nest-stack.yml

services:
  nest:
    image: suhach0523/techeerism-nest:$IMAGE_TAG
    networks:
      - main-network
    environment:
      - DATABASE_URL=$DATABASE_URL
      - REDIS_HOST=$REDIS_HOST
      - REDIS_PORT=$REDIS_PORT
      - EMAIL_USER=$EMAIL_USER
      - EMAIL_PASS=$EMAIL_PASS
      - JWT_SECRET=$JWT_SECRET
      - SLACK=$SLACK_SECRET
      - RABBITMQ_HOST=$RABBITMQ_HOST
      - RABBITMQ_DEFAULT_USER=$RABBITMQ_DEFAULT_USER
      - RABBITMQ_DEFAULT_PASS=$RABBITMQ_DEFAULT_PASS
      - SWAGGER_USER=$SWAGGER_USER
      - SWAGGER_PASSWORD=$SWAGGER_PASSWORD
      - AWS_S3_ACCESS_KEY=$AWS_S3_ACCESS_KEY
      - AWS_S3_SECRET_ACCESS_KEY=$AWS_S3_SECRET_ACCESS_KEY
      - AWS_S3_BUCKET_NAME=$AWS_S3_BUCKET_NAME
      - AWS_REGION=$AWS_REGION
      - REDIS_URL=$REDIS_URL
      - GOOGLE_AUTH_TYPE=$GOOGLE_AUTH_TYPE
      - GOOGLE_AUTH_PROJECT_ID=$GOOGLE_AUTH_PROJECT_ID
      - GOOGLE_AUTH_PRIVATE_KEY_ID=$GOOGLE_AUTH_PRIVATE_KEY_ID
      - GOOGLE_AUTH_PRIVATE_KEY=$GOOGLE_AUTH_PRIVATE_KEY
      - GOOGLE_AUTH_CLIENT_EMAIL=$GOOGLE_AUTH_CLIENT_EMAIL
      - GOOGLE_AUTH_CLIENT_ID=$GOOGLE_AUTH_CLIENT_ID
      - GOOGLE_FOLDER_ID=$GOOGLE_FOLDER_ID
      - ARCHIVE_FOLDER_ID=$ARCHIVE_FOLDER_ID
      - RABBITMQ_URL=$RABBITMQ_URL
    deploy:
      replicas: $SERVICE_REPLICAS
      placement:
        constraints:
          - node.labels.instance == main
      update_config:
        parallelism: 1
        delay: 5s
        failure_action: rollback
        monitor: 15s
        order: start-first
      rollback_config:
        parallelism: 1
        delay: 5s
        monitor: 15s
        order: start-first
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 3
        window: 30s
      labels:
        - traefik.enable=true
        - traefik.http.services.nest.loadbalancer.server.port=8000
        - traefik.http.routers.nest.entrypoints=websecure
        - traefik.http.routers.nest.rule=Host(`api.techeerzip.cloud`) && PathPrefix(`/api/v1`)
        # - traefik.http.routers.nest.middlewares=nest-stripprefix
        # - traefik.http.middlewares.nest-stripprefix.stripprefix.prefixes=/api/v1
        - traefik.http.routers.nest.tls.certresolver=letsencrypt
        - logging=promtail
        - logging_jobname=nest

networks:
  main-network:
    external: true