itkdev_signing_server/docker-compose.server.yml at main · itk-dev/itkdev_signing_server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
networks:
  frontend:
    external: true
  app:
    driver: bridge
    internal: false

services:
  nginx:
    image: nginxinc/nginx-unprivileged:alpine
    restart: unless-stopped
    depends_on:
      - signing-server
    networks:
      - app
      - frontend
    volumes:
      - ./.docker/templates:/etc/nginx/templates:ro
      - ./.docker/nginx.conf:/etc/nginx/nginx.conf:ro
      - .:/app
    environment:
      NGINX_PORT: 8080
      NGINX_MAX_BODY_SIZE: ${MAX_UPLOAD_SIZE:-56M}
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-nginx.rule=Host(`${COMPOSE_SERVER_DOMAIN}`)"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-nginx.entrypoints=websecure"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-nginx.tls.certresolver=letsencrypt"
      - "traefik.http.services.${COMPOSE_PROJECT_NAME}-nginx.loadbalancer.server.port=8080"

  signing-server:
    image: ghcr.io/itk-dev/signing-server:${TAG:-latest}
    restart: unless-stopped
    networks:
      - app
    environment:
      PUID: ${PUID:-1042}
      PGID: ${PGID:-1042}
    volumes:
      - ./config/application.yaml:/app/config/application.yaml:ro
      - ./config/certificate.p12:/app/config/certificate.p12:ro