diff options
| author | ertopogo <erwin.t.pombett@gmail.com> | 2026-03-13 00:33:28 +0100 |
|---|---|---|
| committer | ertopogo <erwin.t.pombett@gmail.com> | 2026-03-13 00:33:28 +0100 |
| commit | b34873f98052ac5fb4bf6731a25730075796d764 (patch) | |
| tree | 0b27ef2996894287aaf382b43956d6cf45352e94 /compose.photoprism-secure.dev.yml | |
Diffstat (limited to 'compose.photoprism-secure.dev.yml')
| -rw-r--r-- | compose.photoprism-secure.dev.yml | 88 |
1 files changed, 88 insertions, 0 deletions
diff --git a/compose.photoprism-secure.dev.yml b/compose.photoprism-secure.dev.yml new file mode 100644 index 0000000..6cdfc9a --- /dev/null +++ b/compose.photoprism-secure.dev.yml @@ -0,0 +1,88 @@ +services:
+ minio:
+ image: minio/minio:latest
+ container_name: medias-minio
+ command: server /data --console-address ":9001"
+ environment:
+ MINIO_ROOT_USER: ${MINIO_ROOT_USER}
+ MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
+ ports:
+ - "9000:9000"
+ - "9001:9001"
+ volumes:
+ - minio_data:/data
+ healthcheck:
+ test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
+ interval: 10s
+ timeout: 5s
+ retries: 12
+ networks:
+ - medias_net
+
+ minio-init:
+ image: minio/mc:latest
+ container_name: medias-minio-init
+ depends_on:
+ minio:
+ condition: service_healthy
+ entrypoint: >
+ /bin/sh -c "
+ mc alias set local http://minio:9000 ${MINIO_ROOT_USER} ${MINIO_ROOT_PASSWORD} &&
+ mc mb -p local/${S3_BUCKET} || true &&
+ mc anonymous set none local/${S3_BUCKET} || true
+ "
+ restart: "no"
+ networks:
+ - medias_net
+
+ media-access-api:
+ image: ${MEDIA_ACCESS_API_IMAGE}
+ container_name: medias-access-api
+ environment:
+ OIDC_ISSUER: ${OIDC_ISSUER}
+ OIDC_AUDIENCE: ${OIDC_AUDIENCE}
+ OIDC_JWKS_URL: ${OIDC_JWKS_URL}
+ OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}
+ OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
+ RBAC_ROLE_PREFIX: ${RBAC_ROLE_PREFIX}
+ RBAC_ROLE_ALL: ${RBAC_ROLE_ALL}
+ S3_ENDPOINT: http://minio:9000
+ S3_BUCKET: ${S3_BUCKET}
+ S3_REGION: ${S3_REGION}
+ S3_ACCESS_KEY: ${MINIO_ROOT_USER}
+ S3_SECRET_KEY: ${MINIO_ROOT_PASSWORD}
+ S3_FORCE_PATH_STYLE: "true"
+ PRESIGN_TTL_SECONDS: ${PRESIGN_TTL_SECONDS}
+ PORT: "8081"
+ depends_on:
+ minio:
+ condition: service_healthy
+ minio-init:
+ condition: service_completed_successfully
+ ports:
+ - "8081:8081"
+ networks:
+ - medias_net
+
+ viewer-bff:
+ build:
+ context: ./viewer-bff
+ dockerfile: Dockerfile
+ container_name: medias-viewer-bff
+ depends_on:
+ - media-access-api
+ environment:
+ PORT: "8082"
+ MEDIA_API_BASE_URL: ${MEDIA_API_BASE_URL}
+ CORS_ALLOWED_ORIGIN: ${CORS_ALLOWED_ORIGIN}
+ ports:
+ - "${VIEWER_BFF_PORT:-8082}:8082"
+ networks:
+ - medias_net
+
+networks:
+ medias_net:
+ name: medias_net
+
+volumes:
+ minio_data:
|