docker-compose.prod.yml

services:
  strapi-cloudflared:
    image: cloudflare/cloudflared:latest
    container_name: strapi-cloudflared
    restart: unless-stopped
    command: tunnel --no-autoupdate run
    environment:
      TUNNEL_TOKEN: ${CLOUDFLARE_TUNNEL_TOKEN}
      REAL_IP_HEADER: Cf-Connecting-Ip
    networks:
      - strapi-shared-network
    depends_on:
      - strapi-nginx

  strapi-nginx:
    image: nginx:1
    container_name: strapi-nginx
    restart: unless-stopped
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf
    networks:
      - strapi-shared-network
    depends_on:
      - strapi

  strapi:
    container_name: strapi
    build:
      context: .
      dockerfile: Dockerfile
    restart: unless-stopped
    ports:
      - 1337:1337
    environment:
      NODE_ENV: production
      DATABASE_CLIENT: postgres
      DATABASE_HOST: strapi-postgres
      DATABASE_PORT: 5432
      DATABASE_NAME: strapi
      DATABASE_USERNAME: strapi
      DATABASE_PASSWORD: ${DATABASE_PASSWORD}
      APP_KEYS: ${APP_KEYS}
      JWT_SECRET: ${JWT_SECRET}
      API_TOKEN_SALT: ${API_TOKEN_SALT}
      TRANSFER_TOKEN_SALT: ${TRANSFER_TOKEN_SALT}
      ADMIN_JWT_SECRET: ${ADMIN_JWT_SECRET}
      HETZNER_BUCKET_ACCESS_KEY_ID: ${HETZNER_BUCKET_ACCESS_KEY_ID}
      HETZNER_BUCKET_ACCESS_SECRET: ${HETZNER_BUCKET_ACCESS_SECRET}
      HETZNER_BUCKET_REGION: ${HETZNER_BUCKET_REGION}
      HETZNER_BUCKET_NAME: ${HETZNER_BUCKET_NAME}
      HETZNER_BUCKET_ENDPOINT: ${HETZNER_BUCKET_ENDPOINT}
      HETZNER_BUCKET_HOST: ${HETZNER_BUCKET_HOST}
    volumes:
      - ./config:/opt/app/config
      - ./src:/opt/app/src
      - ./package.json:/opt/package.json
      - ./package-lock.json:/opt/package-lock.json
      - ./public/uploads:/opt/app/public/uploads
    networks:
      - strapi-shared-network
    depends_on:
      - strapi-postgres

  strapi-postgres:
    container_name: strapi-postgres
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: strapi
      POSTGRES_DB: strapi
      POSTGRES_PASSWORD: ${DATABASE_PASSWORD}
    volumes:
      - "strapi_postgres_data:/var/lib/postgresql/data"
    networks:
      - strapi-shared-network

volumes:
  strapi_postgres_data:

networks:
  strapi-shared-network:
    external: true