biomappings-curation-app/compose.yaml at main · gyorilab/biomappings-curation-app · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
# vim: set ft=yaml :


name: 'biomappings-curation-app'

networks:

  external:
  internal:
    internal: true

services:

  caddy:
    build:
      args:
        CADDY_EXTRA_PLACEHOLDERS_VERSION: 'v0.10.0'
        CADDY_VERSION: '2.10.0'
      dockerfile: './resources/caddy/caddy.dockerfile'
    depends_on:
      - 'app'
      - 'oauth2-proxy'
    env_file:
      - path: './env/common.env'
      - path: './env/caddy.env'
    networks:
      - 'external'
    ports:
      - app_protocol: 'https'
        mode: 'host'
        protocol: 'tcp'
        published: '${HTTPS_PORT:-443}'
        target: 443
    restart: 'unless-stopped'
    volumes:
      - source: './resources/caddy/conf'
        target: '/etc/caddy'
        type: 'bind'
        read_only: true
      - source: 'caddy-data'
        target: '/data'
        type: 'volume'

  oauth2-proxy:
    command: ['--config', '/etc/oauth2-proxy/oauth2-proxy.toml']
    env_file:
      - path: './env/common.env'
      - path: './env/oauth2-proxy.env'
    environment:
      OAUTH2_PROXY_CLIENT_SECRET: '${OAUTH2_PROXY_CLIENT_SECRET}'
      OAUTH2_PROXY_COOKIE_SECRET: '${OAUTH2_PROXY_COOKIE_SECRET}'
    image: 'quay.io/oauth2-proxy/oauth2-proxy:v7.9.0'
    networks:
      - 'external'
    restart: 'unless-stopped'
    volumes:
      - source: './resources/oauth2-proxy/oauth2-proxy.toml'
        target: '/etc/oauth2-proxy/oauth2-proxy.toml'
        type: 'bind'
        read_only: true

  postgres:
    env_file:
      - path: './env/common.env'
      - path: './env/postgres.env'
    image: 'docker.io/library/postgres:17.5'
    networks:
      - 'internal'
    restart: 'unless-stopped'
    volumes:
      - source: 'postgres-data'
        target: '/var/lib/postgresql/data'
        type: 'volume'

  app:
    build:
      args:
        PIXI_VERSION: '0.49.0'
      context: '.'
      dockerfile: './resources/app/app.dockerfile'
    command:
      - 'gunicorn'
      - '--bind=0.0.0.0:5000'
      - '--limit-request-field_size=32760'
      - '--worker-class=gthread'
      - '--workers=4'
      - '--'
      - 'app:app'
    depends_on:
      - 'postgres'
    env_file:
      - path: './env/common.env'
      - path: './env/postgres.env'
      - path: './env/app.env'
    environment:
      GITHUB_TOKEN: '${GITHUB_TOKEN}'
    expose:
      - '5000/tcp'
    networks:
      - 'external'
      - 'internal'
    restart: 'unless-stopped'
    volumes:
      - source: './app.py'
        target: '/app/app.py'
        type: 'bind'
        read_only: true
      - source: './resources/app/gunicorn.conf.py'
        target: '/app/gunicorn.conf.py'
        type: 'bind'
        read_only: true
      - source: './resources/app/templates'
        target: '/app/templates'
        type: 'bind'
        read_only: true
      - source: './resources/biomappings'
        target: '/app/biomappings'
        type: 'bind'
        read_only: true

volumes:

  caddy-data:
  postgres-data: