swarm.yaml

version: '3.5'

x-env:
  &env
  APP_ENV: production
  APP_DEBUG: "false"
  APP_KEY_FILE: /run/secrets/APP_KEY_FILE
  APP_URL: https://4programmers.net
  API_HOST: api.4programmers.net

  SESSION_DOMAIN: ".4programmers.net"

  DB_CONNECTION: pgsql
  DB_PORT: 5432
  DB_HOST: db
  DB_DATABASE: coyote
  DB_USERNAME: coyote
  DB_PASSWORD_FILE: /run/secrets/POSTGRES_PASSWORD_FILE

  ELASTICSEARCH_HOST: elasticsearch
  REDIS_HOST: redis
  BROADCAST_DRIVER: redis
  CACHE_DRIVER: redis
  QUEUE_DRIVER: redis
  LOG_CHANNEL: gelf

  AWS_ACCESS_KEY_ID_FILE: /run/secrets/AWS_ACCESS_KEY_ID_FILE
  AWS_SECRET_ACCESS_KEY_FILE: /run/secrets/AWS_SECRET_ACCESS_KEY_FILE
  AWS_URL: https://4programmers.net/uploads/
  MINIO_ENDPOINT: http://minio:9000/

  WS_HOST: ws.4programmers.net

  MAIL_DRIVER: mailgun
  MAILGUN_DOMAIN: mg.4programmers.net
  MAILGUN_SECRET_FILE: /run/secrets/MAILGUN_SECRET_FILE

  SENTRY_DSN_FILE: /run/secrets/SENTRY_DSN_FILE

  RECAPTCHA_KEY_FILE: /run/secrets/RECAPTCHA_KEY_FILE
  RECAPTCHA_SECRET_FILE: /run/secrets/RECAPTCHA_SECRET_FILE

  P24_CLIENT_ID_FILE: /run/secrets/P24_CLIENT_ID_FILE
  P24_SALT_FILE: /run/secrets/P24_SALT_FILE
  P24_PAYMENT_URL: "https://secure.przelewy24.pl/trnDirect"
  P24_VERIFY_URL: "https://secure.przelewy24.pl/trnVerify"

  PAYLANE_USERNAME_FILE: /run/secrets/PAYLANE_USERNAME_FILE
  PAYLANE_PASSWORD_FILE: /run/secrets/PAYLANE_PASSWORD_FILE
  PAYLANE_SALT_FILE: /run/secrets/PAYLANE_SALT_FILE

  STRIPE_KEY_FILE: /run/secrets/STRIPE_KEY_FILE
  STRIPE_SECRET_FILE: /run/secrets/STRIPE_SECRET_FILE
  STRIPE_ENDPOINT_SECRET_FILE: /run/secrets/STRIPE_ENDPOINT_SECRET_FILE

  GITHUB_CLIENT_ID_FILE: /run/secrets/GITHUB_CLIENT_ID_FILE
  GITHUB_SECRET_ID_FILE: /run/secrets/GITHUB_SECRET_ID_FILE
  GITHUB_REDIRECT: "https://4programmers.net/OAuth/Github/Callback"

  GOOGLE_CLIENT_ID_FILE: /run/secrets/GOOGLE_CLIENT_ID_FILE
  GOOGLE_SECRET_ID_FILE: /run/secrets/GOOGLE_SECRET_ID_FILE
  GOOGLE_MAPS_KEY_FILE: /run/secrets/GOOGLE_MAPS_KEY_FILE
  GOOGLE_REDIRECT: "https://4programmers.net/OAuth/Google/Callback"

  FACEBOOK_CLIENT_ID_FILE: /run/secrets/FACEBOOK_CLIENT_ID_FILE
  FACEBOOK_SECRET_ID_FILE: /run/secrets/FACEBOOK_SECRET_ID_FILE
  FACEBOOK_REDIRECT: "https://4programmers.net/OAuth/Facebook/Callback"

  VAPID_PUBLIC_KEY_FILE: /run/secrets/VAPID_PUBLIC_KEY_FILE
  VAPID_PRIVATE_KEY_FILE: /run/secrets/VAPID_PRIVATE_KEY_FILE

  VENDOR_NAME: "Makana Sp. z o.o."
  VENDOR_ADDRESS: "ul. Krupnicza 13"
  VENDOR_POSTAL_CODE: "50-075"
  VENDOR_CITY: "Wrocław"
  VENDOR_COUNTRY: "Polska"

x-secrets:
  &secrets
  - APP_KEY_FILE
  - POSTGRES_PASSWORD_FILE
  - AWS_ACCESS_KEY_ID_FILE
  - AWS_SECRET_ACCESS_KEY_FILE
  - AWS_URL_FILE
  - MAILGUN_SECRET_FILE
  - SENTRY_DSN_FILE
  - RECAPTCHA_KEY_FILE
  - RECAPTCHA_SECRET_FILE
  - P24_CLIENT_ID_FILE
  - P24_SALT_FILE
  - PAYLANE_USERNAME_FILE
  - PAYLANE_PASSWORD_FILE
  - PAYLANE_SALT_FILE
  - GITHUB_CLIENT_ID_FILE
  - GITHUB_SECRET_ID_FILE
  - GOOGLE_CLIENT_ID_FILE
  - GOOGLE_SECRET_ID_FILE
  - GOOGLE_MAPS_KEY_FILE
  - FACEBOOK_CLIENT_ID_FILE
  - FACEBOOK_SECRET_ID_FILE
  - STRIPE_KEY_FILE
  - STRIPE_SECRET_FILE
  - STRIPE_ENDPOINT_SECRET_FILE
  - VAPID_PUBLIC_KEY_FILE
  - VAPID_PRIVATE_KEY_FILE

services:
  db:
    image: postgres:13-alpine
    ports:
      - 5432:5432
    volumes:
      - ./docker/postgres/postgresql.prod.conf:/var/lib/postgresql/data/postgresql.auto.conf
      - postgres:/var/lib/postgresql/data:z
    environment:
      POSTGRES_USER: coyote
      POSTGRES_PASSWORD_FILE: /run/secrets/POSTGRES_PASSWORD_FILE
      POSTGRES_DB: coyote
    networks:
      - coyote
    secrets:
      - POSTGRES_PASSWORD_FILE
    logging:
      driver: "json-file"
      options:
        tag: postgres
        max-size: 10m

  php:
    image: 4programmers/coyote:latest
    build:
      context: .
      dockerfile: docker/coyote/Dockerfile
      cache_from:
        - 4programmers/coyote:latest
    volumes:
      - codebase:/var/www
    environment:
      <<: *env
      DB_MIGRATE: "true"
    secrets: *secrets
    deploy:
      replicas: 2
    healthcheck:
      test: [ "CMD", "php", "artisan", "help" ]
      interval: 5s
      timeout: 10s
      retries: 3
    networks:
      - coyote
    logging:
      driver: "json-file"
      options:
        tag: php
        max-size: 10m

  worker:
    image: 4programmers/coyote:latest
    networks:
      - coyote
    command: php artisan queue:work --delay=5 --tries=3 -n redis
    deploy:
      replicas: 2
    environment: *env
    secrets: *secrets
    logging:
      driver: "json-file"
      options:
        tag: worker
        max-size: 10m

  cron:
    image: 4programmers/coyote:latest
    entrypoint: cron -f -l 8
    environment: *env
    secrets: *secrets
    volumes:
      - codebase:/var/www
    networks:
      - coyote
    logging:
      driver: "json-file"
      options:
        tag: cron
        max-size: 10m

  nginx:
    image: nginx:1.17
    volumes:
      - codebase:/var/www/
      - ./docker/nginx/:/etc/nginx/conf.d/
    ports:
      - 80:80
    depends_on:
      - php
    networks:
      - coyote
    logging:
      driver: "json-file"
      options:
        tag: nginx
        max-size: 10m

  redis:
    image: redis:6-alpine
    command: redis-server --appendonly no --save
    networks:
      - coyote

  elasticsearch:
    image: elasticsearch:6.8.6
    volumes:
      - elasticsearch6:/usr/share/elasticsearch/data
    environment:
      - "discovery.type=single-node"
      - "ES_JAVA_OPTS=-Xms2g -Xmx2g"
    networks:
      - coyote
    logging:
      driver: "json-file"
      options:
        tag: elasticsearch
        max-size: 10m

  minio:
    image: minio/minio:RELEASE.2020-01-03T19-12-21Z
    volumes:
      - minio:/data
    environment:
      - MINIO_ACCESS_KEY_FILE=AWS_ACCESS_KEY_ID_FILE
      - MINIO_SECRET_KEY_FILE=AWS_SECRET_ACCESS_KEY_FILE
    command: server /data
    secrets:
      - AWS_ACCESS_KEY_ID_FILE
      - AWS_SECRET_ACCESS_KEY_FILE
    networks:
      - coyote
    deploy:
      restart_policy:
        delay: 10s
        max_attempts: 10
        window: 60s
    ports:
      - 39000:9000
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
      interval: 30s
      timeout: 20s
      retries: 3
    logging:
      driver: "json-file"
      options:
        tag: minio
        max-size: 10m

  mongo:
    image: mongo:3
    volumes:
      - mongo:/data/db
    networks:
      - coyote

  graylog:
    image: graylog/graylog:3.1
    environment:
      - GRAYLOG_PASSWORD_SECRET_FILE=/run/secrets/GRAYLOG_PASSWORD_SECRET_FILE
#      - GRAYLOG_ROOT_PASSWORD_SHA2=8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918
      - GRAYLOG_ROOT_PASSWORD_SHA2__FILE=/run/secrets/GRAYLOG_ROOT_PASSWORD_SHA2_FILE
      - GRAYLOG_HTTP_EXTERNAL_URI=https://graylog.4programmers.dev/
    networks:
      - coyote
    depends_on:
      - mongo
      - elasticsearch
    secrets:
      - GRAYLOG_ROOT_PASSWORD_SHA2_FILE
      - GRAYLOG_PASSWORD_SECRET_FILE
    ports:
      - 12201:12201
      - 12201:12201/udp

  fluentbit:
    image: fluent/fluent-bit:1.3-debug
    volumes:
      - ./docker/fluent-bit/fluent-bit.conf:/fluent-bit/etc/fluent-bit.conf
      - /var/lib/docker/containers:/var/log/containers
    networks:
      - coyote

  websocket:
    image: 4programmers/websocket:latest
    networks:
      - coyote
    tty: true
    environment:
      PORT: "8888"
      REDIS_HOST: "redis"
    secrets:
      - APP_KEY_FILE
    logging:
      driver: "json-file"
      options:
        tag: websocket
        max-size: 10m

  es:
    image: 4programmers/coyote-es:latest
    networks:
      - coyote
    tty: true
    environment:
      PORT: "3500"
      ELASTICSEARCH_HOST: "elasticsearch"
      INDEX: "coyote"
      APP_KEY_FILE: /run/secrets/APP_KEY_FILE
#    healthcheck:
#      test: ["CMD", "curl", "-f", "http://localhost:3500/healtcheck || exit 1"]
#      interval: 30s
#      timeout: 20s
#      retries: 3
    secrets:
      - APP_KEY_FILE
    logging:
      driver: "json-file"
      options:
        tag: node-es
        max-size: 10m

volumes:
  postgres:
  elasticsearch6:
  minio:
  codebase:
  mongo:
  graylog:

networks:
  coyote:
    name: coyote

secrets:
  APP_KEY_FILE:
    external: true
  AWS_ACCESS_KEY_ID_FILE:
    external: true
  AWS_SECRET_ACCESS_KEY_FILE:
    external: true
  POSTGRES_PASSWORD_FILE:
    external: true
  AWS_URL_FILE:
    external: true
  WS_PROXY_FILE:
    external: true
  MAILGUN_SECRET_FILE:
    external: true
  SENTRY_DSN_FILE:
    external: true
  RECAPTCHA_KEY_FILE:
    external: true
  RECAPTCHA_SECRET_FILE:
    external: true
  P24_CLIENT_ID_FILE:
    external: true
  P24_SALT_FILE:
    external: true
  PAYLANE_USERNAME_FILE:
    external: true
  PAYLANE_PASSWORD_FILE:
    external: true
  PAYLANE_SALT_FILE:
    external: true
  GITHUB_CLIENT_ID_FILE:
    external: true
  GITHUB_SECRET_ID_FILE:
    external: true
  GOOGLE_CLIENT_ID_FILE:
    external: true
  GOOGLE_SECRET_ID_FILE:
    external: true
  FACEBOOK_CLIENT_ID_FILE:
    external: true
  FACEBOOK_SECRET_ID_FILE:
    external: true
  GRAYLOG_ROOT_PASSWORD_SHA2_FILE:
    external: true
  GRAYLOG_PASSWORD_SECRET_FILE:
    external: true
  STRIPE_KEY_FILE:
    external: true
  STRIPE_SECRET_FILE:
    external: true
  STRIPE_ENDPOINT_SECRET_FILE:
    external: true
  VAPID_PUBLIC_KEY_FILE:
    external: true
  VAPID_PRIVATE_KEY_FILE:
    external: true