davideandClaude Sonnet 5
d35784d574
Caddy's site address comes from SITE_ADDRESS (defaults to "localhost"). Left at that default, Caddy detects it isn't a public hostname and issues a self-signed cert from its own internal CA — no domain needed for local/dev testing. Set to a real domain, it gets a genuine Let's Encrypt certificate automatically instead. DB, encrypted master key and logs are bind-mounted from ./data/ on the host (not opaque Docker-managed volumes), so they survive container restarts/rebuilds and stay reachable for manual inspection/backup directly from the repo root. ./data/ is gitignored. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
34 lines
705 B
YAML
34 lines
705 B
YAML
services:
|
|
app:
|
|
build: .
|
|
restart: unless-stopped
|
|
env_file: .env
|
|
environment:
|
|
- DATABASE_URL=sqlite+aiosqlite:////app/db_data/plm_lottery.db
|
|
- MASTER_KEY_PATH=/app/key_data/master.xprv.enc
|
|
volumes:
|
|
- ./data/db:/app/db_data
|
|
- ./data/keys:/app/key_data
|
|
- ./data/logs:/app/logs
|
|
expose:
|
|
- "8123"
|
|
|
|
caddy:
|
|
image: caddy:2-alpine
|
|
restart: unless-stopped
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
environment:
|
|
- SITE_ADDRESS=${SITE_ADDRESS:-localhost}
|
|
volumes:
|
|
- ./Caddyfile:/etc/caddy/Caddyfile:ro
|
|
- caddy_data:/data
|
|
- caddy_config:/config
|
|
depends_on:
|
|
- app
|
|
|
|
volumes:
|
|
caddy_data:
|
|
caddy_config:
|