docker-compose.yml

version: "2"

services:
  etcd:
    image: quay.io/coreos/etcd
    command: etcd --initial-cluster-state new --listen-client-urls http://0.0.0.0:2379 --advertise-client-urls http://127.0.0.1:2379
    volumes:
      - "etcd-data:/default.etcd"
    environment:
      - ETCDCTL_API=3
    networks:
     - etcd-network

  etcd_config:
    build:
      context: .
      dockerfile: ./Dockerfile-etcd-config
    volumes:
      - "etcd-data:/default.etcd"
    environment:
      - ETCDCTL_API=3
      - ETCDCTL_ENDPOINTS=etcd:2379
    depends_on:
      - etcd
    networks:
      - etcd-network

  postgres:
    image: "postgres"
    volumes:
      - "db-data:/var/lib/postgresql/data/pgdata"
    env_file: .env
    environment:
      PGDATA: "/var/lib/postgresql/data/pgdata"
      POSTGRES_USER: $POSTGRES_USER
      POSTGRES_PASSWORD: $POSTGRES_PASSWORD
      POSTGRES_DB: $POSTGRES_DB
    networks:
     - postgres-network
    ports:
     - "5432:5432"

  app:
    container_name: go_oauth2_server
    image: go-oauth2-server:latest
    networks:
      - app-network
      - postgres-network
      - etcd-network
    depends_on:
      - etcd_config
      - postgres
    build:
      context: .
      dockerfile: ./Dockerfile
    ports:
      - "8080"
    environment:
      ETCD_ENDPOINTS: "http://etcd:2379"
    command: [runserver]
    volumes:
      - .:/go/src/github.com/RichardKnop/go-oauth2-server
      - ./.gocache:/home/app/.cache/go-build

  ssh-agent:
    container_name: ssh-agent
    image: nardeas/ssh-agent:latest
    volumes:
      - "dot_ssh:/root/.ssh"
      - "socket_dir:/.ssh-agent"
    environment:
      - SSH_AUTH_SOCK=/.ssh-agent/socket

  migrate-wp-user-to-oauth:
    container_name: migrate-wp-user-to-oauth
    image: "perl"
    build: migrate-wp-users/.
    depends_on:
      - postgres
    networks:
      - postgres-network
    command: [ "perl", "./migrate_wp_user_to_oauth.pl" ]
    volumes:
      - "dot_ssh:/root/.ssh"
      - "socket_dir:/.ssh-agent"
    environment:
      - SSH_AUTH_SOCK=/.ssh-agent/socket
      - ETCD_ENDPOINTS="http://etcd:2379"

  webserver:
    image: nginx:mainline-alpine
    container_name: webserver
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - web-root:/var/www/html
      - ./nginx-conf:/etc/nginx/conf.d
      - certbot-etc:/etc/letsencrypt
      - certbot-var:/var/lib/letsencrypt
      - dhparam:/etc/ssl/certs
    depends_on:
      - app
    networks:
      - app-network

  certbot:
    image: certbot/certbot
    container_name: certbot
    volumes:
      - certbot-etc:/etc/letsencrypt
      - certbot-var:/var/lib/letsencrypt
      - web-root:/var/www/html
    depends_on:
      - webserver
    command: certonly --webroot --webroot-path=/var/www/html --email auggod@resonate.is --agree-tos --no-eff-email --force-renewal -d id.resonate.coop

networks:
  app-network:
    driver: bridge
  postgres-network:
    driver: bridge
  etcd-network:
    driver: bridge

volumes:
  etcd-data:
  db-data:
  dot_ssh:
  socket_dir:
  certbot-etc:
  certbot-var:
  web-root:
    driver: local
    driver_opts:
      type: none
      device: "${PWD}/public/"
      o: bind
  dhparam:
    driver: local
    driver_opts:
      type: none
      device: "${PWD}/dhparam/"
      o: bind