mps-tennisapi/docker-compose.yml at main · Coderinsightmaven/mps-tennisapi · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
version: '3.8'

services:
  tennis-scoreboard-api:
    build: .
    container_name: tennis-scoreboard-api
    restart: unless-stopped
    environment:
      - NODE_ENV=production
      - PORT=3005
      - API_KEYS=${TENNIS_API_KEYS}
      - CORS_ORIGIN=${TENNIS_CORS_ORIGIN:-*}
      - CORS_CREDENTIALS=true
      - TZ=${TZ}
    volumes:
      - /mnt/storage/config/tennis-api:/app/data
    labels:
      # Traefik configuration
      - "traefik.enable=true"
      - "traefik.docker.network=arrstack_arr_network"

      # HTTPS Router
      - "traefik.http.routers.tennis-api.rule=Host(`${TENNIS_API_DOMAIN}`)"
      - "traefik.http.routers.tennis-api.entrypoints=websecure"
      - "traefik.http.routers.tennis-api.tls.certresolver=myresolver"
      - "traefik.http.routers.tennis-api.middlewares=tennis-api-security"

      # HTTP to HTTPS redirect
      - "traefik.http.routers.tennis-api-http.rule=Host(`${TENNIS_API_DOMAIN}`)"
      - "traefik.http.routers.tennis-api-http.entrypoints=web"
      - "traefik.http.routers.tennis-api-http.middlewares=redirect-to-https"
      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
      - "traefik.http.middlewares.redirect-to-https.redirectscheme.permanent=true"

      # Service configuration
      - "traefik.http.services.tennis-api.loadbalancer.server.port=3000"

      # Security headers
      - "traefik.http.middlewares.tennis-api-security.headers.customrequestheaders.X-Forwarded-Proto=https"
      - "traefik.http.middlewares.tennis-api-security.headers.frameDeny=true"
      - "traefik.http.middlewares.tennis-api-security.headers.contentTypeNosniff=true"
      - "traefik.http.middlewares.tennis-api-security.headers.browserXSSFilter=true"
      - "traefik.http.middlewares.tennis-api-security.headers.stsSeconds=31536000"
      - "traefik.http.middlewares.tennis-api-security.headers.stsIncludeSubdomains=true"
      - "traefik.http.middlewares.tennis-api-security.headers.stsPreload=true"

    healthcheck:
      test: ["CMD", "node", "healthcheck.js"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

    networks:
      - arrstack_arr_network

    deploy:
      resources:
        limits:
          memory: 512M
        reservations:
          memory: 256M

networks:
  arr_network:
    external: true