docker-compose.swarm.yml

version: "3.7"


services:
  db:
    environment:
      POSTGRES_DB_FILE: "/run/secrets/db-name"
      POSTGRES_USER_FILE: "/run/secrets/db-user"
      POSTGRES_PASSWORD_FILE: "/run/secrets/db-pass"
    networks:
      - db
    secrets:
      - db-name
      - db-user
      - db-pass
    deploy:
      replicas: 1
      placement:
        constraints:
          - "node.role==manager"
      resources:
        limits:
          cpus: '0.75'
          memory: 800M
        reservations:
          cpus: '0.1'
          memory: 50M
      restart_policy:
        condition: on-failure
        delay: 1s

  app:
    image: django-backend_app
    environment:
      AWS_HOST: 'storage.irandbo.ir'
      HOST: 'irandbo.ir'
    networks:
      - db
      - storage
      - webserver
    secrets:
    - secret_key
    - access_key
    - db-name
    - db-user
    - db-pass
    deploy:
      replicas: 1
      placement:
        constraints:
          - "node.role==manager"
      resources:
        limits:
          cpus: '0.9'
          memory: 700M
        reservations:
          cpus: '0.15'
          memory: 300M
      restart_policy:
        condition: on-failure
        delay: 1s
      update_config:
        order: start-first

  minio:
    networks:
      - storage
      - webserver
    secrets:
      - secret_key
      - access_key
    deploy:
      restart_policy:
        condition: on-failure
        delay: 10s
        max_attempts: 10
        window: 60s
      placement:
        constraints:
          - "node.role==manager"
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
      interval: 30s
      timeout: 20s
      retries: 3

  webserver:
    image: django-backend_webserver
    build:
      context: nginx
      dockerfile: Dockerfile
    networks:
      - webserver
    ports:
      - 80:80
      - 443:443
    secrets:
      - nginx.crt
      - nginx.key
      - dhparam.pem
    deploy:
      replicas: 1
      placement:
        constraints:
          - "node.role==manager"
      resources:
        limits:
          cpus: '0.5'
          memory: 300M
        reservations:
          cpus: '0.05'
          memory: 15M
      restart_policy:
        condition: on-failure
        delay: 1s
      update_config:
        order: start-first


secrets:
  nginx.crt:
    external: true
  nginx.key:
    external: true
  dhparam.pem:
    external: true
  db-name:
    external: true
  db-user:
    external: true
  db-pass:
    external: true
  secret_key:
    external: true
  access_key:
    external: true


networks:
  db:
  storage:
  webserver: