AspireCloud/docker-compose.yml
Chuck Adams f7531d105f
Security hardening, upgrade php to 8.4 (#177)
* feat: enable zstd and gzip compression in Caddyfile.

* dev: mount Caddyfile and php.ini in webapp

* refactor: remove all local port bindings in docker-compose.yml

* build: bump php base images to 8.4.4

* tweak: use high UID for container app user

* CI: use step-security/harden-runner and pinned commit hashes

* ci: use php 8.4 in CI runner
2025-03-15 12:32:22 -06:00

87 lines
2.1 KiB
YAML

services:
webapp:
build:
context: .
dockerfile: docker/webapp/Dockerfile
target: dev
volumes:
- .:/app
- ./docker/webapp/Caddyfile:/etc/caddy/Caddyfile
- ./docker/webapp/php.ini:/usr/local/etc/php/php.ini
networks:
traefik: ~
app-net: ~
aspire-net:
aliases:
- 'api.aspiredev.org'
labels:
- "traefik.enable=true"
- "traefik.http.routers.ap-api.rule=Host(`api.aspiredev.org`)"
- "traefik.http.routers.ap-api-https.rule=Host(`api.aspiredev.org`)"
- "traefik.http.routers.ap-api-https.tls=true"
redis:
image: redis:latest
networks:
- app-net
postgres:
image: postgres:latest
environment:
- POSTGRES_PASSWORD=password
- PGDATA=/opt/pgdata
- POSTGRES_DB=aspirecloud
volumes:
- postgresdata:/opt/pgdata
networks:
app-net: ~
aspire-net:
aliases:
- 'db.aspiredev.org'
queue-worker:
build:
context: .
dockerfile: docker/laravel-worker/Dockerfile
target: dev
entrypoint: [ 'bin/queue-worker' ]
restart: unless-stopped
volumes:
- .:/app
networks:
- app-net
- aspire-net
cli:
build:
context: .
dockerfile: docker/cli/Dockerfile
target: dev
volumes:
- .:/app
networks:
- app-net
- aspire-net
mailpit:
image: axllent/mailpit:v1.21.4
restart: unless-stopped
networks:
app-net: ~
aspire-net:
aliases:
- 'mail.aspiredev.org'
environment:
MP_MAX_MESSAGES: 500
MP_SMTP_AUTH_ACCEPT_ANY: 1
MP_SMTP_AUTH_ALLOW_INSECURE: 1
networks:
app-net: ~
aspire-net:
external: true
traefik:
external: true
volumes:
postgresdata: ~