build a template website

docker-compose.yml

@@ -0,0 +1,68 @@
+services:
+  web:
+    build: .
+    restart: unless-stopped
+    ports: ["80:80", "443:443"]
+    environment:
+      SITE_ADDRESS: ${SITE_ADDRESS:-localhost}
+    volumes: [caddy_data:/data, caddy_config:/config]
+    depends_on: [tracker]
+
+  tracker:
+    build: { context: ., dockerfile: tracker/Dockerfile }
+    restart: unless-stopped
+    environment:
+      DATABASE_URL: postgresql://tracker_rw:${TRACKER_PASSWORD}@db:5432/${POSTGRES_DB}
+      TRACKER_SECRET: ${TRACKER_SECRET}
+      SITE_HOST: ${SITE_HOST}
+    volumes: ["./geoip:/data:ro"]
+    depends_on: { db: { condition: service_healthy } }
+
+  linkcheck:
+    build: { context: ., dockerfile: tracker/Dockerfile }
+    restart: unless-stopped
+    command: ["sh", "-c", "while true; do python check_links.py; sleep 86400; done"]
+    environment:
+      DATABASE_URL: postgresql://tracker_rw:${TRACKER_PASSWORD}@db:5432/${POSTGRES_DB}
+      KUMA_PUSH_URL: ${KUMA_LINKS_PUSH_URL:-}
+    depends_on: { db: { condition: service_healthy } }
+
+  db:
+    image: postgres:16-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB}
+      TRACKER_PASSWORD: ${TRACKER_PASSWORD}
+      STATS_RO_PASSWORD: ${STATS_RO_PASSWORD}
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+      - ./db/init:/docker-entrypoint-initdb.d:ro
+    # Published only on the WireGuard address, so the read-only user is reachable over WireGuard
+    ports: ["${PG_BIND:-127.0.0.1:5432}:5432"]
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
+      interval: 5s
+      retries: 10
+
+  backup:
+    build: { context: ., dockerfile: backup/Dockerfile }
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB}
+      BACKUP_TARGET: ${BACKUP_TARGET}
+      BACKUP_PORT: ${BACKUP_PORT:-22}
+      KUMA_BACKUP_PUSH_URL: ${KUMA_BACKUP_PUSH_URL:-}
+    volumes: ["./backup-ssh:/ssh:ro"]
+    depends_on: { db: { condition: service_healthy } }
+
+  kuma:
+    image: louislam/uptime-kuma:1
+    restart: unless-stopped
+    ports: ["${KUMA_BIND:-127.0.0.1:3001}:3001"]
+    volumes: [kuma_data:/app/data]
+
+volumes: { pgdata: {}, caddy_data: {}, caddy_config: {}, kuma_data: {} }