docker-compose.pre-prod.yml

####
# PROD — utilise le Traefik externe (wildcard_conf)
# Ne pas lancer en même temps que docker-compose.yml (dev)
####
services:

  #### FEDOW ####
  fedow_memcached:
    image: memcached:1.6
    container_name: fedow_memcached
    hostname: fedow_memcached
    restart: always
    networks:
      - backend

  fedow_django:
    image: tibillet/fedow:latest
    container_name: fedow_django
    hostname: fedow_django
    restart: unless-stopped
    env_file: .env
    user: fedow
    links:
      - fedow_memcached:memcached
    volumes:
      - fedow_database:/home/fedow/Fedow/database
    networks:
      - backend
    command: "bash start.sh"

  fedow_nginx:
    image: nginx
    restart: unless-stopped
    container_name: fedow_nginx
    hostname: fedow_nginx
    volumes:
      - ./nginx/fedow_nginx.conf:/etc/nginx/conf.d/default.conf:ro
      - ./logs:/logs
    depends_on:
      - fedow_django
    links:
      - fedow_django:fedow_django
    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend
      - traefik.http.routers.fedow_nginx.entrypoints=websecure
      - traefik.http.routers.fedow_nginx.tls=true
      - traefik.http.routers.fedow_nginx.tls.certresolver=le-alpn
      - traefik.http.routers.fedow_nginx.rule=Host(`fedow.${DOMAIN}`)
      - traefik.http.routers.fedow_nginx.priority=100
      - traefik.http.routers.fedow_nginx.middlewares=crowdsec@file
      - traefik.http.services.fedow_nginx.loadbalancer.server.port=80
    networks:
      - frontend
      - backend

  #########
  # LESPASS
  #########
  lespass_postgres:
    image: postgres:13-bookworm
    restart: unless-stopped
    container_name: lespass_postgres
    hostname: lespass_postgres
    volumes:
      - lespass_dev_db:/var/lib/postgresql/data
    env_file: .env
    networks:
      - backend

  lespass_memcached:
    image: memcached:1.6
    container_name: lespass_memcached
    hostname: lespass_memcached
    restart: unless-stopped
    # Limite item portee a 8 Mo (defaut 1 Mo) : l'agregat SEO AGGREGATE_EVENTS
    # (~687 o/event) approche 1 Mo vers ~1500 events futurs ; au-dela le set L1
    # echoue. -m 256 : memoire totale 256 Mo (defaut 64) pour accueillir ces gros
    # items sans evictions. A ajuster selon la RAM dispo. cf. TECH_DOC SEO CHANTIER-08.
    # / Item size raised to 8 MB (default 1 MB): SEO AGGREGATE_EVENTS nears 1 MB
    # around ~1500 future events. -m 256: 256 MB total to avoid evictions.
    command: ["memcached", "-m", "256", "-I", "8m"]
    networks:
      - backend

  lespass_redis:
    container_name: lespass_redis
    hostname: lespass_redis
    image: redis:7.2.3-bookworm
    restart: unless-stopped
    networks:
      - backend

  lespass_django:
    build: .
#    image: tibillet/lespass:latest
    restart: unless-stopped
    container_name: lespass_django
    hostname: lespass_django
    volumes:
      - ./:/DjangoFiles
    env_file: .env
    depends_on:
      - lespass_postgres
      - lespass_redis
      - lespass_memcached
    links:
      - lespass_postgres:postgres
      - lespass_redis:redis
      - lespass_memcached:memcached
    networks:
      - backend
    extra_hosts:
      - fedow.${DOMAIN}:172.17.0.1
    command: "bash start_dev.sh"

  lespass_celery:
    build: .
#    image: tibillet/lespass:latest
    container_name: lespass_celery
    restart: unless-stopped
    hostname: lespass_celery
    env_file: .env
    volumes:
      - ./:/DjangoFiles
    depends_on:
      - lespass_postgres
      - lespass_redis
      - lespass_memcached
    links:
      - lespass_postgres:postgres
      - lespass_redis:redis
      - lespass_memcached:memcached
    networks:
      - backend
    extra_hosts:
      - fedow.${DOMAIN}:172.17.0.1
    command: "poetry run celery -A TiBillet worker -l INFO -B --concurrency=6"

  lespass_nginx:
    image: nginx:latest
    container_name: lespass_nginx
    restart: unless-stopped
    hostname: lespass_nginx
    links:
      - lespass_django:lespass_django
    volumes:
      - ./nginx/lespass_dev.conf:/etc/nginx/conf.d/default.conf:ro
      - ./www:/www
      - ./logs:/logs
    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend
      - traefik.http.services.lespass_nginx.loadbalancer.server.port=80

      # Router A — wildcard OVH : *.DOMAIN + apex
#      - traefik.http.routers.lespass-ovh.entrypoints=websecure
#      - traefik.http.routers.lespass-ovh.tls=true
#      - traefik.http.routers.lespass-ovh.tls.certresolver=le-ovh
#      - traefik.http.routers.lespass-ovh.tls.domains[0].main=${DOMAIN}
#      - traefik.http.routers.lespass-ovh.tls.domains[0].sans=*.${DOMAIN}
#      - traefik.http.routers.lespass-ovh.rule=Host(`${DOMAIN}`) || Host(`lespass.${DOMAIN}`) || HostRegexp(`${DOMAIN_REGEX}`)
#      - traefik.http.routers.lespass-ovh.middlewares=crowdsec@file
#
#      # Router B — wildcard Gandi : *.DOMAIN_GANDI + apex
#      - traefik.http.routers.lespass-gandi.entrypoints=websecure
#      - traefik.http.routers.lespass-gandi.tls=true
#      - traefik.http.routers.lespass-gandi.tls.certresolver=le-gandi
#      - traefik.http.routers.lespass-gandi.tls.domains[0].main=${DOMAIN_GANDI}
#      - traefik.http.routers.lespass-gandi.tls.domains[0].sans=*.${DOMAIN_GANDI}
#      - traefik.http.routers.lespass-gandi.rule=Host(`${DOMAIN_GANDI}`) || HostRegexp(`${DOMAIN_GANDI_REGEX}`)
#      - traefik.http.routers.lespass-gandi.middlewares=crowdsec@file

      # Router C — hôte simple (TLS challenge)
      - traefik.http.routers.lespass-simple.entrypoints=websecure
      - traefik.http.routers.lespass-simple.tls=true
      - traefik.http.routers.lespass-simple.tls.certresolver=le-alpn
      - traefik.http.routers.lespass-simple.rule=Host(`${DOMAIN}`) || Host(`lespass.${DOMAIN}`)
      - traefik.http.routers.lespass-simple.middlewares=crowdsec@file



    networks:
      - backend
      - frontend

networks:
  frontend:
    external: true
  backend:

volumes:
  lespass_dev_db:
  fedow_database:


# Données persistantes dans ./data/ (bind mounts)
# - ./data/postgres   : base PostgreSQL Lespass
# - ./data/fedow      : base Fedow