keyway/docker-compose.yml at main · keywaysh/keyway · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
services:
  db:
    image: postgres:16-alpine
    ports:
      - "5432:5432"
    environment:
      POSTGRES_USER: keyway
      POSTGRES_PASSWORD: keyway
      POSTGRES_DB: keyway
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U keyway"]
      interval: 5s
      timeout: 5s
      retries: 5

  crypto:
    build: ./packages/crypto
    environment:
      - ENCRYPTION_KEY=${ENCRYPTION_KEY}
      - GRPC_PORT=${GRPC_PORT:-50051}
      - CRYPTO_AUTH_TOKEN=${CRYPTO_AUTH_TOKEN:-}
      - CRYPTO_TLS_CERT_PATH=${CRYPTO_TLS_CERT_PATH:-none}
      - CRYPTO_TLS_KEY_PATH=${CRYPTO_TLS_KEY_PATH:-none}
    volumes:
      - crypto_certs:/data/crypto
    healthcheck:
      test: ["CMD-SHELL", "nc -z localhost ${GRPC_PORT:-50051} || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 5s

  backend:
    build:
      context: .
      dockerfile: packages/backend/Dockerfile
    environment:
      - PORT=8080
      - NODE_ENV=production
      - DATABASE_URL=${DATABASE_URL:-postgresql://keyway:keyway@db:5432/keyway}
      - CRYPTO_SERVICE_URL=${CRYPTO_SERVICE_URL:-crypto:50051}
      - CRYPTO_AUTH_TOKEN=${CRYPTO_AUTH_TOKEN:-}
      - CRYPTO_TLS_CA_PATH=${CRYPTO_TLS_CA_PATH:-}
      - ENCRYPTION_KEY=${ENCRYPTION_KEY}
      - JWT_SECRET=${JWT_SECRET}
      # GitHub App (unified auth + repo access)
      - GITHUB_APP_ID=${GITHUB_APP_ID}
      - GITHUB_APP_CLIENT_ID=${GITHUB_APP_CLIENT_ID}
      - GITHUB_APP_CLIENT_SECRET=${GITHUB_APP_CLIENT_SECRET}
      - GITHUB_APP_PRIVATE_KEY=${GITHUB_APP_PRIVATE_KEY}
      - GITHUB_APP_WEBHOOK_SECRET=${GITHUB_APP_WEBHOOK_SECRET}
      - GITHUB_APP_NAME=${GITHUB_APP_NAME:-keyway-app}
      # GitHub Enterprise (optional)
      - GITHUB_BASE_URL=${GITHUB_BASE_URL:-}
      # Frontend URLs (derived from DOMAIN)
      - FRONTEND_URL=${FRONTEND_URL:-https://${DOMAIN:-keyway.sh}}
      - DASHBOARD_URL=${DASHBOARD_URL:-https://app.${DOMAIN:-keyway.sh}}
      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS:-https://${DOMAIN:-keyway.sh},https://app.${DOMAIN:-keyway.sh},https://api.${DOMAIN:-keyway.sh}}
      # Optional: Billing
      - BILLING_ENABLED=${BILLING_ENABLED:-false}
      - STRIPE_SECRET_KEY=${STRIPE_SECRET_KEY:-}
      - STRIPE_WEBHOOK_SECRET=${STRIPE_WEBHOOK_SECRET:-}
      # Optional: Email
      - RESEND_API_KEY=${RESEND_API_KEY:-}
      # Optional: Analytics
      - POSTHOG_API_KEY=${POSTHOG_API_KEY:-}
      - POSTHOG_HOST=${POSTHOG_HOST:-}
    volumes:
      - crypto_certs:/data/crypto:ro
    depends_on:
      db:
        condition: service_healthy
      crypto:
        condition: service_healthy

  dashboard:
    build:
      context: .
      dockerfile: packages/dashboard/Dockerfile
      args:
        - NEXT_PUBLIC_KEYWAY_API_URL=https://api.${DOMAIN:-keyway.sh}
        - NEXT_PUBLIC_DASHBOARD_URL=https://app.${DOMAIN:-keyway.sh}
        - NEXT_PUBLIC_LANDING_URL=https://${DOMAIN:-keyway.sh}
        - NEXT_PUBLIC_DOCS_URL=https://docs.${DOMAIN:-keyway.sh}
        - NEXT_PUBLIC_POSTHOG_KEY=${NEXT_PUBLIC_POSTHOG_KEY:-}
        - NEXT_PUBLIC_POSTHOG_HOST=${NEXT_PUBLIC_POSTHOG_HOST:-}
        - NEXT_PUBLIC_SENTRY_DSN=${NEXT_PUBLIC_SENTRY_DSN:-}
        - NEXT_PUBLIC_DISABLE_IMAGE_OPTIMIZATION=true
    depends_on:
      - backend

  caddy:
    image: caddy:2-alpine
    ports:
      - "80:80"
      - "443:443"
    environment:
      - DOMAIN=${DOMAIN:-keyway.sh}
    volumes:
      - ${CADDYFILE:-./Caddyfile.production}:/etc/caddy/Caddyfile:ro
      - ${CADDY_CERTS:-./certs}:/etc/certs:ro
      - caddy_data:/data
      - caddy_config:/config
    depends_on:
      - dashboard
      - backend

volumes:
  postgres_data:
  caddy_data:
  caddy_config:
  crypto_certs: