165 lines
3.7 KiB
Django/Jinja
165 lines
3.7 KiB
Django/Jinja
version: '3'
|
|
|
|
services:
|
|
db:
|
|
restart: always
|
|
image: postgres:14-alpine
|
|
shm_size: 256mb
|
|
networks:
|
|
- internal_network
|
|
healthcheck:
|
|
test: ['CMD', 'pg_isready', '-U', 'postgres']
|
|
volumes:
|
|
- ./postgres14:/var/lib/postgresql/data
|
|
env_file: .env.production
|
|
|
|
{% if allow_hidden_services %}
|
|
tor:
|
|
image: sirboops/tor
|
|
networks:
|
|
- external_network
|
|
- internal_network
|
|
|
|
privoxy:
|
|
image: sirboops/privoxy
|
|
volumes:
|
|
- ./priv-config:/opt/config
|
|
networks:
|
|
- external_network
|
|
- internal_network
|
|
|
|
{% endif %}
|
|
redis:
|
|
restart: always
|
|
image: redis:7-alpine
|
|
networks:
|
|
- internal_network
|
|
healthcheck:
|
|
test: ['CMD', 'redis-cli', 'ping']
|
|
volumes:
|
|
- ./redis:/data
|
|
|
|
{% if redis_volatile %}
|
|
redis-volatile:
|
|
image: redis:7-alpine
|
|
restart: always
|
|
healthcheck:
|
|
test: ['CMD', 'redis-cli', 'ping']
|
|
networks:
|
|
- internal_network
|
|
|
|
{% endif %}
|
|
{% if es_enabled %}
|
|
es:
|
|
restart: always
|
|
image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4
|
|
environment:
|
|
- "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true"
|
|
- "xpack.license.self_generated.type=basic"
|
|
- "xpack.security.enabled=false"
|
|
- "xpack.watcher.enabled=false"
|
|
- "xpack.graph.enabled=false"
|
|
- "xpack.ml.enabled=false"
|
|
- "bootstrap.memory_lock=true"
|
|
- "cluster.name=es-mastodon"
|
|
- "discovery.type=single-node"
|
|
- "thread_pool.write.queue_size=1000"
|
|
networks:
|
|
- external_network
|
|
- internal_network
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
|
|
volumes:
|
|
- ./elasticsearch:/usr/share/elasticsearch/data
|
|
ulimits:
|
|
memlock:
|
|
soft: -1
|
|
hard: -1
|
|
nofile:
|
|
soft: 65536
|
|
hard: 65536
|
|
ports:
|
|
- '127.0.0.1:{{ es_port }}:9200'
|
|
|
|
{% endif %}
|
|
{% if nginx_reverse_proxy %}
|
|
web_proxy:
|
|
image: nginx
|
|
volumes:
|
|
- /etc/mastodon/nginx.conf:/etc/nginx/conf.d/default.conf
|
|
ports:
|
|
- "8080:80"
|
|
- "8443:443"
|
|
environment:
|
|
- NGINX_HOST={{ mastodon_host }}
|
|
- NGINX_PORT=80
|
|
|
|
{% endif %}
|
|
web:
|
|
build: .
|
|
image: ghcr.io/mastodon/mastodon
|
|
restart: always
|
|
env_file: .env.production
|
|
command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
|
|
networks:
|
|
- external_network
|
|
- internal_network
|
|
healthcheck:
|
|
# prettier-ignore
|
|
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
|
|
ports:
|
|
- '127.0.0.1:3000:3000'
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
{% if es_enabled %} - es
|
|
{% endif %}
|
|
volumes:
|
|
- ./public/system:/mastodon/public/system
|
|
|
|
streaming:
|
|
build: .
|
|
image: ghcr.io/mastodon/mastodon
|
|
restart: always
|
|
env_file: .env.production
|
|
command: node ./streaming
|
|
networks:
|
|
- external_network
|
|
- internal_network
|
|
healthcheck:
|
|
# prettier-ignore
|
|
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
|
|
ports:
|
|
- '127.0.0.1:4000:4000'
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
|
|
sidekiq:
|
|
build: .
|
|
image: ghcr.io/mastodon/mastodon
|
|
restart: always
|
|
env_file: .env.production
|
|
command: bundle exec sidekiq
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
networks:
|
|
- external_network
|
|
- internal_network
|
|
volumes:
|
|
- ./public/system:/mastodon/public/system
|
|
healthcheck:
|
|
test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
|
|
|
|
|
|
networks:
|
|
external_network:
|
|
driver: bridge
|
|
internal_network:
|
|
internal: true
|
|
|
|
# networks:
|
|
# external_network:
|
|
# internal_network:
|
|
# internal: true
|