p3portal/docker-compose.yml at main · cutetux/p3portal · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# p3portal.org
# Container-Image-Registry (GHCR):
#   Core (AGPLv3, voll quelloffen): ghcr.io/p3portal-org/p3portal:latest
#   Plus (Source-Available, freischaltbar via Lizenz/30-Tage-Test):
#                                   ghcr.io/p3portal-org/p3portal-plus:latest
# Die meisten Plus-Funktionen (Stacks, Topologie, Auto-Snapshots, Firewall-Deklaration, …)
# laufen NUR mit dem Plus-Image. Zum Wechseln die `image:`-Zeilen der Dienste
# `portal` und `celery-worker` auf das Plus-Image umstellen (siehe Kommentar dort).

networks:
  portal-net:
    driver: bridge

services:
  valkey:
    image: valkey/valkey:8-alpine
    restart: unless-stopped
    networks:
      - portal-net
    security_opt:
      - no-new-privileges:true
    mem_limit: 256m

  celery-worker:
    # Core-Image. Für Plus stattdessen: ghcr.io/p3portal-org/p3portal-plus:latest
    image: ghcr.io/p3portal-org/p3portal:latest
    restart: unless-stopped
    networks:
      - portal-net
    command: celery -A backend.celery_app worker --beat -l info
    env_file:
      - .env
    environment:
      - SECRET_KEY=${SECRET_KEY}
      - VALKEY_URL=${VALKEY_URL:-redis://valkey:6379/0}
      - TZ=${TZ:-Europe/Berlin}
    volumes:
      - ./ansible:/app/ansible
      - ./packer:/app/packer
      - ./data:/app/data
    security_opt:
      - no-new-privileges:true
    mem_limit: 1g
    depends_on:
      - valkey

  portal:
    # Core-Image. Für Plus stattdessen: ghcr.io/p3portal-org/p3portal-plus:latest
    image: ghcr.io/p3portal-org/p3portal:latest
    restart: unless-stopped
    networks:
      - portal-net
    ports:
      - "8443:8443"
      - "8103:8103"
    env_file:
      - .env
    environment:
      - SECRET_KEY=${SECRET_KEY}
      - VALKEY_URL=${VALKEY_URL:-redis://valkey:6379/0}
      - TZ=${TZ:-Europe/Berlin}
    volumes:
      - ./ansible:/app/ansible
      - ./packer:/app/packer
      - ./data:/app/data
    security_opt:
      - no-new-privileges:true
    mem_limit: 1g
    depends_on:
      - valkey