valknar
0cabcf7438
Coolify overrides container_name, so the DB service is only reachable
via its compose service name ("db"), not "worldcup_db". Also, passwords
containing URL-special characters (#, ], =) break postgres URL parsing
because the driver uses new URL() internally.
- docker-compose.yml: DATABASE_URL now uses "db" hostname with no
embedded password; DB_PASSWORD is passed as a separate env var
- lib/db/index.ts: when DB_PASSWORD env var is set it is passed as a
postgres driver option, bypassing URL parsing entirely
- .env.example: documents production vs local dev env var usage;
removes DATABASE_URL from the Coolify section (not needed there)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
51 lines
1.6 KiB
YAML
51 lines
1.6 KiB
YAML
services:
|
|
app:
|
|
build: .
|
|
restart: unless-stopped
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
environment:
|
|
DATABASE_URL: postgres://wc@db:5432/worldcup
|
|
DB_PASSWORD: ${DB_PASSWORD}
|
|
NODE_ENV: production
|
|
labels:
|
|
- "traefik.enable=${TRAEFIK_ENABLED:-false}"
|
|
- "traefik.http.middlewares.worldcup-redirect-web-secure.redirectscheme.scheme=https"
|
|
- "traefik.http.routers.worldcup-web.middlewares=worldcup-redirect-web-secure"
|
|
- "traefik.http.routers.worldcup-web.rule=Host(`${TRAEFIK_HOST}`)"
|
|
- "traefik.http.routers.worldcup-web.entrypoints=web"
|
|
- "traefik.http.routers.worldcup-web-secure.rule=Host(`${TRAEFIK_HOST}`)"
|
|
- "traefik.http.routers.worldcup-web-secure.tls.certresolver=resolver"
|
|
- "traefik.http.routers.worldcup-web-secure.entrypoints=web-secure"
|
|
- "traefik.http.routers.worldcup-web-secure.middlewares=security-headers@file"
|
|
- "traefik.http.services.worldcup-web-secure.loadbalancer.server.port=3000"
|
|
- "traefik.docker.network=${NETWORK_NAME}"
|
|
networks:
|
|
- compose_network
|
|
|
|
db:
|
|
image: postgres:16-alpine
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_DB: worldcup
|
|
POSTGRES_USER: wc
|
|
POSTGRES_PASSWORD: ${DB_PASSWORD}
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U wc -d worldcup"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
networks:
|
|
- compose_network
|
|
|
|
networks:
|
|
compose_network:
|
|
name: ${NETWORK_NAME}
|
|
external: true
|
|
|
|
volumes:
|
|
pgdata:
|