mirror of
https://github.com/Memo-2023/mana-monorepo.git
synced 2026-05-15 00:41:09 +02:00
c399474889
- Add MinIO service for S3-compatible object storage - Configure contacts-backend with S3 environment variables - Add minio_data volume Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
550 lines
16 KiB
YAML
550 lines
16 KiB
YAML
# ManaCore Mac Mini Configuration
|
|
# Domain: mana.how (via Cloudflare Tunnel)
|
|
|
|
services:
|
|
# ============================================
|
|
# Infrastructure Services
|
|
# ============================================
|
|
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
container_name: manacore-postgres
|
|
restart: always
|
|
environment:
|
|
POSTGRES_DB: manacore
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-manacore123}
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
ports:
|
|
- "5432:5432"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: manacore-redis
|
|
restart: always
|
|
command: redis-server --requirepass ${REDIS_PASSWORD:-redis123}
|
|
volumes:
|
|
- redis_data:/data
|
|
ports:
|
|
- "6379:6379"
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "--raw", "incr", "ping"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
minio:
|
|
image: minio/minio:latest
|
|
container_name: manacore-minio
|
|
restart: always
|
|
command: server /data --console-address ":9001"
|
|
environment:
|
|
MINIO_ROOT_USER: ${MINIO_ACCESS_KEY:-minioadmin}
|
|
MINIO_ROOT_PASSWORD: ${MINIO_SECRET_KEY:-minioadmin}
|
|
volumes:
|
|
- minio_data:/data
|
|
ports:
|
|
- "9000:9000"
|
|
- "9001:9001"
|
|
healthcheck:
|
|
test: ["CMD", "mc", "ready", "local"]
|
|
interval: 30s
|
|
timeout: 20s
|
|
retries: 3
|
|
|
|
# ============================================
|
|
# Auth Service
|
|
# ============================================
|
|
|
|
mana-core-auth:
|
|
image: ghcr.io/memo-2023/mana-core-auth:latest
|
|
container_name: mana-core-auth
|
|
restart: always
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 3001
|
|
DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD:-manacore123}@postgres:5432/manacore_auth
|
|
REDIS_HOST: redis
|
|
REDIS_PORT: 6379
|
|
REDIS_PASSWORD: ${REDIS_PASSWORD:-redis123}
|
|
JWT_SECRET: ${JWT_SECRET:-your-jwt-secret-change-me}
|
|
BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET:-${JWT_SECRET:-your-jwt-secret-change-me}}
|
|
JWT_PUBLIC_KEY: ${JWT_PUBLIC_KEY:-}
|
|
JWT_PRIVATE_KEY: ${JWT_PRIVATE_KEY:-}
|
|
CORS_ORIGINS: https://mana.how,https://chat.mana.how,https://todo.mana.how,https://calendar.mana.how,https://clock.mana.how,https://contacts.mana.how
|
|
ports:
|
|
- "3001:3001"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3001/api/v1/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
# ============================================
|
|
# ManaCore Dashboard
|
|
# ============================================
|
|
|
|
manacore-web:
|
|
image: ghcr.io/memo-2023/manacore-web:latest
|
|
container_name: manacore-web
|
|
restart: always
|
|
depends_on:
|
|
mana-core-auth:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 5173
|
|
PUBLIC_MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
PUBLIC_MANA_CORE_AUTH_URL_CLIENT: https://auth.mana.how
|
|
PUBLIC_TODO_API_URL: http://todo-backend:3018
|
|
PUBLIC_TODO_API_URL_CLIENT: https://todo-api.mana.how
|
|
PUBLIC_CALENDAR_API_URL: http://calendar-backend:3016
|
|
PUBLIC_CALENDAR_API_URL_CLIENT: https://calendar-api.mana.how
|
|
PUBLIC_CLOCK_API_URL: http://clock-backend:3017
|
|
PUBLIC_CLOCK_API_URL_CLIENT: https://clock-api.mana.how
|
|
PUBLIC_CONTACTS_API_URL: http://contacts-backend:3015
|
|
PUBLIC_CONTACTS_API_URL_CLIENT: https://contacts-api.mana.how
|
|
ports:
|
|
- "5173:5173"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:5173/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
# ============================================
|
|
# Chat App
|
|
# ============================================
|
|
|
|
chat-backend:
|
|
image: ghcr.io/memo-2023/chat-backend:latest
|
|
container_name: chat-backend
|
|
restart: always
|
|
depends_on:
|
|
mana-core-auth:
|
|
condition: service_healthy
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 3002
|
|
DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD:-manacore123}@postgres:5432/chat
|
|
MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
SUPABASE_URL: ${SUPABASE_URL:-}
|
|
SUPABASE_SERVICE_KEY: ${SUPABASE_SERVICE_ROLE_KEY:-}
|
|
AZURE_OPENAI_ENDPOINT: ${AZURE_OPENAI_ENDPOINT:-}
|
|
AZURE_OPENAI_API_KEY: ${AZURE_OPENAI_API_KEY:-}
|
|
AZURE_OPENAI_API_VERSION: 2024-12-01-preview
|
|
CORS_ORIGINS: https://chat.mana.how,https://mana.how
|
|
ports:
|
|
- "3002:3002"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3002/api/v1/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
chat-web:
|
|
image: ghcr.io/memo-2023/chat-web:latest
|
|
container_name: chat-web
|
|
restart: always
|
|
depends_on:
|
|
chat-backend:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 3000
|
|
PUBLIC_BACKEND_URL: http://chat-backend:3002
|
|
PUBLIC_MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
PUBLIC_BACKEND_URL_CLIENT: https://chat-api.mana.how
|
|
PUBLIC_MANA_CORE_AUTH_URL_CLIENT: https://auth.mana.how
|
|
ports:
|
|
- "3000:3000"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3000/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
# ============================================
|
|
# Todo App
|
|
# ============================================
|
|
|
|
todo-backend:
|
|
image: ghcr.io/memo-2023/todo-backend:latest
|
|
container_name: todo-backend
|
|
restart: always
|
|
depends_on:
|
|
mana-core-auth:
|
|
condition: service_healthy
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 3018
|
|
DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD:-manacore123}@postgres:5432/todo
|
|
MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
CORS_ORIGINS: https://todo.mana.how,https://mana.how
|
|
ports:
|
|
- "3018:3018"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3018/api/v1/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
todo-web:
|
|
image: ghcr.io/memo-2023/todo-web:latest
|
|
container_name: todo-web
|
|
restart: always
|
|
depends_on:
|
|
todo-backend:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 5188
|
|
PUBLIC_BACKEND_URL: http://todo-backend:3018
|
|
PUBLIC_MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
PUBLIC_BACKEND_URL_CLIENT: https://todo-api.mana.how
|
|
PUBLIC_MANA_CORE_AUTH_URL_CLIENT: https://auth.mana.how
|
|
ports:
|
|
- "5188:5188"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:5188/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
# ============================================
|
|
# Calendar App
|
|
# ============================================
|
|
|
|
calendar-backend:
|
|
image: ghcr.io/memo-2023/calendar-backend:latest
|
|
container_name: calendar-backend
|
|
restart: always
|
|
depends_on:
|
|
mana-core-auth:
|
|
condition: service_healthy
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 3016
|
|
DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD:-manacore123}@postgres:5432/calendar
|
|
DB_HOST: postgres
|
|
DB_PORT: 5432
|
|
DB_USER: postgres
|
|
MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
CORS_ORIGINS: https://calendar.mana.how,https://mana.how
|
|
ports:
|
|
- "3016:3016"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3016/api/v1/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
calendar-web:
|
|
image: ghcr.io/memo-2023/calendar-web:latest
|
|
container_name: calendar-web
|
|
restart: always
|
|
depends_on:
|
|
calendar-backend:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 5186
|
|
PUBLIC_BACKEND_URL: http://calendar-backend:3016
|
|
PUBLIC_MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
PUBLIC_BACKEND_URL_CLIENT: https://calendar-api.mana.how
|
|
PUBLIC_MANA_CORE_AUTH_URL_CLIENT: https://auth.mana.how
|
|
# Cross-app integrations
|
|
PUBLIC_TODO_BACKEND_URL: https://todo-api.mana.how
|
|
PUBLIC_CONTACTS_API_URL: https://contacts-api.mana.how
|
|
ports:
|
|
- "5186:5186"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:5186/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
# ============================================
|
|
# Clock App
|
|
# ============================================
|
|
|
|
clock-backend:
|
|
image: ghcr.io/memo-2023/clock-backend:latest
|
|
container_name: clock-backend
|
|
restart: always
|
|
depends_on:
|
|
mana-core-auth:
|
|
condition: service_healthy
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 3017
|
|
DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD:-manacore123}@postgres:5432/clock
|
|
DB_HOST: postgres
|
|
DB_PORT: 5432
|
|
DB_USER: postgres
|
|
MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
CORS_ORIGINS: https://clock.mana.how,https://mana.how
|
|
ports:
|
|
- "3017:3017"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3017/api/v1/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
clock-web:
|
|
image: ghcr.io/memo-2023/clock-web:latest
|
|
container_name: clock-web
|
|
restart: always
|
|
depends_on:
|
|
clock-backend:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 5187
|
|
PUBLIC_BACKEND_URL: http://clock-backend:3017
|
|
PUBLIC_MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
PUBLIC_BACKEND_URL_CLIENT: https://clock-api.mana.how
|
|
PUBLIC_MANA_CORE_AUTH_URL_CLIENT: https://auth.mana.how
|
|
ports:
|
|
- "5187:5187"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:5187/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
# ============================================
|
|
# Contacts App
|
|
# ============================================
|
|
|
|
contacts-backend:
|
|
image: ghcr.io/memo-2023/contacts-backend:latest
|
|
container_name: contacts-backend
|
|
restart: always
|
|
depends_on:
|
|
mana-core-auth:
|
|
condition: service_healthy
|
|
postgres:
|
|
condition: service_healthy
|
|
minio:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 3015
|
|
DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD:-manacore123}@postgres:5432/contacts
|
|
DB_HOST: postgres
|
|
DB_PORT: 5432
|
|
DB_USER: postgres
|
|
MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
CORS_ORIGINS: https://contacts.mana.how,https://mana.how,https://calendar.mana.how
|
|
# S3/MinIO Storage for contact photos
|
|
S3_ENDPOINT: http://minio:9000
|
|
S3_REGION: us-east-1
|
|
S3_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin}
|
|
S3_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin}
|
|
S3_BUCKET: contacts-photos
|
|
ports:
|
|
- "3015:3015"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3015/api/v1/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
contacts-web:
|
|
image: ghcr.io/memo-2023/contacts-web:latest
|
|
container_name: contacts-web
|
|
restart: always
|
|
depends_on:
|
|
contacts-backend:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
PORT: 5184
|
|
PUBLIC_BACKEND_URL: http://contacts-backend:3015
|
|
PUBLIC_MANA_CORE_AUTH_URL: http://mana-core-auth:3001
|
|
PUBLIC_BACKEND_URL_CLIENT: https://contacts-api.mana.how
|
|
PUBLIC_MANA_CORE_AUTH_URL_CLIENT: https://auth.mana.how
|
|
ports:
|
|
- "5184:5184"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:5184/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
# ============================================
|
|
# Monitoring Stack
|
|
# ============================================
|
|
|
|
prometheus:
|
|
image: prom/prometheus:v2.51.0
|
|
container_name: manacore-prometheus
|
|
restart: always
|
|
command:
|
|
- '--config.file=/etc/prometheus/prometheus.yml'
|
|
- '--storage.tsdb.path=/prometheus'
|
|
- '--storage.tsdb.retention.time=30d'
|
|
- '--web.enable-lifecycle'
|
|
volumes:
|
|
- ./docker/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
|
|
- prometheus_data:/prometheus
|
|
ports:
|
|
- "9090:9090"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:9090/-/healthy"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
|
|
grafana:
|
|
image: grafana/grafana:10.4.1
|
|
container_name: manacore-grafana
|
|
restart: always
|
|
depends_on:
|
|
prometheus:
|
|
condition: service_healthy
|
|
environment:
|
|
GF_SECURITY_ADMIN_USER: admin
|
|
GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_PASSWORD:-admin}
|
|
GF_USERS_ALLOW_SIGN_UP: false
|
|
GF_SERVER_ROOT_URL: https://grafana.mana.how
|
|
volumes:
|
|
- ./docker/grafana/provisioning:/etc/grafana/provisioning:ro
|
|
- ./docker/grafana/dashboards:/var/lib/grafana/dashboards:ro
|
|
- grafana_data:/var/lib/grafana
|
|
ports:
|
|
- "3100:3000"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3000/api/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
|
|
node-exporter:
|
|
image: prom/node-exporter:v1.7.0
|
|
container_name: manacore-node-exporter
|
|
restart: always
|
|
command:
|
|
- '--path.procfs=/host/proc'
|
|
- '--path.sysfs=/host/sys'
|
|
- '--path.rootfs=/rootfs'
|
|
- '--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)'
|
|
volumes:
|
|
- /proc:/host/proc:ro
|
|
- /sys:/host/sys:ro
|
|
- /:/rootfs:ro
|
|
ports:
|
|
- "9100:9100"
|
|
|
|
cadvisor:
|
|
image: gcr.io/cadvisor/cadvisor:v0.49.1
|
|
container_name: manacore-cadvisor
|
|
restart: always
|
|
privileged: true
|
|
volumes:
|
|
- /:/rootfs:ro
|
|
- /var/run:/var/run:ro
|
|
- /sys:/sys:ro
|
|
- /var/lib/docker/:/var/lib/docker:ro
|
|
- /dev/disk/:/dev/disk:ro
|
|
ports:
|
|
- "8080:8080"
|
|
|
|
postgres-exporter:
|
|
image: prometheuscommunity/postgres-exporter:v0.15.0
|
|
container_name: manacore-postgres-exporter
|
|
restart: always
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
DATA_SOURCE_NAME: postgresql://postgres:${POSTGRES_PASSWORD:-manacore123}@postgres:5432/postgres?sslmode=disable
|
|
ports:
|
|
- "9187:9187"
|
|
|
|
redis-exporter:
|
|
image: oliver006/redis_exporter:v1.58.0
|
|
container_name: manacore-redis-exporter
|
|
restart: always
|
|
depends_on:
|
|
redis:
|
|
condition: service_healthy
|
|
environment:
|
|
REDIS_ADDR: redis://redis:6379
|
|
REDIS_PASSWORD: ${REDIS_PASSWORD:-redis123}
|
|
ports:
|
|
- "9121:9121"
|
|
|
|
# ============================================
|
|
# Web Analytics (Umami)
|
|
# ============================================
|
|
|
|
umami:
|
|
image: ghcr.io/umami-software/umami:postgresql-latest
|
|
container_name: manacore-umami
|
|
restart: always
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD:-manacore123}@postgres:5432/umami
|
|
DATABASE_TYPE: postgresql
|
|
APP_SECRET: ${UMAMI_APP_SECRET:-change-me-umami-secret}
|
|
DISABLE_TELEMETRY: 1
|
|
ports:
|
|
- "3200:3000"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3000/api/heartbeat"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
# ============================================
|
|
# Volumes
|
|
# ============================================
|
|
|
|
volumes:
|
|
postgres_data:
|
|
name: manacore-postgres
|
|
redis_data:
|
|
name: manacore-redis
|
|
minio_data:
|
|
name: manacore-minio
|
|
prometheus_data:
|
|
name: manacore-prometheus
|
|
grafana_data:
|
|
name: manacore-grafana
|