mi
103 lines
3.0 KiB
YAML
103 lines
3.0 KiB
YAML
x-no-sms-secrets: &no-sms-secrets
|
|
SMS_DATABASE_URL: ""
|
|
SMS_SERVICE_TOKEN: ""
|
|
KEYCLOAK_SMS_SERVICE_TOKEN: ""
|
|
IDGTL_SMS_API_KEY: ""
|
|
IDGTL_SMS_CALLBACK_USERNAME: ""
|
|
IDGTL_SMS_CALLBACK_PASSWORD: ""
|
|
|
|
services:
|
|
migrate-api:
|
|
image: ${API_BACKEND_IMAGE:-han-chat-api-backend:local}
|
|
profiles: ["ops"]
|
|
env_file:
|
|
- path: ../.env
|
|
required: false
|
|
environment: *no-sms-secrets
|
|
entrypoint: []
|
|
command: ["alembic", "upgrade", "head"]
|
|
volumes:
|
|
- ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
|
|
networks: [backend, egress]
|
|
restart: "no"
|
|
security_opt: ["no-new-privileges:true"]
|
|
|
|
migrate-bitrix-local:
|
|
image: ${BITRIX_LOCAL_APP_IMAGE:-han-chat-bitrix-local-app:local}
|
|
profiles: ["ops"]
|
|
env_file:
|
|
- path: ../.env
|
|
required: false
|
|
environment: *no-sms-secrets
|
|
entrypoint: []
|
|
command: ["alembic", "upgrade", "head"]
|
|
volumes:
|
|
- ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
|
|
networks: [backend, egress]
|
|
restart: "no"
|
|
security_opt: ["no-new-privileges:true"]
|
|
|
|
migrate-bitrix-sync:
|
|
image: ${BITRIX_SYNC_IMAGE:-han-chat-bitrix-sync:local}
|
|
profiles: ["ops"]
|
|
env_file:
|
|
- path: ../.env
|
|
required: false
|
|
environment: *no-sms-secrets
|
|
entrypoint: []
|
|
command: ["alembic", "upgrade", "head"]
|
|
volumes:
|
|
- ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
|
|
networks: [backend, egress]
|
|
restart: "no"
|
|
security_opt: ["no-new-privileges:true"]
|
|
|
|
migrate-sms:
|
|
image: ${SMS_SERVICE_IMAGE:-han-chat-sms-service:local}
|
|
profiles: ["ops"]
|
|
environment:
|
|
SMS_DATABASE_URL: ${SMS_DATABASE_URL}
|
|
SMS_SERVICE_TOKEN: ${SMS_SERVICE_TOKEN}
|
|
IDGTL_SMS_BASE_URL: ${IDGTL_SMS_BASE_URL:-https://direct.i-dgtl.ru}
|
|
IDGTL_SMS_CALLBACK_PUBLIC_URL: ${IDGTL_SMS_CALLBACK_PUBLIC_URL}
|
|
IDGTL_SMS_CALLBACK_USERNAME: ${IDGTL_SMS_CALLBACK_USERNAME}
|
|
IDGTL_SMS_CALLBACK_PASSWORD: ${IDGTL_SMS_CALLBACK_PASSWORD}
|
|
entrypoint: []
|
|
command: ["alembic", "upgrade", "head"]
|
|
volumes:
|
|
- ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
|
|
networks: [backend, egress]
|
|
restart: "no"
|
|
security_opt: ["no-new-privileges:true"]
|
|
|
|
seed-settings:
|
|
image: ${API_BACKEND_IMAGE:-han-chat-api-backend:local}
|
|
profiles: ["ops"]
|
|
env_file:
|
|
- path: ../.env
|
|
required: false
|
|
environment: *no-sms-secrets
|
|
entrypoint: []
|
|
command:
|
|
- /bin/sh
|
|
- -ec
|
|
- >-
|
|
python -m app.cli.seed_settings
|
|
--file /deployment/app-settings.production-like.yaml
|
|
&& python -m app.cli.validate_settings
|
|
volumes:
|
|
- ${PG_CA_HOST_PATH}:/run/secrets/pg-ca.pem:ro
|
|
- ./app-settings.production-like.yaml:/deployment/app-settings.production-like.yaml:ro
|
|
networks: [backend, egress]
|
|
restart: "no"
|
|
security_opt: ["no-new-privileges:true"]
|
|
|
|
toolbox:
|
|
image: curlimages/curl:8.11.1
|
|
profiles: ["ops"]
|
|
entrypoint: ["sleep", "infinity"]
|
|
networks: [backend, observability, egress]
|
|
restart: "no"
|
|
cap_drop: ["ALL"]
|
|
security_opt: ["no-new-privileges:true"]
|