docker-compose.prod.yml

# Production Docker Swarm stack
# Usage: TAG=v1 docker stack deploy -c docker-compose.prod.yml myapp
services:
  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_DB: app
      POSTGRES_USER: app
      POSTGRES_PASSWORD: apppassword
    volumes:
      - pgdata:/var/lib/postgresql/data
    deploy:
      placement:
        constraints: [node.role == manager]

  server:
    build:
      context: .
      dockerfile: docker/Dockerfile.server
    image: ${REGISTRY:-registry.local}/myapp-server:${TAG:-latest}
    secrets:
      - session_secret
    entrypoint: ["/app/entrypoint.sh"]
    command: ["node", "dist/index.js"]
    environment:
      DATABASE_URL: postgres://app:apppassword@db:5432/app
      NODE_ENV: production
      PORT: "3000"
    deploy:
      labels:
        caddy: ${APP_DOMAIN:-myapp.jtlapp.net}
        caddy.reverse_proxy: "{{upstreams 3000}}"
      replicas: 2
    depends_on:
      - db

secrets:
  session_secret:
    external: true

volumes:
  pgdata: