Files
ems/deploy/docker-compose.yml
Dusan Vojacek f48a7aad61
Some checks failed
CI and deploy / migration-check (push) Failing after 13s
CI and deploy / deploy (push) Has been skipped
zkraceni intervalu planneru na max 35h
2026-04-19 21:09:48 +02:00

125 lines
4.0 KiB
YAML

# Produkční stack pro single-server deploy.
# Na serveru: kopíruje se do /opt/ems-deploy/docker-compose.yml (viz deploy/deploy.sh).
# Cesty ./app/* jsou relativní k adresáři, kde leží tento soubor po zkopírování (/opt/ems-deploy).
#
# Jen přes WireGuard: v .env nastav EMS_FRONTEND_BIND + EMS_PUBLIC_BASE; pro psql/DBeaver z druhého stroje
# také EMS_DB_BIND (stejná wg0 IP jako u frontendu), jinak je Postgres jen na 127.0.0.1.
services:
db:
image: timescale/timescaledb:2.26.1-pg18
restart: unless-stopped
# Výchozí max_connections=100 snadno nestačí (PostgREST, backend, psql, IDE, MCP). Zvýšení přes .env.
command:
- postgres
- -c
- max_connections=${POSTGRES_MAX_CONNECTIONS:-100}
environment:
POSTGRES_DB: ems
POSTGRES_USER: ${DB_USER}
POSTGRES_PASSWORD: ${DB_PASSWORD}
volumes:
- db_data:/var/lib/postgresql/data
ports:
- "${EMS_DB_BIND:-127.0.0.1}:5432:5432"
healthcheck:
test: ["CMD-SHELL", "pg_isready -U ${DB_USER} -d ems"]
interval: 10s
timeout: 5s
retries: 5
flyway:
image: flyway/flyway:12
depends_on:
db:
condition: service_healthy
environment:
FLYWAY_URL: jdbc:postgresql://db:5432/ems
FLYWAY_USER: ${DB_USER}
FLYWAY_PASSWORD: ${DB_PASSWORD}
FLYWAY_SCHEMAS: ems
FLYWAY_LOCATIONS: filesystem:/flyway/sql/migration,filesystem:/flyway/sql/routines,filesystem:/flyway/sql/views
FLYWAY_BASELINE_ON_MIGRATE: "false"
command: migrate
volumes:
- ./app/db/migration:/flyway/sql/migration
- ./app/db/routines:/flyway/sql/routines
- ./app/db/views:/flyway/sql/views
postgrest:
image: postgrest/postgrest:v12.2.3
restart: unless-stopped
depends_on:
db:
condition: service_healthy
flyway:
condition: service_completed_successfully
environment:
PGRST_DB_URI: postgres://${DB_USER}:${DB_PASSWORD}@db:5432/ems
PGRST_DB_SCHEMA: ems
PGRST_DB_EXTRA_SEARCH_PATH: ems
PGRST_DB_ANON_ROLE: ${POSTGREST_ANON_ROLE:-ems_anon}
PGRST_JWT_SECRET: ${POSTGREST_JWT_SECRET}
PGRST_SERVER_PORT: 3000
# Musí odpovídat URL, ze které klient volá /rest/ (typicky EMS_PUBLIC_BASE + /rest).
PGRST_OPENAPI_SERVER_PROXY_URI: ${EMS_PUBLIC_BASE:-http://127.0.0.1:8080}/rest
# Bez ports: PostgREST jen uvnitř sítě (frontend nginx → postgrest:3000). Host :3000 často koliduje.
# Přímý přístup z hostu: odkomentuj např. "127.0.0.1:3001:3000"
backend:
build:
context: ./app/backend
restart: unless-stopped
depends_on:
db:
condition: service_healthy
flyway:
condition: service_completed_successfully
env_file:
- .env
command: ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
environment:
TZ: Europe/Prague
DB_HOST: db
DB_PORT: "5432"
POSTGRES_HOST: db
POSTGRES_PORT: "5432"
DB_NAME: ems
DB_USER: ${DB_USER}
DB_PASSWORD: ${DB_PASSWORD}
OTE_API_URL: ${OTE_API_URL:-https://www.ote-cr.cz/cs/kratkodobe-trhy/elektrina/denni-trh/@@chart-data}
EUR_CZK_RATE: ${EUR_CZK_RATE:-25.0}
OPEN_METEO_API_URL: ${OPEN_METEO_API_URL:-https://api.open-meteo.com/v1/forecast}
TELEMETRY_POLL_INTERVAL_SEC: ${TELEMETRY_POLL_INTERVAL_SEC:-60}
PLANNING_HP_MAX_COST_CZK_KWH: ${PLANNING_HP_MAX_COST_CZK_KWH:-3.0}
LOXONE_USER: ${LOXONE_USER:-}
LOXONE_PASSWORD: ${LOXONE_PASSWORD:-}
POSTGREST_JWT_SECRET: ${POSTGREST_JWT_SECRET}
POSTGREST_ANON_ROLE: ${POSTGREST_ANON_ROLE:-ems_anon}
ports:
- "127.0.0.1:8000:8000"
frontend:
build:
context: ./app/frontend
restart: unless-stopped
ports:
- "${EMS_FRONTEND_BIND:-127.0.0.1}:8080:80"
depends_on:
- backend
- postgrest
volumes:
db_data:
driver: local
networks:
default:
name: ems_net
driver: bridge
ipam:
config:
- subnet: 172.28.240.0/24
gateway: 172.28.240.1