docker-compose.yml

# ─────────────────────────────────────────────────────────────────────
# AlianHub - Project Management System (self-hosted)
#
# Quick start:
#   1. Copy .env.example to .env and set at least JWT_SECRET
#   2. docker compose up -d
#   3. Open http://localhost:4000
#
# Update to a newer version:
#   docker compose pull && docker compose up -d
#
# Build the image from local source instead of pulling the registry image:
#   docker compose build
#   docker compose up -d
# ─────────────────────────────────────────────────────────────────────

services:
  # ── AlianHub backend + bundled frontend ────────────────────────────
  app:
    image: ghcr.io/aliansoftwareteam/alianhub:${ALIANHUB_VERSION:-latest}
    build:
      context: .
      dockerfile: Dockerfile
    container_name: alianhub
    restart: unless-stopped
    ports:
      - "${APP_PORT:-4000}:4000"
    environment:
      # Required — connect to the bundled mongo service below
      MONGODB_URL: mongodb://mongo:27017/alianhub
      # Required — generate a random string for each new install
      JWT_SECRET: ${JWT_SECRET:?JWT_SECRET is required — set it in .env}
      # Optional — public URL clients use to reach the API
      APIURL: ${APIURL:-http://localhost:4000/}
      # Optional — "server" (local filesystem) or "wasabi" (S3-compatible)
      STORAGE_TYPE: ${STORAGE_TYPE:-server}
      # Optional — override port (uncommon)
      PORT: 4000
    env_file:
      # Picks up any additional env vars defined in .env (e.g. SMTP, OAuth)
      - path: .env
        required: false
    volumes:
      # Persists file uploads when STORAGE_TYPE=server
      - alianhub_storage:/app/common-storage
    depends_on:
      mongo:
        condition: service_healthy
    networks:
      - alianhub

  # ── MongoDB ───────────────────────────────────────────────────────
  mongo:
    image: mongo:7
    container_name: alianhub-mongo
    restart: unless-stopped
    volumes:
      - alianhub_mongo_data:/data/db
    # Don't expose Mongo on the host by default — the app talks to it
    # over the internal network only. Uncomment to access from host:
    # ports:
    #   - "27017:27017"
    healthcheck:
      test: ["CMD", "mongosh", "--quiet", "--eval", "db.adminCommand('ping').ok"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
    networks:
      - alianhub

volumes:
  alianhub_mongo_data:
    name: alianhub_mongo_data
  alianhub_storage:
    name: alianhub_storage

networks:
  alianhub:
    name: alianhub
    driver: bridge