docker-compose.yml

# This file is designed for production server deployment, not local development work
# For a containerized local dev environment, see: https://github.com/mastodon/mastodon/blob/main/README.md#docker

services:
  # db:
  #   restart: always
  #   image: postgres:14-alpine
  #   shm_size: 256mb
  #   networks:
  #     - internal_network
  #   healthcheck:
  #     test: ['CMD', 'pg_isready', '-U', 'postgres']
  #   volumes:
  #     - ./postgres14:/var/lib/postgresql/data
  #   environment:
  #     - 'POSTGRES_HOST_AUTH_METHOD=trust'

  # redis:
  #   restart: always
  #   image: redis:7-alpine
  #   networks:
  #     - internal_network
  #   healthcheck:
  #     test: ['CMD', 'redis-cli', 'ping']
  #   volumes:
  #     - ./redis:/data

  # es:
  #   restart: always
  #   image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4
  #   environment:
  #     - "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true"
  #     - "xpack.license.self_generated.type=basic"
  #     - "xpack.security.enabled=false"
  #     - "xpack.watcher.enabled=false"
  #     - "xpack.graph.enabled=false"
  #     - "xpack.ml.enabled=false"
  #     - "bootstrap.memory_lock=true"
  #     - "cluster.name=es-mastodon"
  #     - "discovery.type=single-node"
  #     - "thread_pool.write.queue_size=1000"
  #   networks:
  #      - external_network
  #      - internal_network
  #   healthcheck:
  #      test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
  #   volumes:
  #      - ./elasticsearch:/usr/share/elasticsearch/data
  #   ulimits:
  #     memlock:
  #       soft: -1
  #       hard: -1
  #     nofile:
  #       soft: 65536
  #       hard: 65536
  #   ports:
  #     - '9200:9200'

  web:
    # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
    # build: .
    image: ghcr.io/mastodon/mastodon:v4.3.0-rc.1
    restart: always
    env_file: .env.production
    entrypoint: ["bash", "/opt/mastodon/bin/entrypoint", "mastodon"]
    networks:
      - external_network
      - internal_network
    healthcheck:
      # prettier-ignore
      test: ['CMD-SHELL',"curl -s --noproxy localhost localhost:3000/health | grep -q 'OK' || exit 1"]
    ports:
      - '3000:3000'
      - '8080:80'
      - '8443:443'
    volumes:
      - ./app:/opt/mastodon/app
      - ./app:/app/www/app
      - ./app:/mastodon/app
      - ./config:/config
      - ./config:/opt/mastodon/config
      - ./config:/app/www/config
      - ./config:/mastodon/config
      - ./public:/opt/mastodon/public
      - ./public:/app/www/public
      - ./public:/mastodon/public
      - ./public/system:/opt/mastodon/public/system
      - ./root/etc/letsencrypt/live/thebackroom.life:/etc/letsencrypt/live/thebackroom.life
      # - ./root/etc/nginx:/etc/nginx

  streaming:
    # You can uncomment the following lines if you want to not use the prebuilt image, for example if you have local code changes
    # build:
    #   dockerfile: ./streaming/Dockerfile
    #   context: .
    image: ghcr.io/mastodon/mastodon-streaming:v4.3.0-rc.1
    restart: always
    env_file: .env.production
    entrypoint: ["bash", "/opt/mastodon/bin/entrypoint", "streaming"]
    # command: node ./streaming/index.js
    networks:
      - external_network
      - internal_network
    healthcheck:
      # prettier-ignore
      test: ['CMD-SHELL', "curl -s --noproxy localhost localhost:4000/api/v1/streaming/health | grep -q 'OK' || exit 1"]
    ports:
      - '4000:4000'

  sidekiq:
    build: .
    image: ghcr.io/mastodon/mastodon:v4.3.0-rc.1
    restart: always
    env_file: .env.production
    entrypoint: ["bash", "/opt/mastodon/bin/entrypoint", "sidekiq"]
    networks:
      - external_network
      - internal_network
    volumes:
      - ./public/system:/mastodon/public/system
    healthcheck:
      test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
    # environment:
    #   PROGRAM: sidekiq

  ## Uncomment to enable federation with tor instances along with adding the following ENV variables
  ## http_hidden_proxy=http://privoxy:8118
  ## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
  # tor:
  #   image: sirboops/tor
  #   networks:
  #      - external_network
  #      - internal_network
  #
  # privoxy:
  #   image: sirboops/privoxy
  #   volumes:
  #     - ./priv-config:/opt/config
  #   networks:
  #     - external_network
  #     - internal_network

networks:
  external_network:
  internal_network:
    internal: true