mirror of
https://github.com/temetro/temetro.git
synced 2026-07-26 11:58:14 +00:00
Khalid Abdi
a80086ef72
`docker compose up` now works with no .env editing. A new entrypoint (docker-entrypoint.sh) generates any missing secret (BETTER_AUTH_SECRET, AI_CREDENTIALS_KEY) on first start and persists it to the temetro_secrets volume, so values stay stable across restarts (rotating them would log users out / invalidate stored AI keys). Real values passed via .env/compose still win. This also fixes the boot failure where the compose backend ran with NODE_ENV=production but never passed AI_CREDENTIALS_KEY through, tripping the production guard. The secret is now an optional pass-through and BETTER_AUTH_SECRET no longer hard-fails when unset. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
91 lines
2.6 KiB
YAML
91 lines
2.6 KiB
YAML
# Full-stack dev/run orchestration for temetro.
|
|
#
|
|
# docker compose up # db + backend + frontend — that's it.
|
|
#
|
|
# No .env or secret setup is required: the backend generates any missing
|
|
# secrets on first start and persists them (see docker-entrypoint.sh). Create a
|
|
# .env only if you want to override something (SMTP, a real auth secret, etc.).
|
|
#
|
|
# Frontend -> http://localhost:3000
|
|
# Backend -> http://localhost:4000
|
|
# Postgres -> localhost:5432
|
|
#
|
|
# The frontend service builds the sibling ../frontend app. Run just the API
|
|
# with: docker compose up db backend
|
|
#
|
|
# Optional DB browser (Adminer) lives behind a profile:
|
|
# docker compose --profile tools up adminer # http://localhost:8080
|
|
|
|
services:
|
|
db:
|
|
image: postgres:17-alpine
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: temetro
|
|
POSTGRES_PASSWORD: temetro
|
|
POSTGRES_DB: temetro
|
|
ports:
|
|
# Host port is configurable to avoid clashing with an existing Postgres.
|
|
- "${POSTGRES_PORT:-5432}:5432"
|
|
volumes:
|
|
- temetro_pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U temetro -d temetro"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
|
|
backend:
|
|
build:
|
|
context: .
|
|
restart: unless-stopped
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
environment:
|
|
DATABASE_URL: postgres://temetro:temetro@db:5432/temetro
|
|
# Secrets are optional: if unset, the entrypoint generates and persists
|
|
# them (to the temetro_secrets volume). Pass real values here to override.
|
|
BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET:-}
|
|
AI_CREDENTIALS_KEY: ${AI_CREDENTIALS_KEY:-}
|
|
BETTER_AUTH_URL: http://localhost:4000
|
|
FRONTEND_URL: http://localhost:3000
|
|
PORT: "4000"
|
|
NODE_ENV: production
|
|
SMTP_HOST: ${SMTP_HOST:-}
|
|
SMTP_PORT: ${SMTP_PORT:-}
|
|
SMTP_USER: ${SMTP_USER:-}
|
|
SMTP_PASS: ${SMTP_PASS:-}
|
|
SMTP_FROM: ${SMTP_FROM:-temetro <no-reply@temetro.local>}
|
|
volumes:
|
|
# Persists auto-generated secrets so they stay stable across restarts.
|
|
- temetro_secrets:/var/lib/temetro
|
|
ports:
|
|
- "4000:4000"
|
|
|
|
frontend:
|
|
build:
|
|
context: ../frontend
|
|
args:
|
|
NEXT_PUBLIC_API_URL: http://localhost:4000
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- backend
|
|
environment:
|
|
NEXT_PUBLIC_API_URL: http://localhost:4000
|
|
ports:
|
|
- "3000:3000"
|
|
|
|
adminer:
|
|
image: adminer:5
|
|
profiles: ["tools"]
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- db
|
|
ports:
|
|
- "8080:8080"
|
|
|
|
volumes:
|
|
temetro_pgdata:
|
|
temetro_secrets:
|