compose.yaml

services:
  static:
    image: nginx
    volumes:
      - evi_files:/usr/share/nginx/html
    container_name: static-files
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.files.rule=Host(`${DOMAIN}`) && PathPrefix(`/filestorage`)"
      - "traefik.http.routers.files.entrypoints=${ENTRY_POINTS}"
      - "traefik.http.middlewares.fileStrip.stripprefix.prefixes=/filestorage"
      - "traefik.http.routers.files.middlewares=fileStrip@docker"
      - "${FILES_CA}"

  frontend: # ---------------------------------------------------------Frontend
    build: ./frontend
    ports:
      - "3001:3000"
    env_file:
      - fe.env
    depends_on:
      - "api"
    develop:
      watch:
        - action: rebuild
          path: ./frontend
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.fe.rule=Host(`${DOMAIN}`) && !PathPrefix(`/admin`) && !PathPrefix(`/grafana`) && !PathPrefix(`/filestorage`)"
      - "traefik.http.routers.fe.entrypoints=${ENTRY_POINTS}"
      - "traefik.http.routers.fe.middlewares=clickJack@docker"
      - "${FE_CA}"
    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
  admin-frontend: # --------------------------------------------------------- Admin Frontend
    build: ./admin-frontend
    ports:
      - "3002:3000"
    env_file:
      - fe.env
    depends_on:
      - "api"
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
    develop:
      watch:
        - action: rebuild
          path: ./admin-frontend
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.admin.rule=Host(`${DOMAIN}`) && (PathPrefix(`/admin`) || HeaderRegexp(`Referer`, `http.*${DOMAIN}/admin/.*`))"
      - "traefik.http.routers.admin.entrypoints=${ENTRY_POINTS}"
      - "traefik.http.middlewares.adminStrip.stripprefix.prefixes=/admin"
      - "traefik.http.routers.admin.middlewares=adminStrip@docker, clickJack@docker"
      - "${ADMIN_CA}"
  traefik: # ------------------------------------------------------Traefik
    image: traefik:v3.1
    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entryPoints.web.address=:80"
      - "--entryPoints.websecure.address=:443"
      - "--log.level=DEBUG"
      - "--${CA_CERT_LINE1}"
      - "--${CA_CERT_LINE2}"
      - "--${CA_CERT_LINE3}"
      - "--${CA_CERT_LINE4}"
      - "--${CA_CERT_LINE5}"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - "../letsencrypt:/letsencrypt"
      - "/var/run/docker.sock:/var/run/docker.sock"
    labels:
      - traefik.enable=true
      - "traefik.http.middlewares.clickJack.headers.customrequestheaders.Content-Security-Policy=frame-ancestors 'self'"
  grafana: # -------------------------------------------------------------Grafana
    image: docker.io/grafana/grafana-oss
    container_name: grafana
    env_file:
      - graf.env
    ports:
      - "3000:3000" # Changed Grafana's port to avoid conflict with frontend
    volumes:
      - grafana-data:/var/lib/grafana
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.grafana.rule=Host(`${DOMAIN}`) && PathPrefix(`/grafana`)"
      - "traefik.http.routers.grafana.entrypoints=${ENTRY_POINTS}"
      - "${GRAF_CA}"
    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
  api: # ------------------------------------------------------------------API
    build: ./api
    ports:
      - "8181:8080"
    env_file:
      - api.env
    depends_on:
      - "postgres"
      - "redis-cache"
    volumes:
      - evi_files:/app/filestorage
    develop:
      watch:
        - action: rebuild
          path: ./api
    logging:
      driver: loki
      options:
        loki-url: http://loki:3100/loki/api/v1/push
        mode: non-blocking
        max-buffer-size: 4m
        loki-retries: "3"
    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
  orchestrator: # ---------------------------------------------------Orchestrator
    build: ./orchestrator
    ports:
      - "8090:8090"
    env_file:
      - api.env
    depends_on:
      - "postgres"
    develop:
      watch:
        - action: rebuild
          path: ./orchestrator
    logging:
      driver: loki
      options:
        loki-url: http://loki:3100/loki/api/v1/push
        mode: non-blocking
        max-buffer-size: 4m
        loki-retries: "3"
    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
  postgres: # ----------------------------------------------------------Postgres
    image: postgres
    ports:
      - "5432:5432"
    env_file:
      - db.env
    volumes:
      - pgdata:/var/lib/postgresql/data
      - ./initdb:/docker-entrypoint-initdb.d
    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
  redis-cache: # --------------------------------------------------------Redis
    image: redis
    ports:
      - "6379:6379"
    env_file:
      - red.env
    command: sh -c 'redis-server --requirepass "$$REDIS_PASSWORD"'
    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
  prometheus: # ----------------------------------------------------------Prometheus
    image: docker.io/prom/prometheus
    container_name: prometheus
    ports:
      - "9090:9090"
    command: "--config.file=/etc/prometheus/prometheus.yml"
    volumes:
      - ./prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - prometheus-data:/prometheus
    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
  cadvisor: # -----------------------------------------------------------Cadvisor
    image: gcr.io/cadvisor/cadvisor
    container_name: cadvisor
    privileged: true
    devices:
      - /dev/kmsg
    volumes:
      - /:/rootfs:ro
      - /var/run:/var/run:ro
      - /sys:/sys:ro
      - /var/lib/docker/:/var/lib/docker:ro
      - /dev/disk/:/dev/disk:ro
    ports:
      - 8081:8080
    environment:
      - allowlisted_container_labels=com.docker.swarm.service.name
    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
  loki: # ---------------------------------------------------------------Loki
    image: grafana/loki
    ports:
      - "3100:3100"
    volumes:
      - loki-data:/loki
    command: -config.file=/etc/loki/loki-config.yaml
    configs:
      - source: loki-config
        target: /etc/loki/loki-config.yaml
    user: root
    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
  promtail: # -----------------------------------------------------------Promtail
    image: grafana/promtail
    volumes:
      - /var/log:/var/log
      - /var/lib/docker/containers:/var/lib/docker/containers
      - /var/run/docker.sock:/var/run/docker.sock:ro
    command: -config.file=/etc/promtail/config.yaml
    configs:
      - source: promtail-config
        target: /etc/promtail/config.yaml
    labels:
      - "traefik.enable=false"

    restart: on-failure
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 3
volumes: # ---------------------------------------------------------------Volumes
  pgdata:
  evi_files:
  prometheus-data:
    driver: local
  grafana-data:
    driver: local
  loki-data:
    driver: local

configs: # ---------------------------------------------------------------Configs
  loki-config:
    file: ./loki-config.yaml
  promtail-config:
    file: ./promtail-config.yaml