admin
b469389654
- connect-src: allow the GlitchTip domain itself so the SDK can report events - media-src: allow Mux's edge CDN (*.edgemv.mux.com) for HLS manifests - img-src: allow blob: for client-side upload previews - pass SENTRY_ORG/SENTRY_PROJECT/SENTRY_AUTH_TOKEN as Docker build args so withSentryConfig can upload readable source maps during `npm run build`
48 lines
1.4 KiB
YAML
48 lines
1.4 KiB
YAML
services:
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: pawfeed-redis
|
|
restart: unless-stopped
|
|
volumes:
|
|
- redis_data:/data
|
|
command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD}
|
|
|
|
pawfeed:
|
|
build:
|
|
context: ..
|
|
dockerfile: docker/Dockerfile
|
|
args:
|
|
# Public vars needed at build time (baked into client bundle).
|
|
# Docker Compose reads these from docker/.env automatically.
|
|
NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY: ${NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY}
|
|
NEXT_PUBLIC_SUPABASE_URL: ${NEXT_PUBLIC_SUPABASE_URL}
|
|
NEXT_PUBLIC_SENTRY_DSN: ${NEXT_PUBLIC_SENTRY_DSN}
|
|
# Sentry/GlitchTip source-map upload also runs during `npm run build`
|
|
# (withSentryConfig in next.config.ts), so it needs these as build
|
|
# args too — env_file below only reaches the running container, not
|
|
# the build stage. Leave unset to keep sourcemap upload disabled.
|
|
SENTRY_ORG: ${SENTRY_ORG}
|
|
SENTRY_PROJECT: ${SENTRY_PROJECT}
|
|
SENTRY_AUTH_TOKEN: ${SENTRY_AUTH_TOKEN}
|
|
image: pawfeed:latest
|
|
container_name: pawfeed
|
|
restart: unless-stopped
|
|
env_file:
|
|
- .env
|
|
environment:
|
|
NODE_ENV: production
|
|
REDIS_URL: redis://:${REDIS_PASSWORD}@redis:6379
|
|
depends_on:
|
|
- redis
|
|
networks:
|
|
- default
|
|
- nginx_default
|
|
|
|
volumes:
|
|
redis_data:
|
|
|
|
networks:
|
|
default:
|
|
nginx_default:
|
|
external: true
|