Admin
be662048b1
Thumbnail responses are immutable for a month, so nginx can answer repeats from disk and never wake the web player or Google for them. The cache lives in its own volume, collapses concurrent misses with a lock and serves stale copies while it refreshes; THUMBNAIL_CACHE_SIZE sizes it.
46 lines
1.4 KiB
YAML
46 lines
1.4 KiB
YAML
name: musify-prod
|
|
|
|
# Production overlay: adds the nginx edge and the host-mounted secrets.
|
|
# Nothing but nginx publishes a port; every other service is reachable only on
|
|
# the internal `musify-prod_default` network.
|
|
#
|
|
# docker compose --env-file deploy/.env.prod \
|
|
# -f deploy/compose.yml -f deploy/compose.prod.yml --profile apps up -d --build
|
|
#
|
|
# Use ./up.sh, which also generates the stream keys, provisions Zitadel and
|
|
# applies the database migrations.
|
|
|
|
services:
|
|
worker:
|
|
# yt-dlp reads the YouTube cookie jar from here (see YTDLP_ADDITIONAL_ARGUMENTS).
|
|
volumes:
|
|
- ./secrets:/secrets:ro
|
|
|
|
nginx:
|
|
image: nginx:1.27-alpine
|
|
container_name: musify-nginx
|
|
depends_on:
|
|
- api
|
|
- gateway
|
|
- zitadel
|
|
- web-player
|
|
environment:
|
|
# The entrypoint renders /etc/nginx/templates/*.template with envsubst.
|
|
# The filter keeps it from eating nginx's own $host / $remote_addr.
|
|
MUSIFY_ROOT_DOMAIN: ${ROOT_DOMAIN}
|
|
MUSIFY_MAX_UPLOAD_SIZE: ${MAX_UPLOAD_SIZE:-1024m}
|
|
MUSIFY_THUMBNAIL_CACHE_SIZE: ${THUMBNAIL_CACHE_SIZE:-2g}
|
|
NGINX_ENVSUBST_FILTER: ^MUSIFY_
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
volumes:
|
|
- ./nginx/templates:/etc/nginx/templates:ro
|
|
- ./nginx/snippets:/etc/nginx/snippets:ro
|
|
- ./nginx/certs:/etc/nginx/certs:ro
|
|
- nginx_cache:/var/cache/nginx
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
nginx_cache:
|