNAME:-}
      - ADMIN_PASSWORD=${ADMIN_PASSWORD:-}
      # OIDC/SSO Configuration (optional)
      - OIDC_ISSUER=${OIDC_ISSUER:-}
      - OIDC_CLIENT_ID=${OIDC_CLIENT_ID:-}
      - OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET:-}
      - OIDC_REDIRECT_URI=${OIDC_REDIRECT_URI:-}
      - OIDC_PROVIDER_NAME=${OIDC_PROVIDER_NAME:-SSO}
      - FRONTEND_URL=${FRONTEND_URL:-}
      - IMAGE_TAG=${IMAGE_TAG:-latest}
      - ENABLE_BACKGROUND_MIGRATION=${ENABLE_BACKGROUND_MIGRATION:-false}
    depends_on:
      mongodb:
        condition: service_healthy
    volumes:
      - ./logs:/app/logs
      - ./uploads:/app/uploads
    networks:
      - musivault-network
    healthcheck:
      test: [ "CMD", "node", "-e", "require('http').get('http://localhost:5000/api/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})" ]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  # Frontend (Nginx)
  frontend:
    image: ghcr.io/jeanball/musivault/frontend:${IMAGE_TAG:-latest}
    container_name: musivault-frontend
    restart: unless-stopped
    ports:
      - "${PORT:-3000}:80"
    environment:
      - BACKEND_HOST=${BACKEND_HOST:-musivault-backend}
      - BACKEND_PORT=${BACKEND_PORT:-5000}
    depends_on:
      - backend
    networks:
      - musivault-network

networks:
  musivault-network:
    driver: bridge

volumes:
  mongodb_data:
    driver: local