docker-compose.letsencrypt.yml

x-climweb-variables: &climweb-variables
  WAIT_TIMEOUT: 120
  GUNICORN_NUM_OF_WORKERS: ${CMS_NUM_OF_WORKERS:-4}
  GUNICORN_TIMEOUT: ${CMS_GUNICORN_TIMEOUT:-300}
  DEBUG: ${CMS_DEBUG}
  WAGTAIL_SITE_NAME: ${CMS_SITE_NAME}
  ADMIN_URL_PATH: ${CMS_ADMIN_URL_PATH}
  TIME_ZONE: ${TIME_ZONE}
  SECRET_KEY: ${SECRET_KEY}
  ALLOWED_HOSTS: ${ALLOWED_HOSTS}
  CSRF_TRUSTED_ORIGINS: ${CSRF_TRUSTED_ORIGINS}
  DATABASE_URL: postgis://${CMS_DB_USER}:${CMS_DB_PASSWORD}@climweb_db:5432/${CMS_DB_NAME}
  REDIS_URL: redis://climweb_redis:6379/0
  EMAIL_HOST: ${SMTP_EMAIL_HOST}
  EMAIL_PORT: ${SMTP_EMAIL_PORT}
  EMAIL_USE_TLS: ${SMTP_EMAIL_USE_TLS}
  EMAIL_HOST_USER: ${SMTP_EMAIL_HOST_USER}
  EMAIL_HOST_PASSWORD: ${SMTP_EMAIL_HOST_PASSWORD}
  DJANGO_ADMINS: ${CMS_ADMINS}
  DEFAULT_FROM_EMAIL: ${DEFAULT_FROM_EMAIL}
  RECAPTCHA_PUBLIC_KEY: ${RECAPTCHA_PUBLIC_KEY}
  RECAPTCHA_PRIVATE_KEY: ${RECAPTCHA_PRIVATE_KEY}
  RECAPTCHA_DOMAIN: ${RECAPTCHA_DOMAIN:-www.google.com}
  RECAPTCHA_VERIFY_REQUEST_TIMEOUT: ${RECAPTCHA_VERIFY_REQUEST_TIMEOUT:-60}
  NEXTJS_SERVER_URL: http://climweb_mapviewer:3000
  CMS_UPGRADE_HOOK_URL: ${CMS_UPGRADE_HOOK_URL}
  WAGTAILADMIN_BASE_URL: ${CMS_BASE_URL}
  LANGUAGE_CODE: ${CMS_DEFAULT_LANGUAGE_CODE}
  MBGL_RENDERER_URL: http://climweb_mbgl_renderer:80/render
  CAP_CERT_PATH: ${CAP_CERT_PATH:-}
  CAP_PRIVATE_KEY_PATH: ${CAP_PRIVATE_KEY_PATH:-}
  CAP_SIGNATURE_METHOD: ${CAP_SIGNATURE_METHOD:-ECDSA_SHA256}
  CAP_MQTT_SECRET_KEY: ${CAP_MQTT_SECRET_KEY:-}
  CLIMWEB_ADDITIONAL_APPS: ${CLIMWEB_ADDITIONAL_APPS:-}
  CLIMWEB_PLUGIN_DIR: ${CLIMWEB_PLUGIN_DIR:-}
  CLIMWEB_PLUGIN_GIT_REPOS: ${CLIMWEB_PLUGIN_GIT_REPOS:-}
  CLIMWEB_PLUGIN_URLS: ${CLIMWEB_PLUGIN_URLS:-}

services:
  climweb_db:
    container_name: climweb_db
    image: postgis/postgis:15-master
    restart: unless-stopped
    environment:
      - POSTGRES_USER=${CMS_DB_USER}
      - POSTGRES_DB=${CMS_DB_NAME}
      - POSTGRES_PASSWORD=${CMS_DB_PASSWORD}
    ports:
      - "5432"
    volumes:
      - ${CMS_DB_VOLUME}:/var/lib/postgresql/data/

  climweb_redis:
    image: redis:alpine
    container_name: climweb_redis
    restart: unless-stopped

  climweb:
    image: climweb
    container_name: climweb
    platform: linux/x86_64
    build:
      context: ./climweb
      dockerfile: Dockerfile
      args:
        - CLIMWEB_VERSION=${CLIMWEB_VERSION}
        - UID=${UID}
        - GID=${GID}
    restart: unless-stopped
    expose:
      - 8000
    environment:
      <<: *climweb-variables
      WAIT_HOSTS: climweb_db:5432,climweb_redis:6379
    ports:
      - "8000"
    extra_hosts:
      - "host.docker.internal:host-gateway"
    volumes:
      - ${CMS_STATIC_VOLUME}:/climweb/web/src/climweb/static
      - ${CMS_MEDIA_VOLUME}:/climweb/web/src/climweb/media
      - ${BACKUP_VOLUME}:/climweb/web/src/climweb/backup
      - ${LETS_ENCRYPT_VOLUME:-./nginx/certbot/conf}:/etc/letsencrypt:ro

  climweb_celery_worker:
    image: climweb_celery_worker
    container_name: climweb_celery_worker
    platform: linux/x86_64
    build:
      context: ./climweb
      dockerfile: Dockerfile
      args:
        - CLIMWEB_VERSION=${CLIMWEB_VERSION}
        - UID=${UID}
        - GID=${GID}
    init: true
    command: celery-worker
    restart: unless-stopped
    environment:
      <<: *climweb-variables
      WAIT_HOSTS: climweb_db:5432,climweb_redis:6379,climweb:8000
    volumes:
      - ${CMS_STATIC_VOLUME}:/climweb/web/src/climweb/static
      - ${CMS_MEDIA_VOLUME}:/climweb/web/src/climweb/media
      - ${BACKUP_VOLUME}:/climweb/web/src/climweb/backup
      - ${LETS_ENCRYPT_VOLUME:-./nginx/certbot/conf}:/etc/letsencrypt:ro
      
  climweb_celery_beat:
    image: climweb_celery_beat
    container_name: climweb_celery_beat
    platform: linux/x86_64
    build:
      context: ./climweb
      dockerfile: Dockerfile
      args:
        - CLIMWEB_VERSION=${CLIMWEB_VERSION}
        - UID=${UID}
        - GID=${GID}
    init: true
    command: celery-beat
    restart: unless-stopped
    environment:
      <<: *climweb-variables
      WAIT_HOSTS: climweb_db:5432,climweb_redis:6379,climweb:8000
    volumes:
      - ${CMS_STATIC_VOLUME}:/climweb/web/src/climweb/static
      - ${CMS_MEDIA_VOLUME}:/climweb/web/src/climweb/media
      - ${BACKUP_VOLUME}:/climweb/web/src/climweb/backup
      - ${LETS_ENCRYPT_VOLUME:-./nginx/certbot/conf}:/etc/letsencrypt:ro

  climweb_mapviewer:
    image: climweb_mapviewer
    container_name: climweb_mapviewer
    restart: unless-stopped
    platform: linux/x86_64
    build:
      context: ./mapviewer
      args:
        - CMS_API=${MAPVIEWER_CMS_API}
        - BASE_PATH=${MAPVIEWER_BASE_PATH}
        - ASSET_PREFIX=${MAPVIEWER_ASSET_PREFIX}
        - ANALYTICS_PROPERTY_ID=${ANALYTICS_PROPERTY_ID}
        - BITLY_TOKEN=${BITLY_TOKEN}
        - GOOGLE_CUSTOM_SEARCH_CX=${GOOGLE_CUSTOM_SEARCH_CX}
        - GOOGLE_SEARCH_API_KEY=${GOOGLE_SEARCH_API_KEY}
        - NEXT_TELEMETRY_DISABLED=1
    volumes:
      - ${MAPVIEWER_NEXT_STATIC_VOLUME}:/app/nginx/.next/static
    ports:
      - "3000"

  climweb_mbgl_renderer:
    container_name: climweb_mbgl_renderer
    build:
      context: ./mbgl_renderer
      dockerfile: Dockerfile
    restart: unless-stopped
    ports:
      - "80"

  nginx:
    container_name: nginx
    image: nginx:1.27.1-alpine
    restart: unless-stopped
    command: "/bin/sh -c 'while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \"daemon off;\"'"
    volumes:
      - ${CMS_STATIC_VOLUME}:/wagtail_static
      - ${CMS_MEDIA_VOLUME}:/wagtail_media
      - ${MAPVIEWER_NEXT_STATIC_VOLUME}:/mapviewer/static
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf
      - ./nginx/ssl:/etc/nginx/ssl
      - ./nginx/certbot/conf:/etc/letsencrypt
      - ./nginx/certbot/www:/var/www/certbot
    ports:
      - "80:80"
      - "443:443"
      
  certbot:
    image: certbot/certbot
    container_name: certbot
    restart: unless-stopped
    volumes:
      - ./nginx/certbot/conf:/etc/letsencrypt
      - ./nginx/certbot/www:/var/www/certbot
    entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"