FilesExpand file tree

develop

/

docker-compose.prod.yml

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

104 lines (100 loc) · 3.81 KB

develop

/

docker-compose.prod.yml

Copy path

Top

File metadata and controls

• Code
• Blame

104 lines (100 loc) · 3.81 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

# Quill — production self-host smoke test.

#

# Builds and runs the SAME deployment-agnostic images that ship to EKS, wired to

# a local Postgres — the "does the whole thing come up on any Docker host?"

# check. This is what an OSS adopter self-hosting Quill would run; it proves the

# images are not EKS-specific.

#

# docker compose -f docker-compose.prod.yml up --build

# # → http://localhost:3000 (web) http://localhost:4000/health (api)

#

# `docker-compose.yml` (the other file) is the zero-app dev-Postgres helper for

# `pnpm dev:pg`. THIS file runs the built API + web images end-to-end.

#

# Migrations run once via the `migrate` one-shot service before the API starts

# (mirrors the gated release step in deploy/DEPLOY-INTERNAL.md — never baked

# into the long-running pod, so scaling never races migrators).

services:

db:

image: postgres:16

environment:

POSTGRES_USER: ${POSTGRES_USER:-quill}

POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?POSTGRES_PASSWORD is required}

POSTGRES_DB: ${POSTGRES_DB:-quill}

healthcheck:

test: ['CMD-SHELL', 'pg_isready -U "$${POSTGRES_USER:-quill}" -d "$${POSTGRES_DB:-quill}"']

interval: 5s

timeout: 5s

retries: 12

volumes:

- quill-prod-pgdata:/var/lib/postgresql/data

# One-shot: run DB migrations, then exit. Uses the API image (it carries

# @quill/db + the migrations).

migrate:

build:

context: .

dockerfile: apps/api/Dockerfile

# The api image is a PRUNED single-package bundle (no monorepo root, so no

# root `db:migrate` script). Run the @quill/db migrate CLI via the tsx JS

# entrypoint EXACTLY like the API's CMD: the distroless image has no shell,

# so its node entrypoint cannot exec the node_modules/.bin/tsx shell shim —

# only a .mjs/.js file. (--tsconfig mirrors the CMD; the dev tsconfig's

# extends chain doesn't resolve inside the pruned bundle.)

command:

[

'node_modules/tsx/dist/cli.mjs',

'--tsconfig',

'tsconfig.runtime.json',

'node_modules/@quill/db/src/cli/migrate.ts',

]

environment:

DATABASE_URL: ${DATABASE_URL:?DATABASE_URL is required}

depends_on:

db:

condition: service_healthy

restart: 'no'

api:

build:

context: .

dockerfile: apps/api/Dockerfile

environment:

# The committed build ships two auth providers: `local` (an

# unauthenticated DEV STUB) and `workos` (needs the private overlay).

# The API deliberately REFUSES the stub under NODE_ENV=production, so

# this smoke-test stack runs NODE_ENV=development by default — override

# both vars together for a real deployment with a real provider:

# NODE_ENV=production AUTH_PROVIDER=workos (+ its JWT_SECRET etc.)

NODE_ENV: ${NODE_ENV:-development}

AUTH_PROVIDER: ${AUTH_PROVIDER:-local}

API_PORT: '4000'

DATABASE_URL: ${DATABASE_URL:?DATABASE_URL is required}

# Community-safe default: no external email, no Dapta coupling.

EMAIL_PROVIDER: log-only

# Optional spam protection (Cloudflare Turnstile): set BOTH to let form

# owners turn on a human check before the final submit. Unset = off.

# CAPTCHA_SITE_KEY: ${CAPTCHA_SITE_KEY:-}

# CAPTCHA_SECRET_KEY: ${CAPTCHA_SECRET_KEY:-}

ports:

- '4000:4000'

depends_on:

db:

condition: service_healthy

migrate:

condition: service_completed_successfully

web:

build:

context: .

dockerfile: apps/web/Dockerfile

args:

# Inlined into the client bundle at build time (see the web Dockerfile).

NEXT_PUBLIC_API_URL: http://localhost:4000

environment:

NODE_ENV: production

PORT: '3000'

NEXT_PUBLIC_API_URL: http://localhost:4000

ports:

- '3000:3000'

depends_on:

- api

volumes:

quill-prod-pgdata: