mirror of
https://github.com/R0m1k3/PleinR.git
synced 2026-10-11 17:27:54 +02:00
Claude
51f5691f45
La redirection vers /login utilisait http://localhost:8413 (ancienne valeur par défaut d'AUTH_URL). On retire ce défaut localhost : AUTH_URL prend la valeur fournie (ex. https://pleinr.ffnancy.fr) et pilote la redirection. Ajout de AUTH_TRUST_HOST=true (confiance aux en-têtes X-Forwarded-*) et l'entrypoint supprime AUTH_URL si vide. Vérifié : la redirection pointe vers le domaine public. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01XwfhYHzC9hQWPDnQ2p53GL
80 lines
3.0 KiB
YAML
80 lines
3.0 KiB
YAML
# Plein R — single application container + external Postgres container.
|
|
#
|
|
# The app (Next.js) runs in ONE container. Postgres runs as a SEPARATE
|
|
# (external) container. For a managed/already-existing Postgres, delete the
|
|
# `postgres` service below and point DATABASE_URL at your instance.
|
|
|
|
services:
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
container_name: pleinr-postgres
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: ${POSTGRES_USER:-pleinr}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-pleinr}
|
|
POSTGRES_DB: ${POSTGRES_DB:-pleinr}
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
ports:
|
|
# Host port rarely used (container stays on 5432). Change the left side if needed.
|
|
- "54329:5432"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-pleinr} -d ${POSTGRES_DB:-pleinr}"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 12
|
|
networks:
|
|
- internal
|
|
|
|
app:
|
|
build: .
|
|
container_name: pleinr-app
|
|
restart: unless-stopped
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
# Use the UNIQUE container name (not the generic "postgres" alias) to avoid
|
|
# name collisions with other "postgres" containers on the shared proxy
|
|
# network. pleinr-postgres only exists on our internal network.
|
|
DATABASE_URL: postgres://${POSTGRES_USER:-pleinr}:${POSTGRES_PASSWORD:-pleinr}@pleinr-postgres:5432/${POSTGRES_DB:-pleinr}
|
|
# Optional: if left empty, the container generates and persists one
|
|
# automatically (see docker-entrypoint.sh + the app-data volume).
|
|
AUTH_SECRET: ${AUTH_SECRET:-}
|
|
# IMPORTANT behind a reverse proxy: set AUTH_URL to your public URL so the
|
|
# login redirect points to the right host, e.g.
|
|
# AUTH_URL=https://pleinr.ffnancy.fr
|
|
AUTH_URL: ${AUTH_URL:-}
|
|
# Lets Auth.js trust the X-Forwarded-* headers from the proxy.
|
|
AUTH_TRUST_HOST: "true"
|
|
SEED_ON_START: ${SEED_ON_START:-true}
|
|
SEED_ADMIN_EMAIL: ${SEED_ADMIN_EMAIL:-admin@plein-r.fr}
|
|
SEED_ADMIN_PASSWORD: ${SEED_ADMIN_PASSWORD:-changeme123}
|
|
SEED_ADMIN_NAME: ${SEED_ADMIN_NAME:-Administrateur Plein R}
|
|
ports:
|
|
# Host port rarely used (container stays on 3000). App reachable at http://HOST:8413
|
|
- "8413:3000"
|
|
volumes:
|
|
# Persists the auto-generated AUTH_SECRET across restarts.
|
|
- appdata:/app/data
|
|
networks:
|
|
# "internal" is shared with Postgres; "proxy" is the external network
|
|
# shared with the reverse proxy (e.g. Nginx Proxy Manager) so it can reach
|
|
# the app by name: forward to pleinr-app:3000
|
|
- internal
|
|
- proxy
|
|
|
|
volumes:
|
|
pgdata:
|
|
appdata:
|
|
|
|
networks:
|
|
# Private network for app <-> Postgres communication.
|
|
internal:
|
|
driver: bridge
|
|
proxy:
|
|
# The reverse proxy's existing network. Must already exist (created by the
|
|
# NPM/nginx stack). Override the name with PROXY_NETWORK if it differs.
|
|
external: true
|
|
name: ${PROXY_NETWORK:-nginx_default}
|