starter/docker-compose.staging.yml at main · kunwarVivek/starter · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
name: boilerplate-saas-staging

# Staging environment overrides
# Usage: docker-compose -f docker-compose.yml -f docker-compose.staging.yml up

services:
  # Staging database with moderate optimizations
  postgres:
    environment:
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres_password
    secrets:
      - postgres_password
    ports:
      - "127.0.0.1:5433:5432"
    command:
      - "postgres"
      - "-c"
      - "max_connections=1000"
      - "-c"
      - "shared_buffers=512MB"
      - "-c"
      - "effective_cache_size=1.5GB"
      - "-c"
      - "log_statement=mod"
      - "-c"
      - "log_min_duration_statement=500"
    deploy:
      resources:
        limits:
          cpus: '1.5'
          memory: 2G
        reservations:
          cpus: '0.75'
          memory: 1G

  pgbouncer:
    environment:
      DATABASES_PASSWORD_FILE: /run/secrets/postgres_password
    secrets:
      - postgres_password
    ports:
      - "127.0.0.1:6433:6432"

  redis:
    ports:
      - "127.0.0.1:6380:6379"
    command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru --save 30 1000

  # Backend with staging configuration
  backend:
    environment:
      - NODE_ENV=staging
      - PORT=3000
      - DATABASE_URL=postgresql://postgres:postgres@pgbouncer:6432/boilerplate?schema=public&connection_limit=30&pool_timeout=20
      - REDIS_URL=redis://redis:6379
      - CORS_ORIGIN=${CORS_ORIGIN:-https://staging.example.com}
      - BETTER_AUTH_SECRET_FILE=/run/secrets/better_auth_secret
      - BETTER_AUTH_URL=${BETTER_AUTH_URL:-https://staging.example.com}
      - GOOGLE_GENERATIVE_AI_API_KEY_FILE=/run/secrets/google_ai_api_key
      - POLAR_ACCESS_TOKEN_FILE=/run/secrets/polar_access_token
      - POLAR_SUCCESS_URL=${POLAR_SUCCESS_URL:-https://staging.example.com/success}
      # Staging monitoring
      - PROMETHEUS_URL=http://prometheus:9090
      - GRAFANA_URL=http://grafana:3000
      # Staging-specific settings
      - ENABLE_AUDIT_LOGGING=true
      - AUDIT_LOG_RETENTION_DAYS=30
      - ENABLE_PERFORMANCE_MONITORING=true
    secrets:
      - better_auth_secret
      - google_ai_api_key
      - polar_access_token
    ports:
      - "127.0.0.1:3001:3000"
    deploy:
      resources:
        limits:
          cpus: '0.75'
          memory: 768M
        reservations:
          cpus: '0.375'
          memory: 384M

  # Frontend with staging configuration
  frontend:
    environment:
      - NODE_ENV=staging
      - VITE_SERVER_URL=http://backend:3000/api/trpc
      - VITE_APP_NAME=Boilerplate SaaS (Staging)
      - VITE_APP_VERSION=1.0.0-staging
      - VITE_ENVIRONMENT=staging
      - VITE_API_TIMEOUT=15000
      - VITE_MAX_RETRIES=3
      - VITE_RETRY_DELAY=1500
      - VITE_ENABLE_ANALYTICS=true
      - VITE_ENABLE_ERROR_REPORTING=true
      - VITE_ENABLE_PERFORMANCE_MONITORING=true
      - VITE_HSTS_ENABLED=true
      - VITE_CSP_NONCE_ENABLED=true
    ports:
      - "127.0.0.1:3002:80"
    deploy:
      resources:
        limits:
          cpus: '0.375'
          memory: 384M
        reservations:
          cpus: '0.187'
          memory: 192M

  # Staging monitoring stack
  prometheus:
    ports:
      - "127.0.0.1:9091:9090"

  grafana:
    environment:
      - GF_SECURITY_ADMIN_PASSWORD_FILE=/run/secrets/grafana_admin_password
      - GF_USERS_ALLOW_SIGN_UP=false
      - GF_AUTH_ANONYMOUS_ENABLED=false
    secrets:
      - grafana_admin_password
    ports:
      - "127.0.0.1:3003:3000"

  postgres-exporter:
    environment:
      - DATA_SOURCE_NAME=postgresql://postgres:postgres@postgres:5432/boilerplate?sslmode=disable
    ports:
      - "127.0.0.1:9188:9187"

  # Staging backup configuration
  backup:
    environment:
      - POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
      - BACKUP_RETENTION_DAYS=7
      - BACKUP_SCHEDULE=0 3 * * *
    secrets:
      - postgres_password

  # Staging-specific services
  staging-proxy:
    image: nginx:1.25-alpine
    container_name: boilerplate-staging-proxy
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/staging.conf:/etc/nginx/nginx.conf
      - ./nginx/ssl:/etc/nginx/ssl
    networks:
      - boilerplate-network
    depends_on:
      - frontend
      - backend
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: '0.5'
          memory: 256M
        reservations:
          cpus: '0.25'
          memory: 128M