linus
1614c19102
The 'postgres' password was literally written as the masked '***' placeholder (copy-paste artifact), causing Prisma P1000 auth failures against the db service. Set it to match POSTGRES_PASSWORD.
49 lines
1.5 KiB
YAML
49 lines
1.5 KiB
YAML
services:
|
|
db:
|
|
image: postgres:16-alpine
|
|
environment:
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_PASSWORD: postgres
|
|
POSTGRES_DB: kcapp
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
ports:
|
|
- "5432:5432"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U postgres -d kcapp"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
|
|
api:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
# All non-DB config comes from .env (needs Docker Compose v2, which
|
|
# strips surrounding quotes). DATABASE_URL and the FCM credential path
|
|
# are overridden below for the container.
|
|
env_file:
|
|
- .env
|
|
environment:
|
|
DATABASE_URL: postgresql://postgres:postgres@db:5432/kcapp?schema=public
|
|
PORT: "3000"
|
|
GOOGLE_APPLICATION_CREDENTIALS: /app/serviceAccount.json
|
|
APP_BASE_URL: http://localhost:3010
|
|
WEB_CLIENT_DIR: /app/web
|
|
ports:
|
|
- "3010:3000"
|
|
volumes:
|
|
# Firebase service account — kept out of the image, mounted read-only.
|
|
- ./serviceAccount.json:/app/serviceAccount.json:ro
|
|
# Pre-built Flutter web bundle, built separately in the KC-APP client
|
|
# repo (flutter build web --release) and mounted read-only here.
|
|
# Set WEB_CLIENT_BUILD_PATH (e.g. in .env) to that build/web directory;
|
|
# defaults to a sibling ../KC-APP checkout.
|
|
- ${WEB_CLIENT_BUILD_PATH:-../KC-APP/client/app/build/web}:/app/web:ro
|
|
|
|
volumes:
|
|
pgdata:
|