docker-compose.prod.yml

networks:
  web:
    external: true
  internal:
    external: false
services:
  api:
    build:
      context: api
      dockerfile: Dockerfile.prod
      args:
        POETRY_VERSION: ${POETRY_VERSION}
        API_PORT: ${API_PORT}
    ports:
      - "${API_PORT}:${API_PORT}"
    env_file:
      - ./.env
    environment:
      API_ENV: prod
      API_PORT: ${API_PORT}
      ADMIN_USER: ${ADMIN_USER}
      ADMIN_PASSWORD_HASHED: /run/secrets/admin_password_hash
      SECRET_KEY: /run/secrets/api_secret
      DB_HOST: ${DB_HOST}
      DB_USER: ${DB_USER}
      DB_PASSWORD: /run/secrets/db_password
      DB_NAME: ${DB_NAME}
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.blanket_api.rule=Host(`${API_HOST}`)"
      - "traefik.http.routers.blanket_api.tls=true"
      - "traefik.http.routers.blanket_api.tls.certresolver=lets-encrypt"
      - "traefik.http.services.blanket_api.loadbalancer.server.port=${API_PORT}"
    networks:
      - internal
      - web
    secrets:
      - api_secret
      - admin_password_hash
      - db_password
  client:
    build:
      context: client
      dockerfile: Dockerfile.prod
      args:
        API_URL: "http://api:${API_PORT}"
        CLIENT_PORT: ${CLIENT_PORT}
    ports:
      - "${CLIENT_PORT}:${CLIENT_PORT}"
    environment:
      API_URL: "http://api:${API_PORT}"
      CLIENT_PORT: ${CLIENT_PORT}
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.blanket_client.rule=Host(`${CLIENT_HOST}`)"
      - "traefik.http.routers.blanket_client.tls=true"
      - "traefik.http.routers.blanket_client.tls.certresolver=lets-encrypt"
      - "traefik.http.services.blanket_client.loadbalancer.server.port=${CLIENT_PORT}"
    networks:
      - internal
      - web
    depends_on:
      - api
  daemon:
    depends_on:
      - api
    build:
      context: daemon
      dockerfile: Dockerfile
      args:
        POETRY_VERSION: ${POETRY_VERSION}
        DAY_CHECK: ${DAY_CHECK}
        NIGHT_CHECK: ${NIGHT_CHECK}
    environment:
      ENV: prod
      API_ENDPOINT: http://api:${API_PORT}
      METOFFICE_SECRET: /run/secrets/metoffice_secret
      API_USER: ${ADMIN_USER}
      API_PASSWORD: /run/secrets/admin_password
      STATION_ID: ${STATION_ID}
      DAY_START: ${DAWN}
      DAY_END: ${DUSK}
      NIGHT_START: ${DUSK}
      NIGHT_END: ${DAWN}
    secrets:
      - metoffice_secret
      - admin_password
    networks:
      - internal
secrets:
  api_secret:
    file: api-secret.txt
  admin_password_hash:
    file: admin-password-hash.txt
  db_password:
    file: db-password.txt
  metoffice_secret:
    file: metoffice-secret.txt
  admin_password:
    file: admin-password.txt