JobPT/docker-compose.yml at main · Pseudo-Lab/JobPT · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
version: "3.8"

services:
  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      labels:
        - "org.pseudolab.project=jobpt"
    restart: unless-stopped
    env_file:
      - .env
    environment:
      NODE_ENV: ${ENVIRONMENT:-production}
      NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-http://localhost:8000}
      APP_HOST: ${APP_HOST:-localhost}
    volumes:
      - jobpt_resumes:/app/public/uploads
      - /app/node_modules
      - /app/.next
    depends_on:
      - backend
    networks:
      - traefik
      - internal
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik

      # --- Traefik Router (Frontend) ---
      - traefik.http.routers.jobpt-${ENVIRONMENT}-web.rule=Host(`${APP_HOST}`)
      - traefik.http.routers.jobpt-${ENVIRONMENT}-web.entrypoints=websecure
      - traefik.http.routers.jobpt-${ENVIRONMENT}-web.tls=true
      - traefik.http.routers.jobpt-${ENVIRONMENT}-web.tls.certresolver=le
      - traefik.http.services.jobpt-${ENVIRONMENT}-web.loadbalancer.server.port=3000

      # --- HTTP → HTTPS 리다이렉트 ---
      - traefik.http.routers.jobpt-${ENVIRONMENT}-web-http.rule=Host(`${APP_HOST}`)
      - traefik.http.routers.jobpt-${ENVIRONMENT}-web-http.entrypoints=web
      - traefik.http.routers.jobpt-${ENVIRONMENT}-web-http.middlewares=redirect-to-https@file
      - traefik.http.routers.jobpt-${ENVIRONMENT}-web-http.service=jobpt-${ENVIRONMENT}-web

  mysql:
    image: mysql:8.0
    restart: unless-stopped
    environment:
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-root}
      MYSQL_DATABASE: ${MYSQL_DATABASE:-jobpt}
      MYSQL_USER: ${MYSQL_USER:-jobpt}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD:-jobpt}
      LC_ALL: C.UTF-8
    command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
    volumes:
      - jobpt_mysql:/var/lib/mysql
    networks:
      - internal
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
      interval: 10s
      timeout: 5s
      retries: 5

  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
      labels:
        - "org.pseudolab.project=jobpt"
    restart: unless-stopped
    env_file:
      - .env
    environment:
      ENVIRONMENT: ${ENVIRONMENT:-production}
      LANGFUSE_PUBLIC_KEY: ${LANGFUSE_PUBLIC_KEY:-}
      LANGFUSE_SECRET_KEY: ${LANGFUSE_SECRET_KEY:-}
      PINECONE_API_KEY: ${PINECONE_API_KEY:-}
      UPSTAGE_API_KEY: ${UPSTAGE_API_KEY:-}
      FRONTEND_CORS_ORIGIN: ${FRONTEND_CORS_ORIGIN:-http://localhost:3000}
      MYSQL_HOST: mysql
      MYSQL_USER: ${MYSQL_USER:-jobpt}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD:-jobpt}
      MYSQL_DATABASE: ${MYSQL_DATABASE:-jobpt}
    volumes:
      - jobpt_data:/app/data
      - jobpt_resumes:/app/uploaded_resumes
      - /tmp:/tmp
    depends_on:
      mysql:
        condition: service_healthy
    networks:
      - traefik
      - internal
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik

      # 백엔드에 /api 프리픽스가 포함되어 있으므로 stripPrefix 미들웨어 없이 그대로 전달
      - traefik.http.routers.jobpt-${ENVIRONMENT}-api.rule=Host(`${APP_HOST}`) && (PathPrefix(`/api`) || PathPrefix(`/docs`) || PathPrefix(`/redoc`) || PathPrefix(`/health`) || Path(`/openapi.json`))
      - traefik.http.routers.jobpt-${ENVIRONMENT}-api.entrypoints=websecure
      - traefik.http.routers.jobpt-${ENVIRONMENT}-api.tls=true
      - traefik.http.routers.jobpt-${ENVIRONMENT}-api.tls.certresolver=le
      - traefik.http.services.jobpt-${ENVIRONMENT}-api.loadbalancer.server.port=8000

      # HTTP → HTTPS 리다이렉트 (backend)
      - traefik.http.routers.jobpt-${ENVIRONMENT}-api-http.rule=Host(`${APP_HOST}`) && PathPrefix(`/api`)
      - traefik.http.routers.jobpt-${ENVIRONMENT}-api-http.entrypoints=web
      - traefik.http.routers.jobpt-${ENVIRONMENT}-api-http.middlewares=redirect-to-https@file
      - traefik.http.routers.jobpt-${ENVIRONMENT}-api-http.service=jobpt-${ENVIRONMENT}-api

networks:
  traefik:
    external: true
  internal:
    driver: bridge

volumes:
  jobpt_data:
  jobpt_resumes:
  jobpt_mysql: