docker-compose.yml

version: "3.8"

services:
  nginx:
    build:
      context: .
      dockerfile: docker/Dockerfile.nginx
    container_name: cqa-nginx
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    environment:
      - LEGO_DOMAIN=${LEGO_DOMAIN:-}
      - LEGO_EMAIL=${LEGO_EMAIL:-}
    volumes:
      - lego_certs:/etc/lego
      - lego_webroot:/var/www/acme
    depends_on:
      - app

  app:
    build: .
    container_name: cqa-app
    restart: unless-stopped
    expose:
      - "8080"
    env_file:
      - .env
    environment:
      - APP_ENV=production
      - DB_HOST=db
      - DB_PORT=3306
      - TZ=Asia/Ho_Chi_Minh
    depends_on:
      db:
        condition: service_healthy
    volumes:
      - file_storage:/var/lib/cqa/files
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true

  db:
    image: mysql:8.0
    container_name: cqa-db
    restart: unless-stopped
    environment:
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
      MYSQL_DATABASE: ${DB_NAME:-cqa}
      MYSQL_USER: ${DB_USER:-cqa}
      MYSQL_PASSWORD: ${DB_PASSWORD}
    volumes:
      - mysql_data:/var/lib/mysql
    ports:
      - "127.0.0.1:3306:3306"
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
      interval: 10s
      timeout: 5s
      retries: 5
    command: >
      --character-set-server=utf8mb4
      --collation-server=utf8mb4_unicode_ci
      --default-authentication-plugin=mysql_native_password

volumes:
  mysql_data:
  file_storage:
  lego_certs:
  lego_webroot: