deepsave/docker-compose.yml at master · cuchi/deepsave · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
services:
  postgres:
    image: postgres:16-alpine
    container_name: deepsave-postgres
    environment:
      POSTGRES_USER: deepsave
      POSTGRES_PASSWORD: deepsave
      POSTGRES_DB: deepsave
    ports:
      - "5432:5432"
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U deepsave -d deepsave"]
      interval: 5s
      timeout: 5s
      retries: 10

  app:
    build: .
    container_name: deepsave-app
    # Dev file-watch: run `docker compose watch` (or `docker compose up --watch`).
    # Any change under the watched paths rebuilds the image (BuildKit reuses the
    # cached dependency layers) and recreates the container with the new code.
    develop:
      watch:
        - action: rebuild
          path: .
          ignore:
            # Non-code files that shouldn't trigger a rebuild.
            # (backend/target, frontend/node_modules, frontend/dist, storage/,
            #  examples/, .env, .git ... are already excluded via .dockerignore.)
            - README.md
            - AGENTS.md
            - PLAN.md
            - PLAN-DONE.md
            - docker-compose.yml
            - scripts/
            - .github/
            - .env.example
    depends_on:
      postgres:
        condition: service_healthy
    environment:
      DATABASE_URL: postgres://deepsave:deepsave@postgres:5432/deepsave
      PORT: "8080"
      STATIC_DIR: /app/dist
      # Values come from the local .env (gitignored) — never hardcoded here.
      # `:?` fails loudly if the var is missing instead of silently passing "".
      SESSION_SECRET: ${SESSION_SECRET:?SESSION_SECRET not set in .env}
      APP_PASSWORD: ${APP_PASSWORD:?APP_PASSWORD not set in .env}
      DEEPSEEK_API_KEY: ${DEEPSEEK_API_KEY:-}
      # Pluggy (open-banking) — optional; without these the /pluggy UI is disabled
      PLUGGY_API_KEY: ${PLUGGY_API_KEY:-}
      PLUGGY_CLIENT_ID: ${PLUGGY_CLIENT_ID:-}
      PLUGGY_CLIENT_SECRET: ${PLUGGY_CLIENT_SECRET:-}
      PLUGGY_ACCOUNTS: ${PLUGGY_ACCOUNTS:-}
      # Send the session cookie only over HTTPS (set true in .env for the public deploy)
      COOKIE_SECURE: ${COOKIE_SECURE:-false}
      # DEEPSEEK_BASE_URL: https://api.deepseek.com
    ports:
      - "8080:8080"
    volumes:
      - appdata:/app/storage

volumes:
  pgdata:
  appdata: