compose.yaml

# compose.yaml
services:
    php:
        image: ${IMAGES_PREFIX:-}app-php
        restart: unless-stopped
        environment:
            SERVER_NAME: ${SERVER_NAME:-localhost}, php:80
            #      MERCURE_PUBLISHER_JWT_KEY: ${CADDY_MERCURE_JWT_SECRET:-!ChangeThisMercureHubJWTSecretKey!}
            #      MERCURE_SUBSCRIBER_JWT_KEY: ${CADDY_MERCURE_JWT_SECRET:-!ChangeThisMercureHubJWTSecretKey!}
            
            TRUSTED_PROXIES: ${TRUSTED_PROXIES:-127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16}
            TRUSTED_HOSTS: ${TRUSTED_HOSTS:-^${SERVER_NAME:-example\.com|localhost}|php$$}
            # Run "composer require symfony/orm-pack" to install and configure Doctrine ORM
            DATABASE_URL: postgresql://${POSTGRES_USER:-app}:${POSTGRES_PASSWORD:-!ChangeMe!}@database:5432/${POSTGRES_DB:-app}?serverVersion=${POSTGRES_VERSION:-15}&charset=${POSTGRES_CHARSET:-utf8}
            # Run "composer require symfony/mercure-bundle" to install and configure the Mercure integration
            #      MERCURE_URL: ${CADDY_MERCURE_URL:-http://php/.well-known/mercure}
            #      MERCURE_PUBLIC_URL: ${CADDY_MERCURE_PUBLIC_URL:-https://${SERVER_NAME:-localhost}:${HTTPS_PORT:-443}/.well-known/mercure}
            #      MERCURE_JWT_SECRET: ${CADDY_MERCURE_JWT_SECRET:-!ChangeThisMercureHubJWTSecretKey!}
            # The two next lines can be removed after initial installation
            SYMFONY_VERSION: ${SYMFONY_VERSION:-}
            STABILITY: ${STABILITY:-stable}
        env_file:
            - .env.local
        volumes:
            - caddy_data:/data
            - caddy_config:/config
            - ./var/media:/app/var/media:rw
        ports: # HTTP
            -   target: 80
                published: ${HTTP_PORT:-80}
                protocol: tcp
            # HTTPS
            -   target: 443
                published: ${HTTPS_PORT:-443}
                protocol: tcp
            # HTTP/3
            -   target: 443
                published: ${HTTP3_PORT:-443}
                protocol: udp
        depends_on:
            - elasticsearch
    
    php-worker:
        image: ${IMAGES_PREFIX:-}app-php-worker
        restart: unless-stopped
        environment:
            RUN_MIGRATIONS: false
            DATABASE_URL: postgresql://${POSTGRES_USER:-app}:${POSTGRES_PASSWORD:-!ChangeMe!}@database:5432/${POSTGRES_DB:-app}?serverVersion=${POSTGRES_VERSION:-15}&charset=${POSTGRES_CHARSET:-utf8}
        env_file:
            - .env.local
        healthcheck:
            test: [ "CMD", "php", "-v" ]
            interval: 10s
            timeout: 5s
            retries: 3
            start_period: 5s
        depends_on:
            - php
    # Mercure is installed as a Caddy module, prevent the Flex recipe from installing another service
    ###> symfony/mercure-bundle ###
    ###< symfony/mercure-bundle ###
    
    ###> doctrine/doctrine-bundle ###
    database:
        image: postgres:${POSTGRES_VERSION:-16}-alpine
        environment:
            POSTGRES_DB: ${POSTGRES_DB:-app}
            # You should definitely change the password in production
            POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-!ChangeMe!}
            POSTGRES_USER: ${POSTGRES_USER:-app}
        healthcheck:
            test: [ "CMD", "pg_isready", "-d", "${POSTGRES_DB:-app}", "-U", "${POSTGRES_USER:-app}" ]
            timeout: 5s
            retries: 5
            start_period: 60s
        volumes:
            - database_data:/var/lib/postgresql/data:rw
            # You may use a bind-mounted host directory instead, so that it is harder to accidentally remove the volume and lose all your data!
            # - ./docker/db/data:/var/lib/postgresql/data:rw
        ###< doctrine/doctrine-bundle ###
    setup:
        image: docker.elastic.co/elasticsearch/elasticsearch:8.15.1
        environment:
            - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
            - KIBANA_PASSWORD=${KIBANA_PASSWORD}
        container_name: setup
        env_file:
            - .env.local
        command:
            - bash
            - -c
            - |
                echo "Waiting for Elasticsearch availability";
                until curl -s http://elasticsearch:9200 | grep -q "missing authentication credentials"; do sleep 30; done;
                echo "Setting kibana_system password";
                until curl -s -X POST -u "elastic:${ELASTIC_PASSWORD}" -H "Content-Type: application/json" http://elasticsearch:9200/_security/user/kibana_system/_password -d "{\"password\":\"${KIBANA_PASSWORD}\"}" | grep -q "^{}"; do sleep 10; done;
                echo "All done!";


    elasticsearch:
        image: docker.elastic.co/elasticsearch/elasticsearch:8.15.1
        container_name: elasticsearch
        environment:
            - discovery.type=single-node
            - cluster.name=elasticsearch
            - bootstrap.memory_lock=true
            - ES_JAVA_OPTS=-Xms1g -Xmx1g
            - ELASTIC_PASSWORD=${ELASTIC_PASSWORD:-changeme}
            - xpack.security.enabled=true
        env_file:
            - .env.local
        ulimits:
            memlock:
                soft: -1
                hard: -1
        volumes:
            - elasticsearch_data:/usr/share/elasticsearch/data
#        ports:
#            - 9200:9200
        healthcheck:
            test: [ "CMD-SHELL", "curl -s http://localhost:9200 >/dev/null || exit 1" ]
            interval: 30s
            timeout: 10s
            retries: 3
        restart: unless-stopped
    
    kibana:
        image: docker.elastic.co/kibana/kibana:8.15.1
        container_name: kibana
        volumes:
            - ./elk/kibana/kibana.yml:/usr/share/kibana/config/kibana.yml:ro
#        ports:
#            - 5601:5601
        environment:
            - ELASTICSEARCH_HOSTS=http://elasticsearch:9200
            - ELASTICSEARCH_USERNAME=kibana_system
            - ELASTICSEARCH_PASSWORD=${KIBANA_PASSWORD:-changeme}
            - SERVER_BASEPATH=/kibana
            - SERVER_REWRITEBASEPATH=true
            - TELEMETRY_ENABLED=false
        env_file:
            - .env.local
        depends_on:
            - elasticsearch
        restart: unless-stopped

volumes:
    caddy_data:
    caddy_config:
    ###> symfony/mercure-bundle ###
    ###< symfony/mercure-bundle ###
    
    ###> doctrine/doctrine-bundle ###
    database_data:
    ###< doctrine/doctrine-bundle ###
    elasticsearch_data: