automatic-data-extractor/docker-compose.prod.split.yaml at main · clac-ca/automatic-data-extractor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
# docker-compose.prod.split.yaml
#
# Production scale-out deployment:
# - app container runs api + web
# - worker container runs worker only (scale this service independently)
#
# Start:
#   docker compose -f docker-compose.prod.split.yaml up -d
#
# Scale workers:
#   docker compose -f docker-compose.prod.split.yaml up -d --scale worker=3
#
# Required variables:
# - ADE_PUBLIC_WEB_URL
# - ADE_DATABASE_URL
# - ADE_BLOB_CONTAINER
# - ADE_SECRET_KEY
# - ADE_BLOB_CONNECTION_STRING (or ADE_BLOB_ACCOUNT_URL for managed identity auth)
#
# Optional:
# - ADE_DOCKER_TAG (default: v1.7.0; compose image selector, set in shell/CI at deploy time)
# - ADE_API_PROCESSES (default: 2)
# - ADE_WORKER_RUN_CONCURRENCY (default: 4)

services:
  app:
    image: ghcr.io/clac-ca/automatic-data-extractor:${ADE_DOCKER_TAG:-v1.7.0}
    command: ["ade", "start"]
    env_file:
      - path: ./.env
        required: false
    restart: unless-stopped
    volumes:
      - app_data:/app/data
    ports:
      - 8000:8000
    environment:
      ADE_SERVICES: api,web
      ADE_API_PROCESSES: ${ADE_API_PROCESSES:-2} # benchmark-backed baseline for production
      ADE_AUTH_DISABLED: "false"
      ADE_PUBLIC_WEB_URL: ${ADE_PUBLIC_WEB_URL:?Set ADE_PUBLIC_WEB_URL to your external web URL}
      ADE_DATABASE_URL: ${ADE_DATABASE_URL:?Set ADE_DATABASE_URL}
      ADE_DATA_DIR: /app/data
      ADE_DATABASE_AUTH_MODE: ${ADE_DATABASE_AUTH_MODE-}
      ADE_DATABASE_SSLROOTCERT: ${ADE_DATABASE_SSLROOTCERT-}
      ADE_BLOB_CONNECTION_STRING: ${ADE_BLOB_CONNECTION_STRING-} # Alternatively set ADE_BLOB_ACCOUNT_URL in .env for managed identity auth.
      ADE_BLOB_CONTAINER: ${ADE_BLOB_CONTAINER:?Set ADE_BLOB_CONTAINER}
      ADE_BLOB_PREFIX: ${ADE_BLOB_PREFIX-}
      ADE_BLOB_VERSIONING_MODE: ${ADE_BLOB_VERSIONING_MODE:-auto} # auto|require|off; see docs/reference/environment-variables.md
      ADE_SECRET_KEY: ${ADE_SECRET_KEY:?Set ADE_SECRET_KEY}

  worker:
    image: ghcr.io/clac-ca/automatic-data-extractor:${ADE_DOCKER_TAG:-v1.7.0}
    command: ["ade", "start"]
    env_file:
      - path: ./.env
        required: false
    restart: unless-stopped
    volumes:
      - app_data:/app/data
    environment:
      ADE_SERVICES: worker
      ADE_WORKER_RUN_CONCURRENCY: ${ADE_WORKER_RUN_CONCURRENCY:-4} # benchmark-backed baseline for production
      ADE_AUTH_DISABLED: "false"
      ADE_DATABASE_URL: ${ADE_DATABASE_URL:?Set ADE_DATABASE_URL}
      ADE_DATA_DIR: /app/data
      ADE_DATABASE_AUTH_MODE: ${ADE_DATABASE_AUTH_MODE-}
      ADE_DATABASE_SSLROOTCERT: ${ADE_DATABASE_SSLROOTCERT-}
      ADE_BLOB_CONNECTION_STRING: ${ADE_BLOB_CONNECTION_STRING-} # Alternatively set ADE_BLOB_ACCOUNT_URL in .env for managed identity auth.
      ADE_BLOB_CONTAINER: ${ADE_BLOB_CONTAINER:?Set ADE_BLOB_CONTAINER}
      ADE_BLOB_PREFIX: ${ADE_BLOB_PREFIX-}
      ADE_BLOB_VERSIONING_MODE: ${ADE_BLOB_VERSIONING_MODE:-auto} # auto|require|off; see docs/reference/environment-variables.md
      ADE_SECRET_KEY: ${ADE_SECRET_KEY:?Set ADE_SECRET_KEY}

volumes:
  app_data: