Replace all references to internal hostnames (silo.kindred.internal, psql.kindred.internal, minio.kindred.internal, ipa.kindred.internal, keycloak.kindred.internal) with example.internal equivalents. Replace gitea.kindred.internal and git.kindred.internal with the public git.kindred-systems.com instance. Also fix stale silo-0062 repo name in setup-host.sh and DEPLOYMENT.md.
51 lines
1.6 KiB
YAML
51 lines
1.6 KiB
YAML
# Production Docker Compose for Silo
|
|
# Uses external PostgreSQL (psql.example.internal) and MinIO (minio.example.internal)
|
|
#
|
|
# Usage:
|
|
# export SILO_DB_PASSWORD=<your-password>
|
|
# export SILO_MINIO_ACCESS_KEY=<your-access-key>
|
|
# export SILO_MINIO_SECRET_KEY=<your-secret-key>
|
|
# docker compose -f docker-compose.prod.yaml up -d
|
|
|
|
services:
|
|
silo:
|
|
build:
|
|
context: ..
|
|
dockerfile: build/package/Dockerfile
|
|
container_name: silod
|
|
restart: unless-stopped
|
|
environment:
|
|
# Database connection (psql.example.internal)
|
|
SILO_DB_HOST: psql.example.internal
|
|
SILO_DB_PORT: 5432
|
|
SILO_DB_NAME: silo
|
|
SILO_DB_USER: silo
|
|
SILO_DB_PASSWORD: ${SILO_DB_PASSWORD:?Database password required}
|
|
SILO_DB_SSLMODE: require
|
|
|
|
# MinIO storage (minio.example.internal)
|
|
SILO_MINIO_ENDPOINT: minio.example.internal:9000
|
|
SILO_MINIO_ACCESS_KEY: ${SILO_MINIO_ACCESS_KEY:?MinIO access key required}
|
|
SILO_MINIO_SECRET_KEY: ${SILO_MINIO_SECRET_KEY:?MinIO secret key required}
|
|
SILO_MINIO_BUCKET: silo-files
|
|
SILO_MINIO_USE_SSL: "true"
|
|
|
|
# Server settings
|
|
SILO_SERVER_BASE_URL: ${SILO_BASE_URL:-http://silo.example.internal:8080}
|
|
ports:
|
|
- "8080:8080"
|
|
volumes:
|
|
- ../schemas:/etc/silo/schemas:ro
|
|
- ./config.prod.yaml:/etc/silo/config.yaml:ro
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-qO-", "http://localhost:8080/health"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|