docker-compose.yml

services:

  # we use postgis instead of postgres because we need map functionality for directus
  database:
    image: postgis/postgis:16-master
    ports:
      - 5432:5432
    volumes:
      - ./directus/postgres:/var/lib/postgresql/data
    env_file: ".env"
    networks:
      - custom-app-network

  cms:
    image: directus/directus:11.1.1
    ports:
      - 8055:8055
    volumes:
      - ./directus/uploads:/directus/uploads
      - ./directus/extensions:/directus/extensions
      - ./directus/database:/directus/database # was needed for sqlite in the past
    depends_on:
      - database
    env_file: ".env"
    networks:
      - custom-app-network

  web:
    image: ghcr.io/h3nkl3r/lace:main
    networks:
      - custom-app-network
    ports:
      - "3000:3000"
    env_file: ".env"
    restart: on-failure:3

  web-staging:
    image: ghcr.io/h3nkl3r/lace:staging
    networks:
      - custom-app-network
    ports:
      - "3001:3000"
    env_file: ".env.staging"
    restart: on-failure:3
    labels:
      - "com.centurylinklabs.watchtower.enable=true"

  watchtower:
    image: containrrr/watchtower
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    command: --interval 30 --cleanup
    labels:
      - "com.centurylinklabs.watchtower.enable=false"

  nginx:
    image: nginx:latest
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf
      - /var/lib/rbg-cert:/var/lib/rbg-cert:ro # Certificate for tum domain
      - /usr/local/cert.d/nginx:/usr/local/cert.d/nginx
      - ./.htpasswd:/etc/nginx/.htpasswd:ro # Basic Auth for staging
      - /etc/letsencrypt:/etc/letsencrypt:ro # Certificate of own domains
    ports:
      - "80:80"
      - "443:443"
    depends_on:
      - web
    networks:
      - custom-app-network

networks:
  custom-app-network: