allianceauth/docker/docker-compose.yml

version: '3.8'

x-allianceauth-base: &allianceauth-base
  image: ${AA_DOCKER_TAG?err}
  # build:
  #   context: .
  #   dockerfile: custom.dockerfile
  #   args:
  #     AA_DOCKER_TAG: ${AA_DOCKER_TAG?err}
  restart: always
  env_file:
    - ./.env
  volumes:
    - ./conf/local.py:/home/allianceauth/myauth/myauth/settings/local.py
    - ./conf/celery.py:/home/allianceauth/myauth/myauth/celery.py
    - ./conf/urls.py:/home/allianceauth/myauth/myauth/urls.py
    - ./conf/memory_check.sh:/memory_check.sh
    - ./templates:/home/allianceauth/myauth/myauth/templates/
    - static-volume:/var/www/myauth/static
  depends_on:
    - redis
    - auth_mysql
  working_dir: /home/allianceauth/myauth/
  stop_grace_period: 10m

x-allianceauth-health-check: &allianceauth-health-checks
  healthcheck:
    test: [
      "CMD",
      "/memory_check.sh",
      "500000000"
    ]
    interval: 60s
    timeout: 10s
    retries: 3
    start_period: 5m
  labels:
    - "autoheal=true"

services:
  auth_mysql:
    image: mariadb:10.11
    command: [mysqld, --character-set-server=utf8mb4, --collation-server=utf8mb4_unicode_ci, --default-authentication-plugin=mysql_native_password]
    volumes:
      - ./mysql-data:/var/lib/mysql
      - ./setup.sql:/docker-entrypoint-initdb.d/setup.sql
    environment:
      - MYSQL_ROOT_PASSWORD=${AA_DB_ROOT_PASSWORD?err}
    healthcheck:
      test: ["CMD", "mysqladmin", "-uroot", "-proot", "-h", "localhost", "ping"]
      interval: 5s
      timeout: 10s
      retries: 3
    restart: unless-stopped

  nginx:
    image: nginx:1.25
    restart: always
    volumes:
      - ./conf/nginx.conf:/etc/nginx/conf.d/default.conf
      - static-volume:/var/www/myauth/static
    depends_on:
      - allianceauth_gunicorn

  redis:
    image: redis:7.0
    command: redis-server
    restart: always
    volumes:
      - "redis-data:/data"

  allianceauth_gunicorn:
    ports:
      - 8000:8000
    container_name: allianceauth_gunicorn
    <<: [*allianceauth-base]
    entrypoint: [
      "/opt/venv/bin/gunicorn",
      "myauth.wsgi",
      "--bind=0.0.0.0:8000",
      "--workers=3",
      "--timeout=120",
      "--max-requests=500",
      "--max-requests-jitter=50"
    ]

  allianceauth_beat:
    container_name: auth_worker_beat
    <<: [*allianceauth-base]
    entrypoint: [
      "/opt/venv/bin/celery",
      "-A",
      "myauth",
      "beat"
    ]

  allianceauth_worker:
    <<: [*allianceauth-base, *allianceauth-health-checks]
    entrypoint: [
      "/opt/venv/bin/celery",
      "-A",
      "myauth",
      "worker",
      "--pool=threads",
      "--concurrency=5",
      "-n",
      "worker_%n"
    ]
    deploy:
      replicas: 2

  grafana:
    image: grafana/grafana-oss:9.5.2
    restart: always
    depends_on:
      - auth_mysql
    volumes:
      - ./grafana-datasource.yml:/etc/grafana/provisioning/datasources/datasource.yaml
      - ./grafana-dashboards.yml:/etc/grafana/provisioning/dashboards/datasource.yaml
      - ./grafana/dashboards:/var/lib/grafana/dashboards:ro
      - grafana-data:/var/lib/grafana
    environment:
      GF_INSTALL_PLUGINS: grafana-piechart-panel,grafana-clock-panel,grafana-simple-json-datasource
      GF_AUTH_DATABASE_PASSWORD: ${GRAFANA_DB_PASSWORD}

  proxy:
    image: 'jc21/nginx-proxy-manager:latest'
    restart: always
    ports:
      - '${PROXY_HTTP_PORT:-80}:80'
      - '${PROXY_DASH_PORT:-81}:81'
      - '${PROXY_HTTPS_PORT:-443}:443'
    environment:
      DB_MYSQL_HOST: "proxy-db"
      DB_MYSQL_PORT: 3306
      DB_MYSQL_USER: "npm"
      DB_MYSQL_PASSWORD: "${PROXY_MYSQL_PASS?err}"
      DB_MYSQL_NAME: "npm"
    volumes:
      - proxy-data:/data
      - proxy-le:/etc/letsencrypt

  proxy-db:
    image: 'jc21/mariadb-aria:latest'
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: "${PROXY_MYSQL_PASS_ROOT?err}"
      MYSQL_DATABASE: 'npm'
      MYSQL_USER: 'npm'
      MYSQL_PASSWORD: "${PROXY_MYSQL_PASS?err}"
    ports:
      - 3306
    volumes:
      - proxy-db:/var/lib/mysql

volumes:
    redis-data:
    static-volume:
    grafana-data:
    proxy-data:
    proxy-le:
    proxy-db: