docker-compose.yml

version: "3.4"

services:
  crontab:
    image: opensalt/opensalt:cron-3.x
    build:
      context: ./core/docker/cron
      cache_from:
        - opensalt/opensalt:cron-develop
    depends_on:
      - php
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      #- "./crontab.json:/opt/crontab/config.json:rw"
    environment:
      LOG_FILE: /dev/stdout
    restart: unless-stopped

  php:
    image: opensalt/opensalt:core-3.x
    build:
      context: ./core
      target: salt_core_app
      args:
        - BUILD_NUMBER=${BUILD_NUMBER:-x}
        - BUILD_DATE=${BUILD_DATE:-0}
        - COMMIT=${COMMIT:-unknown}
        - VERSION=${VERSION:-3.0.0-dev}
      cache_from:
        - opensalt/opensalt:core-develop
    depends_on:
      - db
    environment:
      APP_ENV: "${APP_ENV:-prod}"
      APP_SECRET:
      MYSQL_DATABASE:
      MYSQL_USER:
      MYSQL_PASSWORD:
      MYSQL_HOST: "${MYSQL_HOST:-db}"
      DB_USE_RDS_CERT:
      MERCURE_PUBLISH_URL: "http://web/.well-known/mercure"
      MERCURE_JWT_TOKEN:
      TRUSTED_PROXIES:
      CORS_ALLOW_ORIGIN:
      BRAND_LOGO_URL:
      BRAND_LOGO_STYLE:
      BRAND_LINK_URL:
      BRAND_LINK_STYLE:
      FOOTER_LEFT_TEXT:
      ALLOW_LOCAL_DEV: "true"
      ALLOW_EXTERNAL_DEV_IPS:
      DEV_COOKIE:
      MAILER_DSN:
      USE_MAIL_FEATURE:
      MAIL_FEATURE_FROM_EMAIL:
      COMMENTS_FEATURE:
      COMMENT_ATTACHMENTS:
      ATTACHMENT_URL_PREFIX:
      CREATE_ACCOUNT_FEATURE:
      GOOGLE_CAPTCHA_SITE_KEY:
      GOOGLE_CAPTCHA_SECRET_KEY:
      AWS_ACCESS_KEY_ID:
      AWS_SECRET_ACCESS_KEY:
      AWS_S3_BUCKET:
      AWS_S3_REGION:
      AWS_S3_PREFIX:
      BUCKET_PROVIDER:
      LOCAL_FILESYSTEM_PATH:
      CASE_NETWORK_CLIENT_ID:
      CASE_NETWORK_CLIENT_SECRET:
      CASE_NETWORK_TOKEN_ENDPOINT:
      CASE_NETWORK_SCOPE:
    restart: unless-stopped

#  pwa:
#    build:
#      context: ./pwa
#      target: salt_core_pwa_prod
#    environment:
#      API_PLATFORM_CLIENT_GENERATOR_ENTRYPOINT: http://web

  web:
    image: opensalt/opensalt:web-3.x
    build:
      context: ./core
      target: salt_core_caddy
      args:
        - BUILD_NUMBER=${BUILD_NUMBER:-x}
        - BUILD_DATE=${BUILD_DATE:-0}
        - COMMIT=${COMMIT:-unknown}
        - VERSION=${VERSION:-3.0.0-dev}
      cache_from:
        - opensalt/opensalt:web-develop
    depends_on:
      - php
#      - pwa
    environment:
#      PWA_UPSTREAM: pwa:3000
      MERCURE_PUBLISHER_JWT_KEY: ${MERCURE_PUBLISHER_JWT_KEY:-!ChangeMe!}
      MERCURE_SUBSCRIBER_JWT_KEY: ${MERCURE_SUBSCRIBER_JWT_KEY:-!ChangeMe!}
      MERCURE_TRANSPORT_URL: 'local://local'
    restart: unless-stopped
    #user: caddy
    sysctls:
      - net.ipv4.ip_unprivileged_port_start=0
    cap_add:
      - CAP_NET_BIND_SERVICE
    volumes:
      - caddy_data:/data/caddy
      - caddy_config:/config/caddy
    networks:
      default:
      external:
        aliases:
          - "${COMPOSE_PROJECT_NAME}-salt"

  db:
    image: opensalt/opensalt:db-3.x
    build:
      context: ./core/docker/mysql
      cache_from:
        - opensalt/opensalt:db-develop
    cap_add:
      - SYS_NICE # CAP_SYS_NICE
    environment:
      MYSQL_ROOT_PASSWORD:
      MYSQL_DATABASE:
      MYSQL_USER:
      MYSQL_PASSWORD:
    restart: unless-stopped
    volumes:
      #- db_data:/var/lib/mysql:rw
      # you may use a bind-mounted host directory instead, so that it is harder to accidentally remove the volume and lose all your data!
      - "./core/docker/data/mysql:/var/lib/mysql:rw"

volumes:
#  db_data:
  caddy_data:
  caddy_config:

networks:
  external: