docker-compose-prod.yml

services:
  mde-nginx:
    container_name: mde-nginx
    image: nginx
    restart: unless-stopped
    volumes:
      - ./mde-nginx/prod/default.conf:/etc/nginx/conf.d/default.conf
    ports:
      - 80:80
      - 443:443
    healthcheck:
      test: ['CMD', 'curl', '-k', '-f', 'https://localhost']
      interval: 5m
      timeout: 3s
      start_period: 30s
    depends_on:
      - mde-backend
      - mde-client
      - mde-keycloak
  mde-postgres:
    container_name: mde-postgres
    image: postgres:17
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    volumes:
      - ./mde-postgres/postgresql_data:/var/lib/postgresql/data:Z
      - ./mde-postgres/init_data:/docker-entrypoint-initdb.d
  mde-keycloak:
    container_name: mde-keycloak
    image: quay.io/keycloak/keycloak:26.0
    restart: unless-stopped
    environment:
      KEYCLOAK_USER: ${KEYCLOAK_ADMIN}
      KEYCLOAK_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
      KC_DB: postgres
      KC_DB_URL_HOST: mde-postgres
      KC_DB_URL_PORT: 5432
      KC_DB_URL_DATABASE: keycloak
      KC_DB_USERNAME: ${POSTGRES_USER}
      KC_DB_PASSWORD: ${POSTGRES_PASSWORD}
      KC_HOSTNAME: ${KEYCLOAK_HOST}
      KC_HOSTNAME_PATH: /auth
      KC_HTTP_RELATIVE_PATH: /auth
      KC_BOOTSTRAP_ADMIN_USERNAME: ${KEYCLOAK_ADMIN}
      KC_BOOTSTRAP_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
    command: ["start", "--proxy-headers", "xforwarded", "--http-enabled", "true"]
  mde-backend:
    image: ghcr.io/gdi-be/mde-backend
    container_name: mde-backend
    restart: unless-stopped
    volumes:
      - ./mde-backend/lucene/indices:/lucene/indices
  mde-client:
    image: ghcr.io/gdi-be/mde-client
    container_name: mde-client
    restart: unless-stopped