Files
sides/docker-compose.yml
root c57d4bac57 fix: critical security and Docker deployment fixes
- Dockerfile: add composer/npm build, proper entrypoint, fix EXPOSE port
- docker-compose: fix postgres volume path, add healthchecks, use named volume
- Add entrypoint.sh for auto migrations and dependency install at startup
- Update .gitignore to exclude Firebase credentials, DB files, logs
- Update .env.example with all required variables for Docker deployment

Application-level fixes (applied to src/ which is gitignored):
- RainfallController: parameterized SQL queries (was SQL injection)
- WaterLevelController: parameterized queries + fix broken WHERE clause
- DatabaseSeeder: env-based admin password instead of hardcoded 'password123'
- Migration 2025_12_11: removed duplicate admin user creation
- AlertController: FCM topic routing by stationtype+level (was hardcoded)
- sidesdecode.py: env vars for credentials, fix water level stationtype bug (1→2)
2026-05-21 00:36:29 +08:00

87 lines
1.8 KiB
YAML

networks:
tckdev_net:
name: tckdev_net
services:
app:
container_name: tckdev-app
build:
context: .
dockerfile: Dockerfile
volumes:
- ./src:/var/www/html
depends_on:
postgres:
condition: service_healthy
networks:
- tckdev_net
restart: unless-stopped
environment:
- RUN_MIGRATIONS=true
postgres:
container_name: tckdev-db
image: postgres:16
restart: always
volumes:
- pgdata:/var/lib/postgresql/data
environment:
- POSTGRES_DB=${POSTGRES_DB}
- POSTGRES_USER=${POSTGRES_USER}
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
ports:
- "5432:5432"
networks:
- tckdev_net
healthcheck:
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-tck} -d ${POSTGRES_DB:-sides_db}"]
interval: 5s
timeout: 5s
retries: 5
web:
container_name: tckdev-web
image: nginx:stable-alpine
restart: always
ports:
- "80:80"
volumes:
- ./src:/var/www/html
- ./docker/nginx/default.conf:/etc/nginx/conf.d/default.conf
depends_on:
- app
networks:
- tckdev_net
pgadmin:
image: dpage/pgadmin4
container_name: tckdev-pgAdmin
environment:
- PGADMIN_DEFAULT_EMAIL=${PGADMIN_EMAIL}
- PGADMIN_DEFAULT_PASSWORD=${PGADMIN_PASSWORD}
volumes:
- ./backup:/var/lib/pgadmin/storage/tck68000_gmail.com/backup:z
ports:
- "5050:80"
depends_on:
postgres:
condition: service_healthy
networks:
- tckdev_net
restart: unless-stopped
adminer:
container_name: tckdev-adminer
image: adminer
restart: always
ports:
- "6060:8080"
depends_on:
postgres:
condition: service_healthy
networks:
- tckdev_net
volumes:
pgdata: