docker-compose.prod.yml

version: "3.9"

services:
  redot-server:
    image: teamredot/redotlabs:latest
    container_name: redot-server
    restart: always
    depends_on:
      - redis
    expose:
      - "8080"
    command: ["java", "-jar", "app.jar", "--spring.profiles.active=prod"]
    environment:
      SPRING_PROFILES_ACTIVE: prod
    networks:
      - redot-net

  redis:
    image: redis:7-alpine
    container_name: redot-redis
    restart: always
    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD}
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - redot-net

  nginx:
    image: nginx:1.25-alpine
    container_name: redot-nginx
    restart: always
    depends_on:
      - redot-server
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/conf.d:/etc/nginx/conf.d:ro
      - certbot-etc:/etc/letsencrypt
      - certbot-var:/var/lib/letsencrypt
    networks:
      - redot-net

  certbot:
    image: certbot/certbot
    container_name: redot-certbot
    restart: unless-stopped
    volumes:
      - certbot-etc:/etc/letsencrypt
      - certbot-var:/var/lib/letsencrypt
      - ./nginx/conf.d:/etc/nginx/conf.d
    entrypoint: >
      /bin/sh -c 'trap exit TERM; 
      while :; do 
        certbot renew --webroot -w /var/lib/letsencrypt --quiet; 
        sleep 12h; 
      done'
    networks:
      - redot-net

volumes:
  redis-data:
  certbot-etc:
  certbot-var:

networks:
  redot-net:
    driver: bridge