docker-compose.yml

services:
  postgres:
    restart: always
    image: postgres
    environment:
      POSTGRES_PASSWORD: "changeme_metropolis_password"
      POSTGRES_USER: "metropolis_superuser"
      POSTGRES_DB: "metropolis"
      # TODO: load secrets from files?
      # TODO: backup-on-start?
    volumes:
      - ${PWD}/postgres-init-db.sh:/docker-entrypoint-initdb.d/postgres-init-db.sh
      #- '${PWD}/pg_dump_2023-12-23.sql.gz:/pg_dump.sql.gz'
      - postgres-data:/var/lib/postgresql/data
    networks:
      - postgres
    healthcheck:
      test: ["CMD", "bash", "-c", "PGPASSWORD=changeme_metropolis_password psql -U metropolis_superuser metropolis"]
      interval: 10s
      timeout: 60s
  gunicorn:
    restart: always
    image: ghcr.io/wlmac/metropolis
    build: .
    command: /app/docker_entrypoint.sh gunicorn
    entrypoint: bash
    environment:
      METROPOLIS_AUTOSETUP: "yes"
    ports:
      - "0.0.0.0:28780:28780" # force only IPv4 (only have iptables rules on IPv4)
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - postgres
      - gunicorn
      - redis
    volumes:
      - ${PWD}/metropolis/local_settings.py:/app-inject/metropolis/docker_local_settings.py:ro # changed to /metropolis2/ on server
      - ${PWD}/metropolis/local_rsa_privkey.pem:/app-inject/metropolis/local_rsa_privkey.pem:ro # see above for all other references.
      - public:/app-public:rw
      - media:/app-media:rw
  celery:
    restart: always
    image: ghcr.io/wlmac/metropolis
    build: .
    command: /app/docker_entrypoint.sh celery
    entrypoint: bash
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - postgres
      - redis
    volumes:
      - ${PWD}/metropolis/local_settings.py:/app-inject/metropolis/docker_local_settings.py:ro
      - ${PWD}/metropolis/local_rsa_privkey.pem:/app-inject/metropolis/local_rsa_privkey.pem:ro
  celery-beat:
    restart: always
    image: ghcr.io/wlmac/metropolis
    build: .
    command: /app/docker_entrypoint.sh as-app /app/.venv/bin/celery -A metropolis beat --loglevel=INFO
    entrypoint: bash
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - postgres
      - redis
    volumes:
      - ${PWD}/metropolis/local_settings.py:/app-inject/metropolis/docker_local_settings.py:ro
      - ${PWD}/metropolis/local_rsa_privkey.pem:/app-inject/metropolis/local_rsa_privkey.pem:ro
  redis:
    restart: always
    image: redis
    networks:
      - redis

volumes:
  public:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: '/srv2/app/static'
  media:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: '/srv2/app/media'
  static2:
  postgres-data:

networks:
  gunicorn: # gunicorn <-> caddy
  redis: # redis <-> gunicorn
  postgres: # postgres <-> gunicorn