docker-compose.production.yml

x-php: &php
  build:
    context: docker/php
    dockerfile: php.dockerfile
    args:
      ENVIRONMENT: production
  restart: unless-stopped
  working_dir: /srv
  volumes:
    - .:/srv
  depends_on:
    mysql:
      condition: service_healthy
    redis:
      condition: service_healthy

x-logging: &logging
  logging:
    driver: json-file
    options:
      max-size: 100m
      max-file: 10

services:

  traefik:
    <<: *logging
    image: traefik:v3.0
    restart: unless-stopped
    command: >-
      --entryPoints.web.address=:80
      --entryPoints.web.http.redirections.entrypoint.to=web-secure
      --entryPoints.web.http.redirections.entrypoint.scheme=https
      --entryPoints.web-secure.address=:443
      --ping=true
      --api=false
      --api.dashboard=false
      --providers.docker=true
      --providers.docker.exposedByDefault=false
      --providers.file.directory=/srv/configs
      --providers.file.watch=true
      --certificatesResolvers.lets-encrypt.acme.email=email@example.com
      --certificatesResolvers.lets-encrypt.acme.storage=/srv/.certificates/acme.json
      --certificatesResolvers.lets-encrypt.acme.tlsChallenge=true
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./traefik:/srv
    labels:
      - traefik.enable=false
      - traefik.http.routers.traefik.rule=Host(`traefik.docker.localhost`)
      - traefik.http.routers.traefik.service=api@internal
      - traefik.http.routers.traefik.tls=true
      - traefik.http.routers.traefik.tls.certResolver=lets-encrypt
      - traefik.http.routers.traefik.middlewares=basic-auth@file,www-to-https@file
      - traefik.http.services.traefik.loadBalancer.server.port=8080
    healthcheck:
      test: traefik healthcheck --ping

  php:
    <<: [ *php, *logging ]
    labels:
      - traefik.enable=true
      - traefik.http.routers.php.entryPoints=web-secure
      - traefik.http.routers.php.rule=Host(`app.docker.localhost`) || Host(`api.docker.localhost`)
      - traefik.http.routers.php.tls=true
      - traefik.http.routers.php.tls.certResolver=lets-encrypt
      - traefik.http.routers.php.middlewares=www-to-https@file

  queue:
    <<: [ *php, *logging ]
    command: php artisan horizon
    healthcheck:
      test: php artisan horizon:status

  scheduler:
    <<: [ *php, *logging ]
    command: supercronic /srv/docker/php/config/schedule.cron
    healthcheck:
      disable: true

  mysql:
    <<: *logging
    image: mysql:8.0-debian
    restart: unless-stopped
    volumes:
      - mysql-data:/var/lib/mysql
    environment:
      MYSQL_DATABASE: $DB_DATABASE
      MYSQL_USER: $DB_USERNAME
      MYSQL_PASSWORD: $DB_PASSWORD
      MYSQL_ROOT_PASSWORD: $DB_PASSWORD
    healthcheck:
      test: mysqladmin ping

  redis:
    <<: *logging
    image: redis:7-alpine
    restart: unless-stopped
    volumes:
      - redis-data:/data
    healthcheck:
      test: redis-cli ping

  actions:
    <<: [ *php, *logging ]
    restart: no
    command:
      - /bin/sh
      - -c
      - |
        echo "Running migration..."
        php artisan migrate --force --step --isolated

volumes:
  redis-data:
  mysql-data: