PatchHound/docker-compose.yml at main · FrodeHus/PatchHound · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
services:
  postgres:
    image: postgres:17
    environment:
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    volumes:
      - pgdata:/var/lib/postgresql/data
    ports:
      - "5432:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
      interval: 5s
      timeout: 5s
      retries: 20
      start_period: 5s

  openbao:
    image: openbao/openbao
    command: server -config=/etc/openbao/openbao.hcl
    environment:
      BAO_ADDR: http://127.0.0.1:8200
      VAULT_UI: true
    cap_add:
      - IPC_LOCK
    volumes:
      - ./deploy/openbao/config/openbao.hcl:/etc/openbao/openbao.hcl:ro
      - openbao_data:/openbao/file
    ports:
      - "8200:8200"
    healthcheck:
      test: ["CMD-SHELL", "bao status -address=http://127.0.0.1:8200 >/dev/null 2>&1 || test $? -eq 2"]
      interval: 10s
      timeout: 5s
      retries: 12

  redis:
    image: redis:7-alpine
    ports:
      - "6379:6379"
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 10

  api:
    build:
      context: .
      dockerfile: src/PatchHound.Api/Dockerfile
    environment:
      ASPNETCORE_ENVIRONMENT: ${API_ENVIRONMENT:-Development}
      ConnectionStrings__PatchHound: Host=postgres;Database=${POSTGRES_DB};Username=${POSTGRES_USER};Password=${POSTGRES_PASSWORD}
      AzureAd__ClientId: ${AZURE_AD_CLIENT_ID}
      AzureAd__TenantId: ${AZURE_AD_TENANT_ID}
      AzureAd__Audience: ${AZURE_AD_AUDIENCE}
      AzureAd__EnablePiiLogging: ${AZURE_AD_ENABLE_PII_LOGGING:-false}
      OpenBao__Address: ${OPENBAO_INTERNAL_ADDR:-http://openbao:8200}
      OpenBao__Token: ${OPENBAO_TOKEN:-}
      OpenBao__KvMount: ${OPENBAO_KV_MOUNT:-patchhound}
      Smtp__Host: ${SMTP_HOST}
      Smtp__Port: ${SMTP_PORT}
      Smtp__Username: ${SMTP_USERNAME}
      Smtp__Password: ${SMTP_PASSWORD}
      ConnectionStrings__Redis: redis:6379
    depends_on:
      postgres:
        condition: service_healthy
      openbao:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "curl -fsS http://127.0.0.1:8080/api/health >/dev/null || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 12
      start_period: 15s
    # No ports — internal only, accessed by frontend via Docker network

  worker:
    build:
      context: .
      dockerfile: src/PatchHound.Worker/Dockerfile
    environment:
      DOTNET_ENVIRONMENT: ${WORKER_ENVIRONMENT:-Development}
      ConnectionStrings__PatchHound: Host=postgres;Database=${POSTGRES_DB};Username=${POSTGRES_USER};Password=${POSTGRES_PASSWORD}
      OpenBao__Address: ${OPENBAO_INTERNAL_ADDR:-http://openbao:8200}
      OpenBao__Token: ${OPENBAO_TOKEN:-}
      OpenBao__KvMount: ${OPENBAO_KV_MOUNT:-patchhound}
      ConnectionStrings__Redis: redis:6379
    depends_on:
      postgres:
        condition: service_healthy
      openbao:
        condition: service_healthy
      api:
        condition: service_healthy

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
    environment:
      NODE_ENV: ${FRONTEND_NODE_ENV:-production}
      API_BASE_URL: http://api:8080/api
      SESSION_SECRET: ${SESSION_SECRET}
      SESSION_DATABASE_URL: postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}
      ENTRA_CLIENT_ID: ${AZURE_AD_CLIENT_ID}
      ENTRA_CLIENT_SECRET: ${ENTRA_CLIENT_SECRET}
      ENTRA_TENANT_ID: ${AZURE_AD_TENANT_ID}
      ENTRA_REDIRECT_URI: ${FRONTEND_ORIGIN}/auth/callback
      ENTRA_SCOPES: ${ENTRA_SCOPES}
      FRONTEND_ORIGIN: ${FRONTEND_ORIGIN}
    depends_on:
      api:
        condition: service_healthy
    ports:
      - "3000:3000"

volumes:
  pgdata:
  openbao_data: