mirror of
https://github.com/Felitendo/Tanken.git
synced 2026-11-01 17:03:25 +01:00
ftrepoxyz
dea652620f
Security: add response headers, fix OIDC open redirect, add HTTP request timeouts, warn on default session secret in production. Infra: Docker healthcheck, DB pool config, expanded .gitignore. SEO: Open Graph tags, robots meta, fix umlaut in description.
45 lines
1.0 KiB
YAML
45 lines
1.0 KiB
YAML
services:
|
|
postgres:
|
|
image: postgres:17-alpine
|
|
container_name: tanken-postgres
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_DB: tanken
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_PASSWORD: postgres
|
|
ports:
|
|
- "5432:5432"
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres -d tanken"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
tanken:
|
|
build: .
|
|
container_name: tanken-webapp
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
ports:
|
|
- "3847:3847"
|
|
restart: unless-stopped
|
|
volumes:
|
|
- tanken_config:/app/config
|
|
environment:
|
|
- NODE_ENV=production
|
|
- PORT=3847
|
|
- DATABASE_URL=postgresql://postgres:postgres@postgres:5432/tanken
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3847/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 15s
|
|
|
|
volumes:
|
|
postgres_data:
|
|
tanken_config:
|