update production setup

docker-compose.production.yml

@@ -2,6 +2,8 @@ services:
   postgres:
     image: postgres:16-alpine
     restart: unless-stopped
+    networks:
+      - internal
     environment:
       POSTGRES_DB: rentaldrivego
       POSTGRES_USER: postgres
@@ -17,6 +19,8 @@ services:
   redis:
     image: redis:7-alpine
     restart: unless-stopped
+    networks:
+      - internal
     volumes:
       - redis_prod_data:/data
 
@@ -25,6 +29,8 @@ services:
       context: .
       dockerfile: Dockerfile.production
     command: ["sh", "-c", "npm run db:deploy"]
+    networks:
+      - internal
     depends_on:
       postgres:
         condition: service_healthy
@@ -37,6 +43,9 @@ services:
       context: .
       dockerfile: Dockerfile.production
     command: ["npm", "run", "start", "--workspace", "@rentaldrivego/api"]
+    networks:
+      - internal
+      - traefik-proxy
     depends_on:
       postgres:
         condition: service_healthy
@@ -46,62 +55,122 @@ services:
         condition: service_completed_successfully
     env_file:
       - .env.docker.production
-    ports:
-      - "4000:4000"
     restart: unless-stopped
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.api.rule=Host(`${API_DOMAIN}`)
+      - traefik.http.routers.api.entrypoints=websecure
+      - traefik.http.routers.api.tls.certresolver=letsencrypt
+      - traefik.http.services.api.loadbalancer.server.port=4000
 
   marketplace:
     build:
       context: .
       dockerfile: Dockerfile.production
     command: ["npm", "run", "start", "--workspace", "@rentaldrivego/marketplace"]
+    networks:
+      - internal
+      - traefik-proxy
     depends_on:
       - api
     env_file:
       - .env.docker.production
-    ports:
-      - "3000:3000"
     restart: unless-stopped
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.marketplace.rule=Host(`${MARKETPLACE_DOMAIN}`)
+      - traefik.http.routers.marketplace.entrypoints=websecure
+      - traefik.http.routers.marketplace.tls.certresolver=letsencrypt
+      - traefik.http.services.marketplace.loadbalancer.server.port=3000
 
   dashboard:
     build:
       context: .
       dockerfile: Dockerfile.production
     command: ["npm", "run", "start", "--workspace", "@rentaldrivego/dashboard"]
+    networks:
+      - internal
+      - traefik-proxy
     depends_on:
       - api
     env_file:
       - .env.docker.production
-    ports:
-      - "3001:3001"
     restart: unless-stopped
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.dashboard.rule=Host(`${DASHBOARD_DOMAIN}`)
+      - traefik.http.routers.dashboard.entrypoints=websecure
+      - traefik.http.routers.dashboard.tls.certresolver=letsencrypt
+      - traefik.http.services.dashboard.loadbalancer.server.port=3001
 
   admin:
     build:
       context: .
       dockerfile: Dockerfile.production
     command: ["npm", "run", "start", "--workspace", "@rentaldrivego/admin"]
+    networks:
+      - internal
+      - traefik-proxy
     depends_on:
       - api
     env_file:
       - .env.docker.production
-    ports:
-      - "3002:3002"
     restart: unless-stopped
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.admin.rule=Host(`${ADMIN_DOMAIN}`)
+      - traefik.http.routers.admin.entrypoints=websecure
+      - traefik.http.routers.admin.tls.certresolver=letsencrypt
+      - traefik.http.services.admin.loadbalancer.server.port=3002
 
   public-site:
     build:
       context: .
       dockerfile: Dockerfile.production
     command: ["npm", "run", "start", "--workspace", "@rentaldrivego/public-site"]
+    networks:
+      - internal
+      - traefik-proxy
     depends_on:
       - api
     env_file:
       - .env.docker.production
-    ports:
-      - "3003:3003"
     restart: unless-stopped
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.public-site.rule=Host(`${PUBLIC_SITE_DOMAIN}`)
+      - traefik.http.routers.public-site.entrypoints=websecure
+      - traefik.http.routers.public-site.tls.certresolver=letsencrypt
+      - traefik.http.services.public-site.loadbalancer.server.port=3003
+
+  pgmanage:
+    image: cmdpromptinc/pgmanage-enterprise:latest
+    restart: unless-stopped
+    user: "0:0"
+    networks:
+      - internal
+      - traefik-proxy
+    depends_on:
+      postgres:
+        condition: service_healthy
+    environment:
+      PGMANAGE_LISTEN_PORT: "8000"
+    volumes:
+      - pgmanage_prod_data:/appdata
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.pgmanage.rule=Host(`${PGMANAGE_DOMAIN}`)
+      - traefik.http.routers.pgmanage.entrypoints=websecure
+      - traefik.http.routers.pgmanage.tls.certresolver=letsencrypt
+      - traefik.http.services.pgmanage.loadbalancer.server.port=8000
+
+networks:
+  internal:
+    driver: bridge
+  traefik-proxy:
+    external: true
 
 volumes:
   postgres_prod_data:
   redis_prod_data:
+  pgmanage_prod_data: