docker-compose.prod.yml

version: "3.9"
name: ${PROJECT}

services:
  backend:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: ${PROJECT}_backend
    restart: always
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - network
    env_file:
      - .env.prod
    security_opt:
      - no-new-privileges:true

  postgres:
    image: postgres:17
    container_name: ${PROJECT}_postgres
    restart: always
    environment:
      PGDATA: /var/lib/postgresql/data/pgdata
    env_file:
      - .env.prod
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
      interval: 10s
      timeout: 5s
      retries: 5
    security_opt:
      - no-new-privileges:true
    user: postgres

  postgres_backup:
    container_name: ${PROJECT}_postgres_backup
    image: prodrigestivill/postgres-backup-local
    restart: always
    volumes:
      - ./backups:/backups
    environment:
      - SCHEDULE=@daily
      - BACKUP_KEEP_DAYS=7
      - BACKUP_KEEP_WEEKS=4
      - BACKUP_KEEP_MONTHS=6
    env_file:
      - .env.prod
    networks:
      - network

  redis:
    image: redis:7.4.1-alpine
    container_name: ${PROJECT}_redis
    restart: always
    command: >
      redis-server
      --requirepass "${REDIS_PASSWORD}"
      --acl-pubsub-default allchannels
      --aclfile /etc/redis/prod.acl
    volumes:
      - redis_data:/data
      - ./docker/redis/prod.acl:/etc/redis/prod.acl:ro
    networks:
      - network
    env_file:
      - .env.prod
    healthcheck:
      test:
        [
          "CMD",
          "redis-cli",
          "-u",
          "redis://${REDIS_USER}:${REDIS_PASSWORD}@localhost:6379",
          "PING",
        ]
      interval: 10s
      timeout: 5s
      retries: 5
    security_opt:
      - no-new-privileges:true

  redis_backup:
    image: offen/docker-volume-backup
    container_name: ${PROJECT}_redis_backup
    restart: always
    user: root
    volumes:
      - redis_data:/backup/redis:ro
      - ./backups/redis:/archive
    environment:
      - BACKUP_CRON_EXPRESSION=0 0 * * *
      - BACKUP_RETENTION_DAYS=7
      - BACKUP_PREFIX=${PROJECT}_redis
      - BACKUP_SUFFIX=%Y-%m-%d-%H-%M
      - NOTIFICATION_LEVEL=warning
    networks:
      - network
    depends_on:
      - redis

volumes:
  postgres_data:
    name: ${PROJECT}_postgres_data
    driver: local
  redis_data:
    name: ${PROJECT}_redis_data
    driver: local

networks:
  network:
    name: ${PROJECT}_network
    driver: bridge