5af88eb5ce
All checks were successful
build-and-push / docker (push) Successful in 29s
- users + password_resets tables; bcrypt hashing; JWT session in an httpOnly cookie (auth_secret auto-generated in settings) - /api gated behind auth (except /api/config and /api/auth/*) - First-run creates the account (no open registration after that); login, logout, forgot/reset-password flows - SMTP settings (host/port/secure/user/pass/from) in Settings menu; nodemailer sends reset links - Auth screen (sign in / create account / forgot / reset) gates the SPA; Sign out button; COOKIE_SECURE=true in compose for HTTPS Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
66 lines
2.3 KiB
YAML
66 lines
2.3 KiB
YAML
services:
|
|
db:
|
|
image: postgres:16-alpine
|
|
environment:
|
|
POSTGRES_USER: printhive
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-printhive}
|
|
POSTGRES_DB: printhive
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U printhive -d printhive"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
restart: unless-stopped
|
|
|
|
app:
|
|
# Pulled from the Forgejo registry (built by CI). To build locally instead:
|
|
# docker build -t git.plexultra.com/dlawler489/printhive:latest .
|
|
image: git.plexultra.com/dlawler489/printhive:latest
|
|
pull_policy: always
|
|
container_name: printhive-app # stable name for the Traefik file-provider to target
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
environment:
|
|
DATABASE_URL: postgres://printhive:${POSTGRES_PASSWORD:-printhive}@db:5432/printhive
|
|
PORT: 3000
|
|
COOKIE_SECURE: "true" # served over HTTPS via Traefik
|
|
# Optional — these can also be set in the app's Settings menu (stored in the DB).
|
|
THINGIVERSE_TOKEN: ${THINGIVERSE_TOKEN:-}
|
|
FLARESOLVERR_URL: ${FLARESOLVERR_URL:-}
|
|
MAKERWORLD_TOKEN: ${MAKERWORLD_TOKEN:-}
|
|
PRINTABLES_TOKEN: ${PRINTABLES_TOKEN:-}
|
|
volumes:
|
|
- uploads:/app/uploads
|
|
- thumbnails:/app/thumbnails
|
|
- glb:/app/glb
|
|
# No host port published — Traefik auto-discovers the app on the shared network.
|
|
networks:
|
|
- default # talk to the db
|
|
- traefik # reachable by Traefik
|
|
restart: unless-stopped
|
|
labels:
|
|
- "traefik.enable=true"
|
|
# App is on two networks; tell Traefik which one to reach it on.
|
|
- "traefik.docker.network=${TRAEFIK_NETWORK:-proxy}"
|
|
- "traefik.http.routers.printhive.rule=Host(`${PRINTHIVE_HOST:-printhive.plexultra.com}`)"
|
|
- "traefik.http.routers.printhive.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}"
|
|
- "traefik.http.routers.printhive.tls=true"
|
|
- "traefik.http.routers.printhive.tls.certresolver=${TRAEFIK_CERTRESOLVER:-le}"
|
|
- "traefik.http.services.printhive.loadbalancer.server.port=3000"
|
|
|
|
volumes:
|
|
pgdata:
|
|
uploads:
|
|
thumbnails:
|
|
glb:
|
|
|
|
networks:
|
|
default:
|
|
# The existing Traefik network (the `proxy` network Traefik runs on).
|
|
# Override with TRAEFIK_NETWORK if it ever changes.
|
|
traefik:
|
|
external: true
|
|
name: ${TRAEFIK_NETWORK:-proxy}
|