docker-compose-build.yml

services:
  app:
    container_name: app
    build:
      context: .
    restart: always
    volumes:
      - static:/vol/web
    expose:
      - "9090"
    environment:
      - DB_HOST=db
      - DB_NAME=${DB_NAME}
      - DB_USER=${DB_USER}
      - DB_PASS=${DB_PASS}
      - SECRET_KEY=${SECRET_KEY}
      - ALLOWED_HOSTS=${ALLOWED_HOSTS}
      - DEV=false

    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=web"
      - "traefik.http.routers.app1.rule=Host(`${BASE_APP_DOMAIN}`)"
      - "traefik.http.services.app1.loadbalancer.server.port=9090"
      - "traefik.http.routers.app1.entrypoints=web"
      - "traefik.http.routers.app1.entrypoints=websecure"
      - "traefik.http.routers.app1.tls=true"
      - "traefik.http.routers.app1.middlewares=redirect-to-https@docker,rate-limit@docker"
      - "traefik.http.routers.app1.tls.certresolver=letsencrypt"

    networks:
      - web
      - backend

    depends_on:
      - db

  db:
    image: postgres:16.0-alpine3.18
    restart: always
    volumes:
      - postgres-data:/var/lib/postgresql/data
    environment:
      - POSTGRES_DB=${DB_NAME}
      - POSTGRES_USER=${DB_USER}
      - POSTGRES_PASSWORD=${DB_PASS}
      - PORT=${DB_PORT}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -q -d $$POSTGRES_DB -U $$POSTGRES_USER"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - backend

volumes:
  postgres-data:
  static:

networks:
  web:
    external: true
  backend: