modkit/docker-compose.yml at main · bsky-watch/modkit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
include:
  - docker-compose.report-queue.yml
services:
  redmine:
    build: ./redmine
    image: modkit-redmine
    restart: always
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000/robots.txt"]
      interval: 5m
      timeout: 5s
      retries: 30
      start_period: 15m
      start_interval: 3s
    depends_on:
      - db
      - sidekiq-valkey
    volumes:
      - ${DATA_DIR:?please specify DATA_DIR in .env file}/files:/usr/src/redmine/files
      - ${DATA_DIR:?please specify DATA_DIR in .env file}/redmine-tmp:/usr/src/redmine/tmp
      - ./files/secrets.yml:/usr/src/redmine/config/secrets.yml:rw
    environment:
      RAILS_ENV: production
      REDMINE_DB_POSTGRES: db
      REDMINE_DB_DATABASE: redmine
      REDMINE_DB_USERNAME: ${DB_USER:-modkit}
      REDMINE_DB_PASSWORD: ${DB_PASS:?please specify DB_PASS in .env file}
      SECRET_KEY_BASE: ${REDMINE_SECRET_KEY_BASE:?please specify REDMINE_SECRET_KEY_BASE in .env file}
      REDMINE_PLUGINS_MIGRATE: 1
      REDIS_URL: redis://sidekiq-valkey:6379/0

  db:
    image: postgres:17
    restart: always
    stop_grace_period: 24h
    healthcheck:
      test: pg_isready -h localhost -U ${DB_USER:-modkit}
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 1h
      start_interval: 3s
    environment:
      POSTGRES_DB: redmine
      POSTGRES_USER: ${DB_USER:-modkit}
      POSTGRES_PASSWORD: ${DB_PASS:?please specify DB_PASS in .env file}
      MODKIT_LABELER_DB_PASSWORD: ${LABELER_DB_PASSWORD}
      MODKIT_REPORTS_DB_PASSWORD: ${REPORTS_DB_PASSWORD}
    volumes:
      - ${DATA_DIR:?please specify DATA_DIR in .env file}/db:/var/lib/postgresql/data
      - ./files/postgres-init:/docker-entrypoint-initdb.d:ro

  sidekiq-valkey:
    image: valkey/valkey:7-alpine
    restart: always
    command: valkey-server /etc/valkey.conf
    volumes:
      - ${DATA_DIR:?please specify DATA_DIR in .env file}/sidekiq:/data
      - ./files/valkey.conf:/etc/valkey.conf:ro

  report-processor:
    image: bsky.watch/modkit/report-processor
    restart: always
    build:
      context: .
      args:
        CMD: report-processor
    depends_on:
      - report-queue
      - redmine
    logging:
      options:
        'max-size': 50m
    command: >
      --log-level=0
      --auth-file=bsky.auth
      --valkey-addr=report-queue:6379
      --redmine-addr=http://redmine:3000
      --config=/config/config.yaml
      --mappings=/config/mappings.yaml
    volumes:
      - ./config:/config:ro

  redmine-handler:
    image: bsky.watch/modkit/redmine-handler
    restart: always
    build:
      context: .
      args:
        CMD: redmine-handler
    logging:
      options:
        'max-size': 50m
    command: >
      --log-level=0
      --auth-file=bsky.auth
      --redmine-addr=http://redmine:3000
      --listserver-addr=http://listserver:8080/xrpc/watch.bsky.list.getMemberships
      --config=/config/config.yaml
      --mappings=/config/mappings.yaml
      --labeler-url=http://labeler:8080
      --labeler-admin-url=http://labeler:8082
    volumes:
      - ./config:/config:ro

  listserver:
    image: bsky.watch/modkit/listserver
    restart: always
    build:
      context: .
      args:
        CMD: listserver
    logging:
      options:
        'max-size': 50m
    command: >
      --log-level=0
      --config=/config/config.yaml
    volumes:
      - ./config:/config:ro

  labeler:
    image: bsky.watch/modkit/labeler
    restart: always
    build:
      context: .
      args:
        CMD: labeler
    logging:
      options:
        'max-size': 50m
    command: >
      --log-level=0
      --config=/config/config.yaml
      --db-url=postgres://labeler:${LABELER_DB_PASSWORD}@db/labels?sslmode=disable
      --listen-addr=:8080
      --metrics-addr=:8081
      --admin-addr=:8082
      --listserver-addr=http://listserver:8080/xrpc/watch.bsky.list.getMembers
    volumes:
      - ./config:/config:ro


  caddy:
    image: caddy
    restart: always
    volumes:
      - ${DATA_DIR:?please specify DATA_DIR in .env file}/caddy:/data
      - ./files/caddy:/etc/caddy:ro

  pomerium:
    profiles:
      - prod
    image: cr.pomerium.com/pomerium/pomerium:latest
    restart: always
    ports:
      - 443:443
    volumes:
      - ./config/pomerium.yaml:/pomerium/config.yaml:ro
      - ${DATA_DIR:?please specify DATA_DIR in .env file}/pomerium:/data:rw


  redis-exporter:
    image: oliver006/redis_exporter
    restart: always
    depends_on:
      - report-queue

  prometheus:
    profiles:
      - prometheus
    image: prom/prometheus
    restart: always
    ports:
      - 0.0.0.0:9090:9090
    volumes:
      - ./files/prometheus:/etc/prometheus:ro
      - ${DATA_DIR:?please specify DATA_DIR in .env file}/prometheus:/prometheus:rw