-
Notifications
You must be signed in to change notification settings - Fork 0
/
docker-compose.yml
82 lines (73 loc) · 2.33 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
version: '3.7'
services:
db:
image: postgres:14
restart: unless-stopped
volumes:
- ./db_data:/var/lib/postgresql/data
ports:
- 5432:5432
# NOTE: if port 5432 are already in use locally, we'll also bind another port
- 5433:5432
environment:
POSTGRES_PASSWORD: ${DB_PASSWORD}
POSTGRES_DB: windmill
healthcheck:
test: [ "CMD-SHELL", "pg_isready -U postgres" ]
interval: 10s
timeout: 5s
retries: 5
windmill:
# image: ghcr.io/windmill-labs/windmill:main
# linux/arm64
image: ghcr.io/windmill-labs/windmill:latest@sha256:a3abb8b93b4397ec8f59afd3d0690578979636f49ffa95592c707657dcd334b8
# linux/amd64
#image: ghcr.io/windmill-labs/windmill:latest@sha256:a3abb8b93b4397ec8f59afd3d0690578979636f49ffa95592c707657dcd334b8
# Set privileged to true if enabling nsjail
privileged: false
restart: unless-stopped
ports:
- 8000:8000
environment:
- DATABASE_URL=postgres://postgres:${DB_PASSWORD}@db/windmill?sslmode=disable
- BASE_URL=http://${WM_BASE_URL}
- BASE_INTERNAL_URL=http://localhost:8000
- RUST_LOG=info
- NUM_WORKERS=3
- KEEP_JOB_DIR=false
- DENO_PATH=/usr/bin/deno
- PYTHON_PATH=/usr/local/bin/python3
- METRICS_ADDR=false
# for ease of use, nsjail which provide isolation in untrusted environment is disabled by default.
# To enable it, uncomment the following line, set the container as privileged and
# rebuild the image with nsjail=true or use the enterprise edition
# - DISABLE_NSJAIL=false
# - DISABLE_NUSER=false
# - NSJAIL_PATH=nsjail
depends_on:
db:
condition: service_healthy
# to mount the worker folder to debug,, KEEP_JOB_DIR=true and mount /tmp/windmill
volumes:
- ./worker_dependency_cache:/tmp/windmill/cache
- ~/.aws/:/root/.aws:ro
- ~/.oci/:/root/.oci:ro
# - ./oauth.json/:/usr/src/app/oauth.json
lsp:
image: ghcr.io/windmill-labs/windmill-lsp:latest
restart: unless-stopped
ports:
- 3001:3001
caddy:
image: caddy:2.5.2-alpine
restart: unless-stopped
volumes:
- ./Caddyfile:/etc/caddy/Caddyfile
ports:
- 80:80
- 443:443
environment:
- BASE_URL=${WM_BASE_URL}
volumes:
db_data: null
worker_dependency_cache: null