docker-compose.yml

version: "3.6"

services:
  yivi:
    container_name: yivi-portal-yivi
    image: ghcr.io/privacybydesign/irma:edge
    command: >
      server -v --requestors '{"yivi-portal": {"auth_method": "token", "key": "${YIVI_SERVER_TOKEN}"}}' --production --no-email --url https://yivi-auth.jobdoesburg.dev --port 80
    restart: unless-stopped
    networks:
      - web
    environment:
      YIVI_SERVER_TOKEN: ${YIVI_SERVER_TOKEN}
      VIRTUAL_HOST: yivi-auth.jobdoesburg.dev
      LETSENCRYPT_HOST: yivi-auth.jobdoesburg.dev

  database:
    image: postgres:13.3-alpine
    container_name: yivi-portal-db
    restart: unless-stopped
    networks:
      - db
    volumes:
      - postgres-data:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
    healthcheck:
      test: ["CMD", "pg_isready", "-U", "${POSTGRES_USER}"]
      interval: 10s
      timeout: 5s
      retries: 5

  yivi-portal:
    image: ghcr.io/jobdoesburg/yivi-portal:latest
    container_name: yivi-portal
    restart: unless-stopped
    networks:
      - web
      - db
    depends_on:
      - database
      - yivi
    volumes:
      - portal-media:/app/media
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_HOST: database
      POSTGRES_PORT: 5432
      DJANGO_SECRET_KEY: ${DJANGO_SECRET_KEY}
      DJANGO_ALLOWED_HOSTS: yivi-portal.jobdoesburg.dev
      YIVI_SERVER_URL: https://yivi-auth.jobdoesburg.dev
      YIVI_SERVER_TOKEN: ${YIVI_SERVER_TOKEN}
      VIRTUAL_HOST: yivi-portal.jobdoesburg.dev
      VIRTUAL_PORT: 80
      LETSENCRYPT_HOST: yivi-portal.jobdoesburg.dev
    healthcheck:
      test: ["CMD", "python", "manage.py", "check"]
      interval: 60s
      timeout: 20s
      retries: 3

  yivi-portal-cron:
    image: ghcr.io/jobdoesburg/yivi-portal:latest
    container_name: yivi-portal-cron
    entrypoint: ["/bin/sh", "/app/entrypoint_cron.sh"]
    restart: unless-stopped
    networks:
      - web
      - db
    depends_on:
      - database
      - yivi
    volumes:
      - portal-media:/app/media
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_HOST: database
      POSTGRES_PORT: 5432
      DJANGO_SECRET_KEY: ${DJANGO_SECRET_KEY}

networks:
  web:
    external: true
  db:

volumes:
  postgres-data:
  portal-media: