CIRCULOOS-identity/docker-compose.prod.yml at main · alastria/CIRCULOOS-identity · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
networks:
  alastria-net:
    driver: bridge

services:
  issuer:
    build:
      context: .
      dockerfile: backend/issuer/Dockerfile
    container_name: alastria-issuer
    networks:
      - alastria-net
    environment:
      - NODE_ENV=production
      - HTTP_HOST=0.0.0.0
      - HTTP_PORT=8001
      - ISSUER_PORT=8001
      # REQUIRED: Set via .env.prod or host environment
      - RPC_URL=${RPC_URL}
      - CHAIN_ID=${CHAIN_ID}
      - DIAMOND_ADDRESS=${DIAMOND_ADDRESS}
      - EIP712_VERIFYING_CONTRACT=${EIP712_VERIFYING_CONTRACT}
      - ISSUER_PRIVATE_KEY=${ISSUER_PRIVATE_KEY}
      - ISSUER_HMAC_SECRET=${ISSUER_HMAC_SECRET}
      - ISSUER_DID=${ISSUER_DID}
      - JWT_SECRET=${JWT_SECRET}
      - APP_PUBLIC_URL=${APP_PUBLIC_URL}
      # SMTP Configuration for real email sending
      - SMTP_HOST=${SMTP_HOST}
      - SMTP_PORT=${SMTP_PORT}
      - SMTP_SECURE=${SMTP_SECURE:-true}
      - SMTP_USER=${SMTP_USER}
      - SMTP_PASSWORD=${SMTP_PASSWORD}
      - EMAIL_FROM=${EMAIL_FROM}
      # Paths
      - FILESTORE_BASE_DIR=/app/backend/issuer/tmp-filestore
      - ISSUANCE_AUDIT_PATH=/app/backend/issuer/data/issuance_audit.json
      - DB_PATH=/app/backend/issuer/data/alastria.db
      # EIP-712
      - EIP712_DOMAIN_NAME=${EIP712_DOMAIN_NAME}
      - EIP712_DOMAIN_VERSION=${EIP712_DOMAIN_VERSION}
      # Admin & Issuers
      - ADMIN_ADDRESSES=${ADMIN_ADDRESSES}
      - AUTHORIZED_ISSUERS=${AUTHORIZED_ISSUERS}
    ports:
      - "${ISSUER_PORT:-8001}:8001"
    volumes:
      - ./data/issuer/tmp-filestore:/app/backend/issuer/tmp-filestore
      - ./data/issuer/data:/app/backend/issuer/data
    restart: always
    healthcheck:
      test: ["CMD", "node", "-e", "http=require('http');req=http.request({method:'GET',host:'127.0.0.1',port:8001,path:'/health'}, r=>process.exit(r.statusCode===200?0:1));req.on('error',()=>process.exit(1));req.end();"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  verifier:
    build:
      context: .
      dockerfile: backend/verifier/Dockerfile
    container_name: alastria-verifier
    networks:
      - alastria-net
    environment:
      - NODE_ENV=production
      - HTTP_HOST=0.0.0.0
      - HTTP_PORT=8002
      - VERIFIER_PORT=8002
      # REQUIRED: Set via .env.prod or host environment
      - RPC_URL=${RPC_URL}
      - CHAIN_ID=${CHAIN_ID}
      - DIAMOND_ADDRESS=${DIAMOND_ADDRESS}
      - EIP712_VERIFYING_CONTRACT=${EIP712_VERIFYING_CONTRACT}
      # Paths
      - FILESTORE_BASE_DIR=/app/backend/verifier/tmp-filestore
      # Registry
      - TRUSTED_REGISTRY_START_BLOCK=${TRUSTED_REGISTRY_START_BLOCK:-0}
      - CREDENTIAL_REGISTRY_START_BLOCK=${CREDENTIAL_REGISTRY_START_BLOCK:-0}
    ports:
      - "${VERIFIER_PORT:-8002}:8002"
    volumes:
      - ./data/verifier/tmp-filestore:/app/backend/verifier/tmp-filestore
      - ./data/verifier/data:/app/backend/verifier/data
    restart: always
    healthcheck:
      test: ["CMD", "node", "-e", "http=require('http');req=http.request({method:'GET',host:'127.0.0.1',port:8002,path:'/health'}, r=>process.exit(r.statusCode===200?0:1));req.on('error',()=>process.exit(1));req.end();"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  web:
    build:
      context: .
      dockerfile: frontend/Dockerfile
      args:
        # REQUIRED: These must be set at build time for Next.js
        NEXT_PUBLIC_APP_URL: ${NEXT_PUBLIC_APP_URL}
        NEXT_PUBLIC_ISSUER_URL: ${NEXT_PUBLIC_ISSUER_URL}
        NEXT_PUBLIC_VERIFIER_URL: ${NEXT_PUBLIC_VERIFIER_URL}
        NEXT_PUBLIC_EIP712_DOMAIN_NAME: ${NEXT_PUBLIC_EIP712_DOMAIN_NAME}
        NEXT_PUBLIC_EIP712_DOMAIN_VERSION: ${NEXT_PUBLIC_EIP712_DOMAIN_VERSION}
        NEXT_PUBLIC_EIP712_CHAIN_ID: ${NEXT_PUBLIC_EIP712_CHAIN_ID}
        NEXT_PUBLIC_CHAIN_ID: ${NEXT_PUBLIC_CHAIN_ID}
        NEXT_PUBLIC_DIAMOND_ADDRESS: ${NEXT_PUBLIC_DIAMOND_ADDRESS}
        NEXT_PUBLIC_EIP712_VERIFYING_CONTRACT: ${NEXT_PUBLIC_EIP712_VERIFYING_CONTRACT}
        NEXT_PUBLIC_ALASTRIA_RPC_URL: ${NEXT_PUBLIC_ALASTRIA_RPC_URL}
        NEXT_PUBLIC_SNAP_ID: ${NEXT_PUBLIC_SNAP_ID:-npm:@alastria/snap}
    container_name: alastria-web
    networks:
      - alastria-net
    depends_on:
      - issuer
      - verifier
    environment:
      - NODE_ENV=production
      - PORT=3000
    ports:
      - "${WEB_PORT:-3000}:3000"
    restart: always
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://localhost:3000"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s