docker-compose.yaml

version: "3.6"

services:
  tmsftt-db:
    image: mysql:8.0.15
    command: --default-authentication-plugin=mysql_native_password --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
    environment:
      - MYSQL_USER=root
      - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/mysql-root-password
      - MYSQL_DATABASE=TMSFTT
      - TZ=Asia/Shanghai
    volumes:
      - db-data:/var/lib/mysql
    ports:
      - target: 3306
        published: 8078
        protocol: tcp
        mode: host
    secrets:
      - mysql-root-password
  tmsftt-apis:
    image: sielab303/tmsftt-rest-apis:latest
    command: ["./wait-for-it.sh", "tmsftt-db:3306", "-s", "-t", "120", "--", "uwsgi", "--ini", "/uwsgi.ini"]
    environment:
      - SECRET_KEY_FILE=/run/secrets/django-secret-key
      - DATABASE_PASSWORD_FILE=/run/secrets/mysql-root-password
      - SOAP_AUTH_SECRET_KEY_FILE=/run/secrets/soap-auth-secret-key-v20190617
      - DJANGO_SETTINGS_MODULE=TMSFTT.settings_prod
      - TZ=Asia/Shanghai
    secrets:
      - django-secret-key
      - mysql-root-password
      - soap-auth-secret-key-v20190617
    depends_on:
      - tmsftt-db
    volumes:
      - media-data:/protected-files
    deploy:
      mode: global
      restart_policy:
        condition: on-failure
        delay: 3s
  tmsftt-web-server:
    image: sielab303/tmsftt-web-server:latest
    depends_on:
      - tmsftt-apis
    ports:
      - target: 80
        published: 80
        protocol: tcp
        mode: host
    environment:
      - TZ=Asia/Shanghai
    volumes:
      - media-data:/protected-files:ro
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
        delay: 3s
  redis:
    image: redis:5.0.5-alpine
  celery-worker:
    image: sielab303/tmsftt-rest-apis:latest
    command: ["./wait-for-it.sh", "tmsftt-db:3306", "-s", "-t", "120", "--", "celery", "-A", "TMSFTT", "worker", "-l", "info"]
    depends_on:
      - redis
      - tmsftt-db
    environment:
      - SECRET_KEY_FILE=/run/secrets/django-secret-key
      - SOAP_AUTH_SECRET_KEY_FILE=/run/secrets/soap-auth-secret-key-v20190617
      - DATABASE_PASSWORD_FILE=/run/secrets/mysql-root-password
      - DJANGO_SETTINGS_MODULE=TMSFTT.settings_prod
    secrets:
      - django-secret-key
      - mysql-root-password
      - soap-auth-secret-key-v20190617
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
        delay: 3s
  celery-beat:
    image: sielab303/tmsftt-rest-apis:latest
    command: ["./wait-for-it.sh", "tmsftt-db:3306", "-s", "-t", "60", "--", "celery", "-A", "TMSFTT", "beat", "-l", "info"]
    depends_on:
      - redis
      - tmsftt-db
    environment:
      - SECRET_KEY_FILE=/run/secrets/django-secret-key
      - SOAP_AUTH_SECRET_KEY_FILE=/run/secrets/soap-auth-secret-key-v20190617
      - DATABASE_PASSWORD_FILE=/run/secrets/mysql-root-password
      - DJANGO_SETTINGS_MODULE=TMSFTT.settings_prod
    secrets:
      - django-secret-key
      - mysql-root-password
      - soap-auth-secret-key-v20190617
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
        delay: 3s
  tmsftt-backup-full-daily:
    image: sielab303/tmsftt-full-backup:latest
    depends_on:
      - tmsftt-db
    volumes:
      - daily-full-backups:/backup
      - media-data:/media:ro
    environment:
      - MYSQL_HOST=tmsftt-db
      - MYSQL_USER=root
      - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/mysql-root-password
      - MAX_BACKUPS=7
      - CRON_TIME=30 0 * * *
      - TIMEOUT=60s
      - BACKUP_MEDIA=0
      - TZ=Asia/Shanghai
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
        delay: 3s
    secrets:
      - mysql-root-password
  tmsftt-backup-full-weekly:
    image: sielab303/tmsftt-full-backup:latest
    depends_on:
      - tmsftt-db
    volumes:
      - weekly-full-backups:/backup
      - media-data:/media:ro
    environment:
      - MYSQL_HOST=tmsftt-db
      - MYSQL_USER=root
      - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/mysql-root-password
      - MAX_BACKUPS=4
      - CRON_TIME=30 0 * * 1
      - TIMEOUT=60s
      - TZ=Asia/Shanghai
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
        delay: 3s
    secrets:
      - mysql-root-password
  tmsftt-backup-full-monthly:
    image: sielab303/tmsftt-full-backup:latest
    depends_on:
      - tmsftt-db
    volumes:
      - monthly-full-backups:/backup
      - media-data:/media:ro
    environment:
      - MYSQL_HOST=tmsftt-db
      - MYSQL_USER=root
      - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/mysql-root-password
      - MAX_BACKUPS=24
      - CRON_TIME=30 0 1 * *
      - TIMEOUT=60s
      - TZ=Asia/Shanghai
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
        delay: 3s
    secrets:
      - mysql-root-password
  tmsftt-backup-incremental:
    image: sielab303/tmsftt-incremental-backup:latest
    volumes:
      - incremental-backups:/backup
      - media-data:/media:ro
    environment:
      - CRON_TIME=30 0 * * *
      - TZ=Asia/Shanghai
      - BACKUP_FROM=/media
      - BACKUP_TO=/backup

secrets:
  django-secret-key:
    file: ./secrets/django-secret-key
  mysql-root-password:
    file: ./secrets/mysql-root-password
  soap-auth-secret-key-v20190617:
    file: ./secrets/soap-auth-secret-key

volumes:
  db-data:
  media-data:
  daily-full-backups:
  weekly-full-backups:
  monthly-full-backups:
  incremental-backups:

networks:
  default:
    ipam:
      config:
        - subnet: 172.25.1.0/24