pulse-zax/docker-compose-supabase.yml

115 lines
4.2 KiB
YAML

services:
db:
image: supabase/postgres:15.6.1.143
restart: unless-stopped
container_name: pulse-db
entrypoint: ["/bin/bash", "/docker-entrypoint-custom/db-entrypoint.sh"]
volumes:
- ./data/postgres:/var/lib/postgresql/data
- ./docker/db-entrypoint.sh:/docker-entrypoint-custom/db-entrypoint.sh:ro
environment:
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
JWT_SECRET: ${JWT_SECRET}
JWT_EXP: ${JWT_EXPIRY:-3600}
healthcheck:
test: ["CMD-SHELL", "pg_isready -U postgres && test -f /tmp/.db-init-complete"]
interval: 5s
timeout: 5s
retries: 20
auth:
image: supabase/gotrue:v2.170.0
restart: unless-stopped
container_name: pulse-auth
depends_on:
db:
condition: service_healthy
environment:
GOTRUE_DB_DATABASE_URL: postgres://supabase_auth_admin:${POSTGRES_PASSWORD}@db:5432/postgres
GOTRUE_DB_DRIVER: postgres
GOTRUE_SITE_URL: ${SITE_URL}
GOTRUE_URI_ALLOW_LIST: ${ADDITIONAL_REDIRECT_URLS:-}
GOTRUE_DISABLE_SIGNUP: "false"
GOTRUE_JWT_ADMIN_ROLES: service_role
GOTRUE_JWT_AUD: authenticated
GOTRUE_JWT_DEFAULT_GROUP_NAME: authenticated
GOTRUE_JWT_EXP: ${JWT_EXPIRY:-3600}
GOTRUE_JWT_SECRET: ${JWT_SECRET}
GOTRUE_EXTERNAL_EMAIL_ENABLED: "true"
GOTRUE_MAILER_AUTOCONFIRM: "true"
GOTRUE_EXTERNAL_GOOGLE_ENABLED: ${GOOGLE_OAUTH_ENABLED:-false}
GOTRUE_EXTERNAL_GOOGLE_CLIENT_ID: ${GOOGLE_OAUTH_CLIENT_ID:-}
GOTRUE_EXTERNAL_GOOGLE_SECRET: ${GOOGLE_OAUTH_SECRET:-}
GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI: ${SITE_URL}/auth/v1/callback
GOTRUE_EXTERNAL_DISCORD_ENABLED: ${DISCORD_OAUTH_ENABLED:-false}
GOTRUE_EXTERNAL_DISCORD_CLIENT_ID: ${DISCORD_OAUTH_CLIENT_ID:-}
GOTRUE_EXTERNAL_DISCORD_SECRET: ${DISCORD_OAUTH_SECRET:-}
GOTRUE_EXTERNAL_DISCORD_REDIRECT_URI: ${SITE_URL}/auth/v1/callback
GOTRUE_EXTERNAL_FACEBOOK_ENABLED: ${FACEBOOK_OAUTH_ENABLED:-false}
GOTRUE_EXTERNAL_FACEBOOK_CLIENT_ID: ${FACEBOOK_OAUTH_CLIENT_ID:-}
GOTRUE_EXTERNAL_FACEBOOK_SECRET: ${FACEBOOK_OAUTH_SECRET:-}
GOTRUE_EXTERNAL_FACEBOOK_REDIRECT_URI: ${SITE_URL}/auth/v1/callback
GOTRUE_EXTERNAL_TWITCH_ENABLED: ${TWITCH_OAUTH_ENABLED:-false}
GOTRUE_EXTERNAL_TWITCH_CLIENT_ID: ${TWITCH_OAUTH_CLIENT_ID:-}
GOTRUE_EXTERNAL_TWITCH_SECRET: ${TWITCH_OAUTH_SECRET:-}
GOTRUE_EXTERNAL_TWITCH_REDIRECT_URI: ${SITE_URL}/auth/v1/callback
API_EXTERNAL_URL: ${SITE_URL}
healthcheck:
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:8081/health || exit 1"]
interval: 5s
timeout: 5s
retries: 10
kong:
image: kong:3.4
restart: unless-stopped
container_name: pulse-kong
depends_on:
auth:
condition: service_healthy
volumes:
- ./docker/kong-supabase.yml:/home/kong/kong.yml:ro
environment:
KONG_DATABASE: "off"
KONG_DECLARATIVE_CONFIG: /home/kong/kong.yml
KONG_DNS_ORDER: LAST,A,CNAME
KONG_PLUGINS: request-transformer,cors,key-auth,acl
ports:
- "127.0.0.1:8000:8000"
healthcheck:
test: ["CMD", "kong", "health"]
interval: 5s
timeout: 5s
retries: 10
pulse:
image: ghcr.io/plsechat/pulse-chat:latest
restart: unless-stopped
container_name: pulse
depends_on:
db:
condition: service_healthy
kong:
condition: service_healthy
ports:
- "${PULSE_PORT:-4991}:4991"
- "40000-40020:40000-40020/udp"
env_file: .env
environment:
RUNNING_IN_DOCKER: "true"
DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD}@db:5432/postgres
SUPABASE_URL: http://kong:8000
SUPABASE_PUBLIC_URL: ${SITE_URL}
SUPABASE_ANON_KEY: ${SUPABASE_ANON_KEY}
SUPABASE_SERVICE_ROLE_KEY: ${SUPABASE_SERVICE_ROLE_KEY}
REGISTRATION_DISABLED: ${REGISTRATION_DISABLED:-false}
PUBLIC_IP: ${PUBLIC_IP}
volumes:
- ./data/pulse:/root/.config/pulse
healthcheck:
test: ["CMD-SHELL", "bun -e \"fetch('http://localhost:4991/healthz').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))\""]
interval: 10s
timeout: 5s
retries: 12
start_period: 30s