Docker: Add YAML templates
These templates were copied from https://github.com/OpenSlides/openslides-docker-compose and adapted for the new server-db-setup service.
This commit is contained in:
Gernot Schulz
Finn Stutzenstein
parent
683aed56bb
commit
d48794ae8a
@ -1,162 +0,0 @@
|
|||||||
version: '3.4'
|
|
||||||
|
|
||||||
# @Gernot: TODO env file
|
|
||||||
x-server-env: &default-server-env
|
|
||||||
SECRET_KEY: "TODO"
|
|
||||||
# @Gernot: TODO secret key generation. -> secret?
|
|
||||||
INSTANCE_DOMAIN: "http://example.com:8000"
|
|
||||||
x-pgnode: &default-pgnode
|
|
||||||
image: openslides/openslides-repmgr:latest
|
|
||||||
build: https://github.com/OpenSlides/openslides-docker-compose.git#:repmgr
|
|
||||||
networks:
|
|
||||||
- dbnet
|
|
||||||
labels:
|
|
||||||
org.openslides.role: "postgres"
|
|
||||||
restart: always
|
|
||||||
x-pgnode-env: &default-pgnode-env
|
|
||||||
REPMGR_RECONNECT_ATTEMPTS: 30
|
|
||||||
REPMGR_RECONNECT_INTERVAL: 10
|
|
||||||
|
|
||||||
services:
|
|
||||||
server:
|
|
||||||
image: openslides/openslides-server:latest
|
|
||||||
networks:
|
|
||||||
- front
|
|
||||||
- back
|
|
||||||
restart: always
|
|
||||||
# Below is the default command. You can uncomment it to override the
|
|
||||||
# number of workers, for example:
|
|
||||||
# command: "gunicorn -w 8 --preload -b 0.0.0.0:8000
|
|
||||||
# -k uvicorn.workers.UvicornWorker openslides.asgi:application"
|
|
||||||
#
|
|
||||||
# Uncomment the following line to use daphne instead of gunicorn:
|
|
||||||
# command: "daphne -b 0.0.0.0 -p 8000 openslides.asgi:application"
|
|
||||||
depends_on:
|
|
||||||
- postfix
|
|
||||||
- media
|
|
||||||
- pgbouncer
|
|
||||||
- redis
|
|
||||||
- redis-slave
|
|
||||||
- redis-channels
|
|
||||||
environment:
|
|
||||||
<< : *default-server-env
|
|
||||||
secrets:
|
|
||||||
- os_admin
|
|
||||||
- os_user
|
|
||||||
|
|
||||||
server-db-setup:
|
|
||||||
image: openslides/openslides-server:latest
|
|
||||||
networks:
|
|
||||||
- back
|
|
||||||
restart: always
|
|
||||||
entrypoint: /usr/local/sbin/entrypoint-db-setup
|
|
||||||
depends_on:
|
|
||||||
- pgbouncer
|
|
||||||
- redis
|
|
||||||
- redis-slave
|
|
||||||
- redis-channels
|
|
||||||
environment:
|
|
||||||
<< : *default-server-env
|
|
||||||
secrets:
|
|
||||||
- os_admin
|
|
||||||
- os_user
|
|
||||||
|
|
||||||
client:
|
|
||||||
image: openslides/openslides-client:latest
|
|
||||||
restart: always
|
|
||||||
depends_on:
|
|
||||||
- server
|
|
||||||
networks:
|
|
||||||
- front
|
|
||||||
ports:
|
|
||||||
- "127.0.0.1:8000:80"
|
|
||||||
|
|
||||||
pgnode1:
|
|
||||||
<< : *default-pgnode
|
|
||||||
environment:
|
|
||||||
<< : *default-pgnode-env
|
|
||||||
REPMGR_NODE_ID: 1
|
|
||||||
REPMGR_PRIMARY: # empty; this *is* the primary
|
|
||||||
volumes:
|
|
||||||
- "dbdata1:/var/lib/postgresql"
|
|
||||||
# Note: You can add more postgres nodes by copying the template
|
|
||||||
# and replacing all %X% with the number of the pgnode. Remember
|
|
||||||
# to add all pgnodes to the pgbouncer below!
|
|
||||||
# pgnode%X%:
|
|
||||||
# << : *default-pgnode
|
|
||||||
# environment:
|
|
||||||
# << : *default-pgnode-env
|
|
||||||
# REPMGR_NODE_ID: %X%
|
|
||||||
# REPMGR_PRIMARY: pgnode1
|
|
||||||
# volumes:
|
|
||||||
# - "dbdata%X%:/var/lib/postgresql"
|
|
||||||
|
|
||||||
pgbouncer:
|
|
||||||
# environment:
|
|
||||||
# - PG_NODE_LIST=pgnode1,pgnode2,pgnode3
|
|
||||||
image: openslides/openslides-pgbouncer:latest
|
|
||||||
build: https://github.com/OpenSlides/openslides-docker-compose.git#:pgbouncer
|
|
||||||
restart: always
|
|
||||||
networks:
|
|
||||||
back:
|
|
||||||
aliases:
|
|
||||||
- db
|
|
||||||
- postgres
|
|
||||||
dbnet:
|
|
||||||
postfix:
|
|
||||||
image: openslides/openslides-postfix:latest
|
|
||||||
build: https://github.com/OpenSlides/openslides-docker-compose.git#:postfix
|
|
||||||
restart: always
|
|
||||||
environment:
|
|
||||||
MYHOSTNAME: localhost
|
|
||||||
RELAYHOST: localhost
|
|
||||||
networks:
|
|
||||||
- back
|
|
||||||
redis:
|
|
||||||
image: redis:alpine
|
|
||||||
restart: always
|
|
||||||
networks:
|
|
||||||
- back
|
|
||||||
redis-slave:
|
|
||||||
image: redis:alpine
|
|
||||||
restart: always
|
|
||||||
command: ["redis-server", "--save", "", "--slaveof", "redis", "6379"]
|
|
||||||
depends_on:
|
|
||||||
- redis
|
|
||||||
networks:
|
|
||||||
- back
|
|
||||||
redis-channels:
|
|
||||||
image: redis:alpine
|
|
||||||
restart: always
|
|
||||||
networks:
|
|
||||||
- back
|
|
||||||
media:
|
|
||||||
image: openslides/openslides-media-service:latest
|
|
||||||
build: https://github.com/OpenSlides/openslides-media-service.git
|
|
||||||
environment:
|
|
||||||
- CHECK_REQUEST_URL=server:8000/check-media/
|
|
||||||
restart: always
|
|
||||||
networks:
|
|
||||||
front:
|
|
||||||
back:
|
|
||||||
# Override command to run more workers per task
|
|
||||||
# command: ["gunicorn", "-w", "4", "--preload", "-b",
|
|
||||||
# "0.0.0.0:8000", "src.mediaserver:app"]
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
dbdata1:
|
|
||||||
dbdata2:
|
|
||||||
dbdata3:
|
|
||||||
|
|
||||||
networks:
|
|
||||||
front:
|
|
||||||
back:
|
|
||||||
dbnet:
|
|
||||||
|
|
||||||
secrets:
|
|
||||||
os_admin:
|
|
||||||
file: ./secrets/admin.env
|
|
||||||
os_user:
|
|
||||||
file: ./secrets/user.env
|
|
||||||
|
|
||||||
# vim: set ft=yaml sw=2 et:
|
|
||||||
204
docker/docker-compose.yml.m4
Normal file
204
docker/docker-compose.yml.m4
Normal file
@ -0,0 +1,204 @@
|
|||||||
|
dnl This is a YAML template file. Simply translate it with m4 to create
|
||||||
|
dnl a standard configuration. Customizations can and should be added in .env
|
||||||
|
dnl by setting the appropriate variables.
|
||||||
|
dnl
|
||||||
|
dnl Usage:
|
||||||
|
dnl m4 docker-compose.yml.m4 > docker-compose.yml
|
||||||
|
dnl ( set -a; source .env; m4 docker-compose.yml.m4 ) > docker-compose.yml
|
||||||
|
dnl
|
||||||
|
dnl ----------------------------------------
|
||||||
|
divert(-1)dnl
|
||||||
|
define(`read_env', `esyscmd(`printf "%s" "$$1"')')
|
||||||
|
define(`ifenvelse', `ifelse(read_env(`$1'),, `$2', read_env(`$1'))')
|
||||||
|
|
||||||
|
define(`BACKEND_IMAGE',
|
||||||
|
ifenvelse(`DOCKER_OPENSLIDES_BACKEND_NAME', openslides/openslides-server):dnl
|
||||||
|
ifenvelse(`DOCKER_OPENSLIDES_BACKEND_TAG', latest))
|
||||||
|
define(`FRONTEND_IMAGE',
|
||||||
|
ifenvelse(`DOCKER_OPENSLIDES_FRONTEND_NAME', openslides/openslides-client):dnl
|
||||||
|
ifenvelse(`DOCKER_OPENSLIDES_FRONTEND_TAG', latest))
|
||||||
|
|
||||||
|
define(`PRIMARY_DB', `ifenvelse(`PGNODE_REPMGR_PRIMARY', pgnode1)')
|
||||||
|
|
||||||
|
define(`PGBOUNCER_NODELIST',
|
||||||
|
`ifelse(read_env(`PGNODE_2_ENABLED'), 1, `,pgnode2')`'dnl
|
||||||
|
ifelse(read_env(`PGNODE_3_ENABLED'), 1, `,pgnode3')')
|
||||||
|
|
||||||
|
define(`PROJECT_DIR', ifdef(`PROJECT_DIR',PROJECT_DIR,.))
|
||||||
|
define(`ADMIN_SECRET_AVAILABLE', `syscmd(`test -f 'PROJECT_DIR`/secrets/adminsecret.env')sysval')
|
||||||
|
define(`USER_SECRET_AVAILABLE', `syscmd(`test -f 'PROJECT_DIR`/secrets/usersecret.env')sysval')
|
||||||
|
divert(0)dnl
|
||||||
|
dnl ----------------------------------------
|
||||||
|
# This configuration was created from a template file. Before making changes,
|
||||||
|
# please make sure that you do not have a process in place that would override
|
||||||
|
# your changes in the future. The accompanying .env file might be the correct
|
||||||
|
# place for customizations instead.
|
||||||
|
version: '3.4'
|
||||||
|
|
||||||
|
x-osserver:
|
||||||
|
&default-osserver
|
||||||
|
image: BACKEND_IMAGE
|
||||||
|
networks:
|
||||||
|
- front
|
||||||
|
- back
|
||||||
|
restart: always
|
||||||
|
x-osserver-env: &default-osserver-env
|
||||||
|
INSTANCE_DOMAIN: "ifenvelse(`INSTANCE_DOMAIN', http://example.com:8000)"
|
||||||
|
DEFAULT_FROM_EMAIL: "ifenvelse(`DEFAULT_FROM_EMAIL', noreply@example.com)"
|
||||||
|
REDIS_REPLICAS: ifenvelse(`REDIS_RO_SERVICE_REPLICAS', 1)
|
||||||
|
x-pgnode: &default-pgnode
|
||||||
|
image: ifenvelse(`DEFAULT_DOCKER_REGISTRY', openslides)/openslides-repmgr:latest
|
||||||
|
build: https://github.com/OpenSlides/openslides-docker-compose.git#:repmgr
|
||||||
|
networks:
|
||||||
|
- dbnet
|
||||||
|
labels:
|
||||||
|
org.openslides.role: "postgres"
|
||||||
|
restart: always
|
||||||
|
x-pgnode-env: &default-pgnode-env
|
||||||
|
REPMGR_RECONNECT_ATTEMPTS: 30
|
||||||
|
REPMGR_RECONNECT_INTERVAL: 10
|
||||||
|
REPMGR_WAL_ARCHIVE: "ifenvelse(`PGNODE_WAL_ARCHIVING', on)"
|
||||||
|
|
||||||
|
services:
|
||||||
|
server:
|
||||||
|
<< : *default-osserver
|
||||||
|
# Below is the default command. You can uncomment it to override the
|
||||||
|
# number of workers, for example:
|
||||||
|
# command: "gunicorn -w 8 --preload -b 0.0.0.0:8000
|
||||||
|
# -k uvicorn.workers.UvicornWorker openslides.asgi:application"
|
||||||
|
#
|
||||||
|
# Uncomment the following line to use daphne instead of gunicorn:
|
||||||
|
# command: "daphne -b 0.0.0.0 -p 8000 openslides.asgi:application"
|
||||||
|
depends_on:
|
||||||
|
- server-db-setup
|
||||||
|
environment:
|
||||||
|
<< : *default-osserver-env
|
||||||
|
ifelse(read_env(`OPENSLIDES_BACKEND_SERVICE_REPLICAS'),,,deploy:
|
||||||
|
replicas: ifenvelse(`OPENSLIDES_BACKEND_SERVICE_REPLICAS', 1))
|
||||||
|
|
||||||
|
server-db-setup:
|
||||||
|
<< : *default-osserver
|
||||||
|
entrypoint: /usr/local/sbin/entrypoint-db-setup
|
||||||
|
environment:
|
||||||
|
<< : *default-osserver-env
|
||||||
|
ifelse(ADMIN_SECRET_AVAILABLE, 0, secrets:, USER_SECRET_AVAILABLE, 0, secrets:)
|
||||||
|
ifelse(ADMIN_SECRET_AVAILABLE, 0,- os_admin)
|
||||||
|
ifelse(USER_SECRET_AVAILABLE, 0,- os_user)
|
||||||
|
depends_on:
|
||||||
|
- pgbouncer
|
||||||
|
- redis
|
||||||
|
- redis-slave
|
||||||
|
- redis-channels
|
||||||
|
|
||||||
|
client:
|
||||||
|
image: FRONTEND_IMAGE
|
||||||
|
restart: always
|
||||||
|
depends_on:
|
||||||
|
- server
|
||||||
|
networks:
|
||||||
|
- front
|
||||||
|
ports:
|
||||||
|
- "127.0.0.1:ifenvelse(`EXTERNAL_HTTP_PORT', 8000):80"
|
||||||
|
|
||||||
|
pgnode1:
|
||||||
|
<< : *default-pgnode
|
||||||
|
environment:
|
||||||
|
<< : *default-pgnode-env
|
||||||
|
REPMGR_NODE_ID: 1
|
||||||
|
REPMGR_PRIMARY: ifelse(PRIMARY_DB, pgnode1, `# This is the primary', PRIMARY_DB)
|
||||||
|
volumes:
|
||||||
|
- "dbdata1:/var/lib/postgresql"
|
||||||
|
ifelse(read_env(`PGNODE_2_ENABLED'), 1, `'
|
||||||
|
pgnode2:
|
||||||
|
<< : *default-pgnode
|
||||||
|
environment:
|
||||||
|
<< : *default-pgnode-env
|
||||||
|
REPMGR_NODE_ID: 2
|
||||||
|
REPMGR_PRIMARY: ifelse(PRIMARY_DB, pgnode2, `# This is the primary', PRIMARY_DB)
|
||||||
|
volumes:
|
||||||
|
- "dbdata2:/var/lib/postgresql")
|
||||||
|
ifelse(read_env(`PGNODE_3_ENABLED'), 1, `'
|
||||||
|
pgnode3:
|
||||||
|
<< : *default-pgnode
|
||||||
|
environment:
|
||||||
|
<< : *default-pgnode-env
|
||||||
|
REPMGR_NODE_ID: 3
|
||||||
|
REPMGR_PRIMARY: ifelse(PRIMARY_DB, pgnode3, `# This is the primary', PRIMARY_DB)
|
||||||
|
volumes:
|
||||||
|
- "dbdata3:/var/lib/postgresql")
|
||||||
|
|
||||||
|
pgbouncer:
|
||||||
|
environment:
|
||||||
|
- PG_NODE_LIST=pgnode1`'PGBOUNCER_NODELIST
|
||||||
|
image: ifenvelse(`DEFAULT_DOCKER_REGISTRY', openslides)/openslides-pgbouncer:latest
|
||||||
|
build: https://github.com/OpenSlides/openslides-docker-compose.git#:pgbouncer
|
||||||
|
restart: always
|
||||||
|
networks:
|
||||||
|
back:
|
||||||
|
aliases:
|
||||||
|
- db
|
||||||
|
- postgres
|
||||||
|
dbnet:
|
||||||
|
postfix:
|
||||||
|
image: ifenvelse(`DEFAULT_DOCKER_REGISTRY', openslides)/openslides-postfix:latest
|
||||||
|
build: https://github.com/OpenSlides/openslides-docker-compose.git#:postfix
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
MYHOSTNAME: "ifenvelse(`POSTFIX_MYHOSTNAME', localhost)"
|
||||||
|
RELAYHOST: "ifenvelse(`POSTFIX_RELAYHOST', localhost)"
|
||||||
|
networks:
|
||||||
|
- back
|
||||||
|
redis:
|
||||||
|
image: redis:alpine
|
||||||
|
restart: always
|
||||||
|
networks:
|
||||||
|
back:
|
||||||
|
aliases:
|
||||||
|
- rediscache
|
||||||
|
redis-slave:
|
||||||
|
image: redis:alpine
|
||||||
|
restart: always
|
||||||
|
command: ["redis-server", "--save", "", "--slaveof", "redis", "6379"]
|
||||||
|
depends_on:
|
||||||
|
- redis
|
||||||
|
networks:
|
||||||
|
back:
|
||||||
|
aliases:
|
||||||
|
- rediscache-slave
|
||||||
|
ifelse(read_env(`REDIS_RO_SERVICE_REPLICAS'),,,deploy:
|
||||||
|
replicas: ifenvelse(`REDIS_RO_SERVICE_REPLICAS', 1))
|
||||||
|
redis-channels:
|
||||||
|
image: redis:alpine
|
||||||
|
restart: always
|
||||||
|
networks:
|
||||||
|
back:
|
||||||
|
media:
|
||||||
|
image: ifenvelse(`DEFAULT_DOCKER_REGISTRY', openslides)/openslides-media-service:latest
|
||||||
|
build: https://github.com/OpenSlides/openslides-media-service.git
|
||||||
|
environment:
|
||||||
|
- CHECK_REQUEST_URL=server:8000/check-media/
|
||||||
|
restart: always
|
||||||
|
networks:
|
||||||
|
front:
|
||||||
|
back:
|
||||||
|
# Override command to run more workers per task
|
||||||
|
# command: ["gunicorn", "-w", "4", "--preload", "-b",
|
||||||
|
# "0.0.0.0:8000", "src.mediaserver:app"]
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
dbdata1:
|
||||||
|
ifelse(read_env(`PGNODE_2_ENABLED'), 1, ` dbdata2:')
|
||||||
|
ifelse(read_env(`PGNODE_3_ENABLED'), 1, ` dbdata3:')
|
||||||
|
|
||||||
|
networks:
|
||||||
|
front:
|
||||||
|
back:
|
||||||
|
dbnet:
|
||||||
|
|
||||||
|
ifelse(ADMIN_SECRET_AVAILABLE, 0, secrets:, USER_SECRET_AVAILABLE, 0, secrets:)
|
||||||
|
ifelse(ADMIN_SECRET_AVAILABLE, 0,os_admin:
|
||||||
|
file: ./secrets/adminsecret.env)
|
||||||
|
ifelse(USER_SECRET_AVAILABLE, 0,os_user:
|
||||||
|
file: ./secrets/usersecret.env)
|
||||||
|
|
||||||
|
# vim: set sw=2 et:
|
||||||
238
docker/docker-stack.yml.m4
Normal file
238
docker/docker-stack.yml.m4
Normal file
@ -0,0 +1,238 @@
|
|||||||
|
dnl This is a YAML template file. Simply translate it with m4 to create
|
||||||
|
dnl a standard configuration. Customizations can and should be added in .env
|
||||||
|
dnl by setting the appropriate variables.
|
||||||
|
dnl
|
||||||
|
dnl Usage:
|
||||||
|
dnl m4 docker-stack.yml.m4 > docker-stack.yml
|
||||||
|
dnl ( set -a; source .env; m4 docker-stack.yml.m4 ) > docker-stack.yml
|
||||||
|
dnl
|
||||||
|
dnl ----------------------------------------
|
||||||
|
divert(-1)dnl
|
||||||
|
define(`read_env', `esyscmd(`printf "%s" "$$1"')')
|
||||||
|
define(`ifenvelse', `ifelse(read_env(`$1'),, `$2', read_env(`$1'))')
|
||||||
|
|
||||||
|
define(`BACKEND_IMAGE',
|
||||||
|
ifenvelse(`DOCKER_OPENSLIDES_BACKEND_NAME', openslides/openslides-server):dnl
|
||||||
|
ifenvelse(`DOCKER_OPENSLIDES_BACKEND_TAG', latest))
|
||||||
|
define(`FRONTEND_IMAGE',
|
||||||
|
ifenvelse(`DOCKER_OPENSLIDES_FRONTEND_NAME', openslides/openslides-client):dnl
|
||||||
|
ifenvelse(`DOCKER_OPENSLIDES_FRONTEND_TAG', latest))
|
||||||
|
|
||||||
|
define(`PRIMARY_DB', `ifenvelse(`PGNODE_REPMGR_PRIMARY', pgnode1)')
|
||||||
|
|
||||||
|
define(`PGBOUNCER_NODELIST',
|
||||||
|
`ifelse(read_env(`PGNODE_2_ENABLED'), 1, `,pgnode2')`'dnl
|
||||||
|
ifelse(read_env(`PGNODE_3_ENABLED'), 1, `,pgnode3')')
|
||||||
|
|
||||||
|
define(`PROJECT_DIR', ifdef(`PROJECT_DIR',PROJECT_DIR,.))
|
||||||
|
define(`ADMIN_SECRET_AVAILABLE', `syscmd(`test -f 'PROJECT_DIR`/secrets/adminsecret.env')sysval')
|
||||||
|
define(`USER_SECRET_AVAILABLE', `syscmd(`test -f 'PROJECT_DIR`/secrets/usersecret.env')sysval')
|
||||||
|
divert(0)dnl
|
||||||
|
dnl ----------------------------------------
|
||||||
|
# This configuration was created from a template file. Before making changes,
|
||||||
|
# please make sure that you do not have a process in place that would override
|
||||||
|
# your changes in the future. The accompanying .env file might be the correct
|
||||||
|
# place for customizations instead.
|
||||||
|
version: '3.4'
|
||||||
|
|
||||||
|
x-osserver:
|
||||||
|
&default-osserver
|
||||||
|
image: BACKEND_IMAGE
|
||||||
|
networks:
|
||||||
|
- front
|
||||||
|
- back
|
||||||
|
x-osserver-env: &default-osserver-env
|
||||||
|
INSTANCE_DOMAIN: "ifenvelse(`INSTANCE_DOMAIN', http://example.com:8000)"
|
||||||
|
DEFAULT_FROM_EMAIL: "ifenvelse(`DEFAULT_FROM_EMAIL', noreply@example.com)"
|
||||||
|
REDIS_REPLICAS: ifenvelse(`REDIS_RO_SERVICE_REPLICAS', 3)
|
||||||
|
x-pgnode: &default-pgnode
|
||||||
|
image: ifenvelse(`DEFAULT_DOCKER_REGISTRY', openslides)/openslides-repmgr:latest
|
||||||
|
build: https://github.com/OpenSlides/openslides-docker-compose.git#:repmgr
|
||||||
|
networks:
|
||||||
|
- dbnet
|
||||||
|
labels:
|
||||||
|
org.openslides.role: "postgres"
|
||||||
|
deploy:
|
||||||
|
replicas: 1
|
||||||
|
x-pgnode-env: &default-pgnode-env
|
||||||
|
REPMGR_RECONNECT_ATTEMPTS: 30
|
||||||
|
REPMGR_RECONNECT_INTERVAL: 10
|
||||||
|
REPMGR_WAL_ARCHIVE: "ifenvelse(`PGNODE_WAL_ARCHIVING', on)"
|
||||||
|
|
||||||
|
services:
|
||||||
|
server:
|
||||||
|
<< : *default-osserver
|
||||||
|
# Below is the default command. You can uncomment it to override the
|
||||||
|
# number of workers, for example:
|
||||||
|
# command: "gunicorn -w 8 --preload -b 0.0.0.0:8000
|
||||||
|
# -k uvicorn.workers.UvicornWorker openslides.asgi:application"
|
||||||
|
#
|
||||||
|
# Uncomment the following line to use daphne instead of gunicorn:
|
||||||
|
# command: "daphne -b 0.0.0.0 -p 8000 openslides.asgi:application"
|
||||||
|
environment:
|
||||||
|
<< : *default-osserver-env
|
||||||
|
deploy:
|
||||||
|
restart_policy:
|
||||||
|
condition: on-failure
|
||||||
|
delay: 5s
|
||||||
|
replicas: ifenvelse(`OPENSLIDES_BACKEND_SERVICE_REPLICAS', 1)
|
||||||
|
|
||||||
|
server-db-setup:
|
||||||
|
<< : *default-osserver
|
||||||
|
entrypoint: /usr/local/sbin/entrypoint-db-setup
|
||||||
|
environment:
|
||||||
|
<< : *default-osserver-env
|
||||||
|
ifelse(ADMIN_SECRET_AVAILABLE, 0, secrets:, USER_SECRET_AVAILABLE, 0, secrets:)
|
||||||
|
ifelse(ADMIN_SECRET_AVAILABLE, 0,- os_admin)
|
||||||
|
ifelse(USER_SECRET_AVAILABLE, 0,- os_user)
|
||||||
|
|
||||||
|
client:
|
||||||
|
image: FRONTEND_IMAGE
|
||||||
|
networks:
|
||||||
|
- front
|
||||||
|
ports:
|
||||||
|
- "0.0.0.0:ifenvelse(`EXTERNAL_HTTP_PORT', 8000):80"
|
||||||
|
deploy:
|
||||||
|
replicas: ifenvelse(`OPENSLIDES_FRONTEND_SERVICE_REPLICAS', 1)
|
||||||
|
restart_policy:
|
||||||
|
condition: on-failure
|
||||||
|
delay: 5s
|
||||||
|
|
||||||
|
pgnode1:
|
||||||
|
<< : *default-pgnode
|
||||||
|
environment:
|
||||||
|
<< : *default-pgnode-env
|
||||||
|
REPMGR_NODE_ID: 1
|
||||||
|
REPMGR_PRIMARY: ifelse(PRIMARY_DB, pgnode1, `# This is the primary', PRIMARY_DB)
|
||||||
|
deploy:
|
||||||
|
placement:
|
||||||
|
constraints: ifenvelse(`PGNODE_1_PLACEMENT_CONSTR', [node.labels.openslides-db == dbnode1])
|
||||||
|
volumes:
|
||||||
|
- "dbdata1:/var/lib/postgresql"
|
||||||
|
ifelse(read_env(`PGNODE_2_ENABLED'), 1, `'
|
||||||
|
pgnode2:
|
||||||
|
<< : *default-pgnode
|
||||||
|
environment:
|
||||||
|
<< : *default-pgnode-env
|
||||||
|
REPMGR_NODE_ID: 2
|
||||||
|
REPMGR_PRIMARY: ifelse(PRIMARY_DB, pgnode2, `# This is the primary', PRIMARY_DB)
|
||||||
|
deploy:
|
||||||
|
placement:
|
||||||
|
constraints: ifenvelse(`PGNODE_2_PLACEMENT_CONSTR', [node.labels.openslides-db == dbnode2])
|
||||||
|
volumes:
|
||||||
|
- "dbdata2:/var/lib/postgresql")
|
||||||
|
ifelse(read_env(`PGNODE_3_ENABLED'), 1, `'
|
||||||
|
pgnode3:
|
||||||
|
<< : *default-pgnode
|
||||||
|
environment:
|
||||||
|
<< : *default-pgnode-env
|
||||||
|
REPMGR_NODE_ID: 3
|
||||||
|
REPMGR_PRIMARY: ifelse(PRIMARY_DB, pgnode3, `# This is the primary', PRIMARY_DB)
|
||||||
|
deploy:
|
||||||
|
placement:
|
||||||
|
constraints: ifenvelse(`PGNODE_3_PLACEMENT_CONSTR', [node.labels.openslides-db == dbnode3])
|
||||||
|
volumes:
|
||||||
|
- "dbdata3:/var/lib/postgresql")
|
||||||
|
|
||||||
|
pgbouncer:
|
||||||
|
environment:
|
||||||
|
- PG_NODE_LIST=pgnode1`'PGBOUNCER_NODELIST
|
||||||
|
image: ifenvelse(`DEFAULT_DOCKER_REGISTRY', openslides)/openslides-pgbouncer:latest
|
||||||
|
build: https://github.com/OpenSlides/openslides-docker-compose.git#:pgbouncer
|
||||||
|
networks:
|
||||||
|
back:
|
||||||
|
aliases:
|
||||||
|
- db
|
||||||
|
- postgres
|
||||||
|
dbnet:
|
||||||
|
deploy:
|
||||||
|
restart_policy:
|
||||||
|
condition: on-failure
|
||||||
|
delay: 10s
|
||||||
|
placement:
|
||||||
|
constraints: ifenvelse(`PGBOUNCER_PLACEMENT_CONSTR', [node.role == manager])
|
||||||
|
postfix:
|
||||||
|
image: ifenvelse(`DEFAULT_DOCKER_REGISTRY', openslides)/openslides-postfix:latest
|
||||||
|
build: https://github.com/OpenSlides/openslides-docker-compose.git#:postfix
|
||||||
|
environment:
|
||||||
|
MYHOSTNAME: "ifenvelse(`POSTFIX_MYHOSTNAME', localhost)"
|
||||||
|
RELAYHOST: "ifenvelse(`POSTFIX_RELAYHOST', localhost)"
|
||||||
|
networks:
|
||||||
|
- back
|
||||||
|
deploy:
|
||||||
|
restart_policy:
|
||||||
|
condition: on-failure
|
||||||
|
delay: 5s
|
||||||
|
replicas: 1
|
||||||
|
placement:
|
||||||
|
constraints: [node.role == manager]
|
||||||
|
redis:
|
||||||
|
image: redis:alpine
|
||||||
|
networks:
|
||||||
|
back:
|
||||||
|
aliases:
|
||||||
|
- rediscache
|
||||||
|
deploy:
|
||||||
|
replicas: 1
|
||||||
|
restart_policy:
|
||||||
|
condition: on-failure
|
||||||
|
delay: 5s
|
||||||
|
redis-slave:
|
||||||
|
image: redis:alpine
|
||||||
|
command: ["redis-server", "--save", "", "--slaveof", "redis", "6379"]
|
||||||
|
networks:
|
||||||
|
back:
|
||||||
|
aliases:
|
||||||
|
- rediscache-slave
|
||||||
|
deploy:
|
||||||
|
replicas: ifenvelse(`REDIS_RO_SERVICE_REPLICAS', 3)
|
||||||
|
restart_policy:
|
||||||
|
condition: on-failure
|
||||||
|
delay: 5s
|
||||||
|
redis-channels:
|
||||||
|
image: redis:alpine
|
||||||
|
networks:
|
||||||
|
back:
|
||||||
|
deploy:
|
||||||
|
replicas: 1
|
||||||
|
restart_policy:
|
||||||
|
condition: on-failure
|
||||||
|
delay: 5s
|
||||||
|
media:
|
||||||
|
image: ifenvelse(`DEFAULT_DOCKER_REGISTRY', openslides)/openslides-media-service:latest
|
||||||
|
build: https://github.com/OpenSlides/openslides-media-service.git
|
||||||
|
environment:
|
||||||
|
- CHECK_REQUEST_URL=server:8000/check-media/
|
||||||
|
deploy:
|
||||||
|
replicas: ifenvelse(`MEDIA_SERVICE_REPLICAS', 8)
|
||||||
|
restart_policy:
|
||||||
|
condition: on-failure
|
||||||
|
delay: 10s
|
||||||
|
networks:
|
||||||
|
front:
|
||||||
|
back:
|
||||||
|
# Override command to run more workers per task
|
||||||
|
# command: ["gunicorn", "-w", "4", "--preload", "-b",
|
||||||
|
# "0.0.0.0:8000", "src.mediaserver:app"]
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
dbdata1:
|
||||||
|
ifelse(read_env(`PGNODE_2_ENABLED'), 1, ` dbdata2:')
|
||||||
|
ifelse(read_env(`PGNODE_3_ENABLED'), 1, ` dbdata3:')
|
||||||
|
|
||||||
|
networks:
|
||||||
|
front:
|
||||||
|
back:
|
||||||
|
driver_opts:
|
||||||
|
encrypted: ""
|
||||||
|
dbnet:
|
||||||
|
driver_opts:
|
||||||
|
encrypted: ""
|
||||||
|
|
||||||
|
ifelse(ADMIN_SECRET_AVAILABLE, 0, secrets:, USER_SECRET_AVAILABLE, 0, secrets:)
|
||||||
|
ifelse(ADMIN_SECRET_AVAILABLE, 0,os_admin:
|
||||||
|
file: ./secrets/adminsecret.env)
|
||||||
|
ifelse(USER_SECRET_AVAILABLE, 0,os_user:
|
||||||
|
file: ./secrets/usersecret.env)
|
||||||
|
|
||||||
|
# vim: set sw=2 et:
|
||||||
Loading…
Reference in New Issue
Block a user