docker-compose.yml

# itk-version: 3.2.4
networks:
    frontend:
        external: true
    app:
        driver: bridge
        internal: false

services:
    mariadb:
        image: ${MARIADB_IMAGE:-itkdev/mariadb:latest}
        networks:
            - app
        ports:
            - "3306"
        healthcheck:
            test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
            start_period: 10s
            interval: 10s
            timeout: 5s
            retries: 3
        environment:
            - MYSQL_ROOT_PASSWORD=password
            # Allow root to connect over the network so the test suite can create
            # the ephemeral test database (dev/CI only).
            - MYSQL_ROOT_HOST=%
            - MYSQL_USER=db
            - MYSQL_PASSWORD=db
            - MYSQL_DATABASE=db
            #- ENCRYPT=1 # Uncomment to enable database encryption.

    phpfpm:
        image: itkdev/php8.4-fpm:latest
        user: ${COMPOSE_USER:-deploy}
        networks:
            - app
        extra_hosts:
            - "host.docker.internal:host-gateway"
        environment:
            - PHP_XDEBUG_MODE=${PHP_XDEBUG_MODE:-off}
            - PHP_MAX_EXECUTION_TIME=30
            - PHP_MEMORY_LIMIT=256M
            # Depending on the setup, you may have to remove --read-envelope-from from msmtp (cf. https://marlam.de/msmtp/msmtp.html) or use SMTP to send mail
            - PHP_SENDMAIL_PATH=/usr/bin/msmtp --host=mail --port=1025 --read-recipients --read-envelope-from
            - DOCKER_HOST_DOMAIN=${COMPOSE_DOMAIN:?}
            - PHP_IDE_CONFIG=serverName=localhost
        depends_on:
            mariadb:
                condition: service_healthy
        volumes:
            - .:/app

    nginx:
        image: nginxinc/nginx-unprivileged:alpine
        networks:
            - app
            - frontend
        depends_on:
            - phpfpm
        ports:
            - "8080"
        volumes:
            - ./.docker/templates:/etc/nginx/templates:ro
            - .:/app
        environment:
            NGINX_FPM_SERVICE: ${COMPOSE_PROJECT_NAME:?}-phpfpm-1:9000
            NGINX_CRON_METRICS: ${COMPOSE_PROJECT_NAME:?}-phpfpm-1:9746
            NGINX_WEB_ROOT: /app/public
            NGINX_PORT: 8080
            NGINX_MAX_BODY_SIZE: 5M
        labels:
            - "traefik.enable=true"
            - "traefik.docker.network=frontend"
            - "traefik.http.routers.${COMPOSE_PROJECT_NAME:?}.rule=Host(`${COMPOSE_DOMAIN:?}`)"
            # HTTPS config - redirect from :80 to :443
            - "traefik.http.routers.${COMPOSE_PROJECT_NAME:?}.middlewares=redirect-to-https"
            - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
            # Cron-metrics protection.
            - "traefik.http.routers.${COMPOSE_PROJECT_NAME:?}-metrics.rule=Host(`${COMPOSE_DOMAIN:?}`) && PathPrefix(`/cron-metrics`) "
            - "traefik.http.routers.${COMPOSE_PROJECT_NAME:?}-metrics.middlewares=ITKMetricsAuth@file"

    mail:
        image: axllent/mailpit
        networks:
            - app
            - frontend
        ports:
            - "1025"
            - "8025"
        labels:
            - "traefik.enable=true"
            - "traefik.docker.network=frontend"
            - "traefik.http.routers.${COMPOSE_PROJECT_NAME:?}mail.rule=Host(`mail-${COMPOSE_DOMAIN:?}`)"
            - "traefik.http.services.${COMPOSE_PROJECT_NAME:?}mail.loadbalancer.server.port=8025"

    mercure:
        image: dunglas/mercure
        networks:
            - app
            - frontend
        environment:
            SERVER_NAME: ":80"
            MERCURE_PUBLISHER_JWT_KEY: "!ChangeThisMercureHubJWTSecretKey!"
            MERCURE_SUBSCRIBER_JWT_KEY: "!ChangeThisMercureHubJWTSecretKey!"
            MERCURE_EXTRA_DIRECTIVES: |-
                anonymous
                cors_origins http://${COMPOSE_DOMAIN:?} https://${COMPOSE_DOMAIN:?}
        labels:
            - "traefik.enable=true"
            - "traefik.docker.network=frontend"
            - "traefik.http.routers.${COMPOSE_PROJECT_NAME:?}mercure.rule=Host(`mercure-${COMPOSE_DOMAIN:?}`)"
            - "traefik.http.services.${COMPOSE_PROJECT_NAME:?}mercure.loadbalancer.server.port=80"

    # Code checks tools
    markdownlint:
        image: itkdev/markdownlint
        profiles:
            - dev
        volumes:
            - ./:/md

    prettier:
        # Prettier does not (yet, fcf.
        # https://github.com/prettier/prettier/issues/15206) have an official
        # docker image.
        # https://hub.docker.com/r/jauderho/prettier is good candidate (cf. https://hub.docker.com/search?q=prettier&sort=updated_at&order=desc)
        image: jauderho/prettier
        profiles:
            - dev
        volumes:
            - ./:/work