who_need_help/compose.yaml

name: who_need_help

x-app-environment: &app-environment
  APP_ROLE: web
  DATABASE_URL: ${DATABASE_URL:?Set DATABASE_URL in .env}
  SECRET_KEY_BASE: ${SECRET_KEY_BASE:?Set SECRET_KEY_BASE in .env}
  HANDOVER_SECRET: ${HANDOVER_SECRET:?Set HANDOVER_SECRET in .env}
  RELEASE_COOKIE: ${RELEASE_COOKIE:?Set RELEASE_COOKIE in .env}
  METRICS_TOKEN: ${METRICS_TOKEN:?Set an independent METRICS_TOKEN in .env}
  DNS_CLUSTER_QUERY: web
  PHX_HOST: ${PHX_HOST:?Set PHX_HOST in .env}
  PHX_SCHEME: ${PHX_SCHEME:?Set PHX_SCHEME in .env}
  PHX_URL_PORT: ${PHX_URL_PORT:?Set PHX_URL_PORT in .env}
  PORT: "4000"
  POOL_SIZE: ${POOL_SIZE:?Set POOL_SIZE in .env after measuring the target profile}
  SMTP_RELAY: ${SMTP_RELAY:?Set SMTP_RELAY in .env}
  SMTP_PORT: ${SMTP_PORT:?Set SMTP_PORT in .env}
  SMTP_USERNAME: ${SMTP_USERNAME:-}
  SMTP_PASSWORD: ${SMTP_PASSWORD:-}
  SMTP_AUTH: ${SMTP_AUTH:?Set SMTP_AUTH in .env}
  SMTP_TLS: ${SMTP_TLS:?Set SMTP_TLS in .env}
  SMTP_SSL: ${SMTP_SSL:?Set SMTP_SSL in .env}
  EMAIL_FROM_NAME: ${EMAIL_FROM_NAME:?Set EMAIL_FROM_NAME in .env}
  EMAIL_FROM_ADDRESS: ${EMAIL_FROM_ADDRESS:?Set EMAIL_FROM_ADDRESS in .env}
  CODEX_SESSION_ID: ${CODEX_SESSION_ID:-not-configured}
  RATE_LIMIT_POLICIES_JSON: ${RATE_LIMIT_POLICIES_JSON:-{}}
  MAP_TILE_URL: ${MAP_TILE_URL:-https://tile.openstreetmap.org/{z}/{x}/{y}.png}
  GITHUB_OAUTH_CLIENT_ID: ${GITHUB_OAUTH_CLIENT_ID:-}
  GITHUB_OAUTH_CLIENT_SECRET: ${GITHUB_OAUTH_CLIENT_SECRET:-}

services:
  proxy:
    image: traefik:v3.7.8@sha256:4299bbed850421258fc5448c2e0e6ad350981d4d335a68de11b92448aedbefe5
    command:
      - --api.dashboard=false
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --providers.docker.constraints=Label(`com.docker.compose.project`,`${TRAEFIK_PROJECT_CONSTRAINT:-who_need_help}`)
      - --entrypoints.web.address=:80
      - --entrypoints.websecure.address=:443
      - --entrypoints.web.forwardedheaders.trustedips=${TRAEFIK_TRUSTED_IPS:-127.0.0.1/32}
    ports:
      - "${HTTP_PORT:-4010}:80"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks: [edge, internal]
    restart: unless-stopped

  db:
    image: postgis/postgis:18-3.6-alpine@sha256:05d68c7f0f19b9aa0bf7c4a2049b2e8b38b44a63116392b95726a4c913766cf6
    environment:
      POSTGRES_DB: ${POSTGRES_DB:?Set POSTGRES_DB in .env}
      POSTGRES_USER: ${POSTGRES_USER:?Set POSTGRES_USER in .env}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}
    healthcheck:
      # The image starts a temporary Unix-socket-only PostgreSQL while it loads
      # PostGIS into a fresh database, then stops it and starts the final server.
      # Checking TCP prevents dependants from starting during that bootstrap window.
      test: ["CMD-SHELL", "pg_isready -h 127.0.0.1 -U $$POSTGRES_USER -d $$POSTGRES_DB"]
      interval: 3s
      timeout: 3s
      retries: 20
    volumes:
      - postgres_data:/var/lib/postgresql
    networks: [internal]
    restart: unless-stopped

  mailpit:
    image: axllent/mailpit:v1.30.4@sha256:5a49a77c5bdbe7c5474450b4f46348d09949df3695257729c93a30369382d4f6
    ports:
      - "${MAILPIT_PORT:-8027}:8025"
    networks: [edge, internal]
    restart: unless-stopped

  migrate:
    image: who-need-help:local
    build:
      context: .
    environment:
      <<: *app-environment
      APP_ROLE: migrate
    command: ["/app/bin/migrate"]
    depends_on:
      db:
        condition: service_healthy
    networks: [internal]
    restart: "no"

  web:
    image: who-need-help:local
    environment:
      <<: *app-environment
      APP_ROLE: web
      PHX_SERVER: "true"
    depends_on:
      migrate:
        condition: service_completed_successfully
    labels:
      - traefik.enable=true
      - traefik.docker.network=${TRAEFIK_DOCKER_NETWORK:-who_need_help_internal}
      - traefik.http.routers.${TRAEFIK_APP_NAME:-who-need-help}.rule=${TRAEFIK_ROUTER_RULE:-PathPrefix(`/`)}
      - traefik.http.routers.${TRAEFIK_APP_NAME:-who-need-help}.entrypoints=web
      - traefik.http.routers.${TRAEFIK_APP_NAME:-who-need-help}.service=${TRAEFIK_APP_NAME:-who-need-help}
      - traefik.http.routers.${TRAEFIK_APP_NAME:-who-need-help}.middlewares=${TRAEFIK_APP_NAME:-who-need-help}-retry
      - traefik.http.middlewares.${TRAEFIK_APP_NAME:-who-need-help}-retry.retry.attempts=${TRAEFIK_RETRY_ATTEMPTS:-3}
      - traefik.http.services.${TRAEFIK_APP_NAME:-who-need-help}.loadbalancer.server.port=4000
    healthcheck:
      test: ["CMD", "curl", "--fail", "--silent", "http://localhost:4000/healthz/ready"]
      interval: 10s
      timeout: 3s
      retries: 10
    deploy:
      replicas: 2
    networks: [internal]
    restart: unless-stopped

  worker:
    image: who-need-help:local
    environment:
      <<: *app-environment
      APP_ROLE: worker
    command: ["/app/bin/who_need_help", "start"]
    depends_on:
      migrate:
        condition: service_completed_successfully
    deploy:
      replicas: 2
    networks: [internal]
    restart: unless-stopped

networks:
  edge:
  internal:
    internal: true

volumes:
  postgres_data: