docker-compose.prod.yml

# Copyright 2023 The Vitess Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

version: "3.8"
networks:
  default:
    driver: bridge

services:
  traefik:
    image: "traefik:v2.10"
    container_name: "traefik"
    command:
      - "--accesslog=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.https.address=:443"
      - "--certificatesresolvers.tlsresolver.acme.tlschallenge=true"
      - "--certificatesresolvers.tlsresolver.acme.email=cncf-vitess-project@cncf.io"
      - "--certificatesresolvers.tlsresolver.acme.storage=/letsencrypt/acme.json"
    ports:
      - "443:443"
    volumes:
      - "/var/letsencrypt:/letsencrypt"
      - "/var/run/docker.sock:/var/run/docker.sock:ro"

  frontend:
    build:
      context: ./website
    image: "arewefastyet-frontend"
    restart: always
    container_name: "frontend"
    command: "./entrypoint.sh"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.frontend.rule=Host(`benchmark.vitess.io`)"
      - "traefik.http.routers.frontend.entrypoints=https"
      - "traefik.http.routers.frontend.tls.certresolver=tlsresolver"
      - "traefik.http.services.frontend.loadbalancer.server.port=3000"

  api:
    restart: always
    build:
      context: .
      dockerfile: Dockerfile
    image: "arewefastyet-api"
    container_name: "api"
    volumes:
      - "~/.ssh:/root/.ssh"
      - "./exec/:/exec"
      - "./config/prod/config.yaml:/config/config.yaml"
      - "./config/prod/secrets.yaml:/config/secrets.yaml"
      - "./config/benchmarks:/config/benchmarks"
      - "./ansible:/ansible"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.api.rule=Host(`benchmark.vitess.io`) && PathPrefix(`/api`)"
      - "traefik.http.routers.api.entrypoints=https"
      - "traefik.http.routers.api.tls.certresolver=tlsresolver"
      - "traefik.http.services.api.loadbalancer.server.port=8080"

  admin:
    restart: always
    build:
      context: .
      dockerfile: Dockerfile.admin
    image: "arewefastyet-admin"
    container_name: "admin"
    volumes:
      - "./config/prod/config.yaml:/config/config.yaml"
      - "./config/prod/secrets.yaml:/config/secrets.yaml"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.admin.rule=Host(`benchmark.vitess.io`) && PathPrefix(`/admin`)"
      - "traefik.http.routers.admin.entrypoints=https"
      - "traefik.http.routers.admin.tls.certresolver=tlsresolver"
      - "traefik.http.services.admin.loadbalancer.server.port=8081"

  cleanup_executions:
    image: alpine
    restart: on-failure
    container_name: "cleanup_executions"
    volumes:
      - "./exec/:/exec"
      - "./infra/cleanup/cleanup_exec.sh:/cleanup.sh"
    entrypoint: sh -c "echo '0 0 * * * /cleanup.sh' > /etc/crontabs/root && crond -f -d 8"