TaxHacker/docker-compose.yml at main · vas3k/TaxHacker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
services:
  app:
    image: ghcr.io/vas3k/taxhacker:latest
    ports:
      - "7331:7331"
    environment:
      - NODE_ENV=production
      - SELF_HOSTED_MODE=true
      - UPLOAD_PATH=/app/data/uploads
      - DATABASE_URL=postgresql://postgres:postgres@postgres:5432/taxhacker
      - BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET:-}
    volumes:
      - ./data:/app/data
    restart: unless-stopped
    depends_on:
      - postgres
    security_opt:
      - no-new-privileges:true
    logging:
      driver: "local"
      options:
        max-size: "100M"
        max-file: "3"

  cron:
    image: ghcr.io/vas3k/taxhacker:latest
    environment:
      - NODE_ENV=production
      - SELF_HOSTED_MODE=true
      - UPLOAD_PATH=/app/data/uploads
      - DATABASE_URL=postgresql://postgres:postgres@postgres:5432/taxhacker
      # Optional override. When unset, both containers use the same persisted secret from ./data.
      - BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET:-}
    volumes:
      - ./data:/app/data
      - ./etc/crontab:/mnt/crontab:ro
    restart: unless-stopped
    depends_on:
      - postgres
      - app
    security_opt:
      - no-new-privileges:true
    command: ["docker-cron-entrypoint.sh"]
    logging:
      driver: "local"
      options:
        max-size: "100M"
        max-file: "3"

  postgres:
    image: postgres:17-alpine
    environment:
      - POSTGRES_USER=postgres
      - POSTGRES_PASSWORD=postgres
      - POSTGRES_DB=taxhacker
    volumes:
      - ./pgdata:/var/lib/postgresql/data
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    logging:
      driver: "local"
      options:
        max-size: "100M"
        max-file: "3"