docker-compose.production.yml

version: '3.6'

services:
  api:
    image: org/app-api:version
    command: sh -c 'export DATABASE_URL=`cat $$DATABASE_URL_FILE` && node-pg-migrate up && node src/index.js'
    ports:
      - "80:3001"
    env_file:
      - .env
    environment:
      NODE_ENV: production
      DATABASE_URL_FILE: /run/secrets/database_url
      JWT_KEY_FILE: /run/secrets/jwt_key
      GITHUB_CLIENT_ID_FILE: /run/secrets/github_client_id
      GITHUB_CLIENT_SECRET_FILE: /run/secrets/github_client_secret
      GOOGLE_CLIENT_ID_FILE: /run/secrets/google_client_id
      GOOGLE_CLIENT_SECRET_FILE: /run/secrets/google_client_secret
    secrets:
      - database_url
      - jwt_key
      - github_client_id
      - github_client_secret
      - google_client_id
      - google_client_secret
    deploy:
      replicas: 2
      resources:
        limits:
          cpus: "0.1"
          memory: 50M
      restart_policy:
        condition: on-failure
    networks:
      - webnet

  postgres:
    environment:
      POSTGRES_USER: ubuntu
      POSTGRES_PASSWORD_FILE: /run/secrets/db_password
      POSTGRES_DB: app-db
    secrets:
      - db_password
    networks:
      - webnet

  visualizer:
    image: dockersamples/visualizer:stable
    ports:
      - "8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    deploy:
      placement:
        constraints: [node.role == manager]
    networks:
      - webnet

secrets:
  database_url:
    file: secret_database_url.txt
  db_password:
    file: secret_db_password.txt
  jwt_key:
    file: secret_jwt_key.txt
  github_client_id:
    file: secret_github_client_id.txt
  github_client_secret:
    file: secret_github_client_secret.txt
  google_client_id:
    file: secret_google_client_id.txt
  google_client_secret:
    file: secret_google_client_secret.txt

networks:
  webnet: