the-biergarten-app/web/docker-compose.prod.yaml

services:
  sqlserver:
    env_file: ".env.prod"
    image: mcr.microsoft.com/mssql/server:2022-latest
    platform: linux/amd64
    container_name: prod-env-sqlserver
    environment:
      ACCEPT_EULA: "Y"
      MSSQL_SA_PASSWORD: "${DB_PASSWORD}"
      MSSQL_PID: "Express"
    volumes:
      - biergartendata-prod:/var/opt/mssql
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "/opt/mssql-tools18/bin/sqlcmd -S localhost -U sa -P '${DB_PASSWORD}' -C -Q 'SELECT 1' || exit 1",
        ]
      interval: 10s
      timeout: 5s
      retries: 12
      start_period: 30s
    networks:
      - prodnet

  database.migrations:
    env_file: ".env.prod"
    image: database.migrations
    container_name: prod-env-database-migrations
    depends_on:
      sqlserver:
        condition: service_healthy
    build:
      context: ./backend
      dockerfile: Database/Database.Migrations/Dockerfile
      args:
        BUILD_CONFIGURATION: Release
        APP_UID: 1000
    environment:
      DOTNET_RUNNING_IN_CONTAINER: "true"
      DB_SERVER: "${DB_SERVER}"
      DB_NAME: "${DB_NAME}"
      DB_USER: "${DB_USER}"
      DB_PASSWORD: "${DB_PASSWORD}"
    restart: "no"
    networks:
      - prodnet

  database.seed:
    env_file: ".env.prod"
    image: database.seed
    container_name: prod-env-database-seed
    depends_on:
      database.migrations:
        condition: service_completed_successfully
      seaweedfs:
        condition: service_started
    build:
      context: ./backend
      dockerfile: Database/Database.Seed/Dockerfile
      args:
        BUILD_CONFIGURATION: Release
        APP_UID: 1000
    environment:
      DOTNET_RUNNING_IN_CONTAINER: "true"
      DB_SERVER: "${DB_SERVER}"
      DB_NAME: "${DB_NAME}"
      DB_USER: "${DB_USER}"
      DB_PASSWORD: "${DB_PASSWORD}"
      SEAWEEDFS_SERVICE_URL: "${SEAWEEDFS_SERVICE_URL}"
      SEAWEEDFS_ACCESS_KEY_ID: "${SEAWEEDFS_ACCESS_KEY_ID}"
      SEAWEEDFS_SECRET_ACCESS_KEY: "${SEAWEEDFS_SECRET_ACCESS_KEY}"
      SEAWEEDFS_BUCKET: "${SEAWEEDFS_BUCKET}"
    restart: "no"
    networks:
      - prodnet

  api.core:
    env_file: ".env.prod"
    image: api.core
    container_name: prod-env-api-core
    depends_on:
      database.seed:
        condition: service_completed_successfully
      seaweedfs:
        condition: service_started
    build:
      context: ./backend
      dockerfile: API/API.Core/Dockerfile
      args:
        BUILD_CONFIGURATION: Release
        APP_UID: 1000
    # No published ports: only the frontend service is reachable from outside
    # the Docker network in production. api.core stays internal to prodnet.
    environment:
      ASPNETCORE_ENVIRONMENT: "Production"
      ASPNETCORE_URLS: "http://0.0.0.0:8080"
      DOTNET_RUNNING_IN_CONTAINER: "true"
      DB_SERVER: "${DB_SERVER}"
      DB_NAME: "${DB_NAME}"
      DB_USER: "${DB_USER}"
      DB_PASSWORD: "${DB_PASSWORD}"
      ACCESS_TOKEN_SECRET: "${ACCESS_TOKEN_SECRET}"
      REFRESH_TOKEN_SECRET: "${REFRESH_TOKEN_SECRET}"
      CONFIRMATION_TOKEN_SECRET: "${CONFIRMATION_TOKEN_SECRET}"
      WEBSITE_BASE_URL: "${WEBSITE_BASE_URL}"
      SEAWEEDFS_SERVICE_URL: "${SEAWEEDFS_SERVICE_URL}"
      SEAWEEDFS_ACCESS_KEY_ID: "${SEAWEEDFS_ACCESS_KEY_ID}"
      SEAWEEDFS_SECRET_ACCESS_KEY: "${SEAWEEDFS_SECRET_ACCESS_KEY}"
      SEAWEEDFS_BUCKET: "${SEAWEEDFS_BUCKET}"
    restart: unless-stopped
    networks:
      - prodnet
    volumes:
      - nuget-cache-prod:/root/.nuget/packages

  seaweedfs:
    env_file: ".env.prod"
    image: chrislusf/seaweedfs
    container_name: prod-env-seaweedfs
    # No published ports: the S3 API, filer, master and admin UIs are reachable
    # only from other containers on prodnet.
    environment:
      AWS_ACCESS_KEY_ID: "${SEAWEEDFS_ACCESS_KEY_ID}"
      AWS_SECRET_ACCESS_KEY: "${SEAWEEDFS_SECRET_ACCESS_KEY}"
      S3_BUCKET: "${SEAWEEDFS_BUCKET}"
    volumes:
      - seaweedfsdata-prod:/data
    restart: unless-stopped
    networks:
      - prodnet

  frontend:
    env_file: ".env.prod"
    image: frontend
    container_name: prod-env-frontend
    depends_on:
      api.core:
        condition: service_started
    build:
      context: ./frontend
      dockerfile: Dockerfile
    ports:
      - "127.0.0.1:5656:5656"
    environment:
      NODE_ENV: "production"
      PORT: "5656"
      API_BASE_URL: "http://api.core:8080"
      SESSION_SECRET: "${SESSION_SECRET}"
    restart: unless-stopped
    networks:
      - prodnet

volumes:
  # Declared external so `docker compose down -v` leaves the data alone: Compose
  # removes only the volumes it owns. Create them once with `docker volume
  # create` before the first `up`.
  biergartendata-prod:
    external: true
  seaweedfsdata-prod:
    external: true
  nuget-cache-prod:
    driver: local

networks:
  prodnet:
    driver: bridge