carmanagement/docker-compose.production.yml

name: rentaldrivego-prod

services:
  postgres:
    image: postgres:16-alpine
    restart: unless-stopped
    networks:
      - internal
    environment:
      POSTGRES_DB: rentaldrivego
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-change-me}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d rentaldrivego"]
      interval: 5s
      timeout: 5s
      retries: 10
    volumes:
      - postgres_prod_data:/var/lib/postgresql/data

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    networks:
      - internal
    volumes:
      - redis_prod_data:/data

  api:
    build:
      context: .
      dockerfile: Dockerfile.production
    command:
      - bash
      - -c
      - |
        npm run db:deploy &&
        npm run start --workspace @rentaldrivego/api
    networks:
      - internal
      - traefik-proxy
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_started
    env_file:
      - .env.docker.production
    restart: unless-stopped
    labels:
      - traefik.enable=true
      - traefik.http.routers.api.rule=Host(`api.rentaldrivego.ma`)
      - traefik.http.routers.api.entrypoints=websecure
      - traefik.http.routers.api.tls=true
      - traefik.http.routers.api.tls.certresolver=letsencrypt
      - traefik.http.services.api.loadbalancer.server.port=4000

  frontend:
    build:
      context: .
      dockerfile: Dockerfile.production
      args:
        NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL}
        NEXT_PUBLIC_MARKETING_URL: ${NEXT_PUBLIC_MARKETING_URL}
        NEXT_PUBLIC_MARKETPLACE_URL: ${NEXT_PUBLIC_MARKETPLACE_URL}
        NEXT_PUBLIC_DASHBOARD_URL: ${NEXT_PUBLIC_DASHBOARD_URL}
        NEXT_PUBLIC_ADMIN_URL: ${NEXT_PUBLIC_ADMIN_URL}
        NEXT_PUBLIC_PUBLIC_SITE_DOMAIN: ${NEXT_PUBLIC_PUBLIC_SITE_DOMAIN}
    command:
      - bash
      - -c
      - |
        npm run start --workspace @rentaldrivego/public-site &
        npm run start --workspace @rentaldrivego/marketplace &
        npm run start --workspace @rentaldrivego/admin &
        npm run start --workspace @rentaldrivego/dashboard &
        wait -n
    networks:
      - internal
      - traefik-proxy
    depends_on:
      - api
    env_file:
      - .env.docker.production
    restart: unless-stopped
    labels:
      - traefik.enable=true
      # marketplace (port 3000) — /marketplace path, priority 20
      - traefik.http.routers.marketplace.rule=Host(`${PUBLIC_SITE_DOMAIN}`) && PathPrefix(`/marketplace`)
      - traefik.http.routers.marketplace.priority=20
      - traefik.http.routers.marketplace.entrypoints=websecure
      - traefik.http.routers.marketplace.tls=true
      - traefik.http.routers.marketplace.tls.certresolver=letsencrypt
      - traefik.http.routers.marketplace.service=marketplace-svc
      - traefik.http.services.marketplace-svc.loadbalancer.server.port=3000
      # dashboard (port 3001) — /dashboard path, priority 20
      - traefik.http.routers.dashboard.rule=Host(`${PUBLIC_SITE_DOMAIN}`) && PathPrefix(`/dashboard`)
      - traefik.http.routers.dashboard.priority=20
      - traefik.http.routers.dashboard.entrypoints=websecure
      - traefik.http.routers.dashboard.tls=true
      - traefik.http.routers.dashboard.tls.certresolver=letsencrypt
      - traefik.http.routers.dashboard.service=dashboard-svc
      - traefik.http.services.dashboard-svc.loadbalancer.server.port=3001
      # admin (port 3002) — /admin path, priority 20
      - traefik.http.routers.admin.rule=Host(`${PUBLIC_SITE_DOMAIN}`) && PathPrefix(`/admin`)
      - traefik.http.routers.admin.priority=20
      - traefik.http.routers.admin.entrypoints=websecure
      - traefik.http.routers.admin.tls=true
      - traefik.http.routers.admin.tls.certresolver=letsencrypt
      - traefik.http.routers.admin.service=admin-svc
      - traefik.http.services.admin-svc.loadbalancer.server.port=3002
      # public site (port 3003) — root domain, priority 10
      - traefik.http.routers.public-site.rule=Host(`${PUBLIC_SITE_DOMAIN}`) || Host(`www.${PUBLIC_SITE_DOMAIN}`)
      - traefik.http.routers.public-site.priority=10
      - traefik.http.routers.public-site.entrypoints=websecure
      - traefik.http.routers.public-site.tls=true
      - traefik.http.routers.public-site.tls.certresolver=letsencrypt
      - traefik.http.routers.public-site.service=public-site-svc
      - traefik.http.services.public-site-svc.loadbalancer.server.port=3003
      # tenant branded sites (port 3003) — {slug}.rentaldrivego.ma subdomains
      - traefik.http.routers.public-site-tenants.rule=HostRegexp(`{subdomain:[a-z0-9-]+}.${PUBLIC_SITE_DOMAIN}`)
      - traefik.http.routers.public-site-tenants.priority=10
      - traefik.http.routers.public-site-tenants.entrypoints=websecure
      - traefik.http.routers.public-site-tenants.tls=true
      - traefik.http.routers.public-site-tenants.tls.certresolver=letsencrypt
      - traefik.http.routers.public-site-tenants.service=public-site-svc

  pgmanage:
    image: cmdpromptinc/pgmanage-enterprise:latest
    restart: unless-stopped
    user: "0:0"
    networks:
      - internal
      - traefik-proxy
    depends_on:
      postgres:
        condition: service_healthy
    environment:
      PGMANAGE_LISTEN_PORT: "8000"
    volumes:
      - pgmanage_prod_data:/appdata
    labels:
      - traefik.enable=true
      - traefik.http.routers.pgmanage.rule=Host(`${PGMANAGE_DOMAIN}`)
      - traefik.http.routers.pgmanage.entrypoints=websecure
      - traefik.http.routers.pgmanage.tls.certresolver=letsencrypt
      - traefik.http.services.pgmanage.loadbalancer.server.port=8000

networks:
  internal:
    driver: bridge
  traefik-proxy:
    external: true

volumes:
  postgres_prod_data:
  redis_prod_data:
  pgmanage_prod_data: