mirror of
https://github.com/johannesjo/super-productivity.git
synced 2026-07-18 17:05:48 +00:00
2123ede018
The throttle in deleteOldSyncedOpsForAllUsers now caps each cleanup pass to short, bounded batches, so the original "shield warmup from DB-heavy retention work" rationale no longer applies. A long initial delay only creates a starvation risk on frequently-restarted deployments (rolling deploys or crash loops could land inside the 30-min window every time and skip cleanup entirely). Revert to a fixed 10s warmup and remove the now-pointless knob from envs, the compose file, and the Helm chart.
134 lines
3.5 KiB
YAML
134 lines
3.5 KiB
YAML
# Production docker-compose for super-sync-server
|
|
#
|
|
# Usage:
|
|
# 1. Copy env.example to .env and configure your settings
|
|
# 2. Run: ./scripts/deploy.sh
|
|
# 3. View logs: docker-compose logs -f
|
|
#
|
|
# For local builds (development):
|
|
# ./scripts/deploy.sh --build
|
|
|
|
x-logging: &default-logging
|
|
driver: 'json-file'
|
|
options:
|
|
max-size: '10m'
|
|
max-file: '3'
|
|
|
|
services:
|
|
supersync:
|
|
image: ${SUPERSYNC_IMAGE:-ghcr.io/super-productivity/supersync:latest}
|
|
container_name: supersync-server
|
|
restart: always
|
|
environment:
|
|
- NODE_ENV=${NODE_ENV:-production}
|
|
- PORT=1900
|
|
- DATABASE_URL=${DATABASE_URL:-postgresql://${POSTGRES_USER:-supersync}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-supersync}}
|
|
- RUN_MIGRATIONS_ON_STARTUP=${RUN_MIGRATIONS_ON_STARTUP:-false}
|
|
- JWT_SECRET=${JWT_SECRET}
|
|
- PUBLIC_URL=${PUBLIC_URL:-http://localhost:1900}
|
|
- CORS_ORIGINS=${CORS_ORIGINS:-https://app.super-productivity.com}
|
|
- SMTP_HOST=${SMTP_HOST:-}
|
|
- SMTP_PORT=${SMTP_PORT:-587}
|
|
- SMTP_SECURE=${SMTP_SECURE:-false}
|
|
- SMTP_USER=${SMTP_USER:-}
|
|
- SMTP_PASS=${SMTP_PASS:-}
|
|
- SMTP_FROM=${SMTP_FROM:-}
|
|
- WEBAUTHN_RP_ID=${WEBAUTHN_RP_ID:-localhost}
|
|
- WEBAUTHN_RP_NAME=${WEBAUTHN_RP_NAME:-Super Productivity Sync}
|
|
- WEBAUTHN_ORIGIN=${WEBAUTHN_ORIGIN:-http://localhost:1900}
|
|
- OLD_OPS_CLEANUP_DELETE_BATCH_SIZE=${OLD_OPS_CLEANUP_DELETE_BATCH_SIZE:-5000}
|
|
- OLD_OPS_CLEANUP_MAX_DELETED_PER_RUN=${OLD_OPS_CLEANUP_MAX_DELETED_PER_RUN:-25000}
|
|
ports:
|
|
- '127.0.0.1:1900:1900'
|
|
volumes:
|
|
- supersync-data:/app/data
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
healthcheck:
|
|
test:
|
|
[
|
|
'CMD',
|
|
'wget',
|
|
'--no-verbose',
|
|
'--tries=1',
|
|
'--spider',
|
|
'http://localhost:1900/health',
|
|
]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 30s
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
mem_limit: 512m
|
|
cpus: '1.0'
|
|
networks:
|
|
- internal
|
|
logging: *default-logging
|
|
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
container_name: supersync-postgres
|
|
restart: always
|
|
environment:
|
|
- POSTGRES_USER=${POSTGRES_USER:-supersync}
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
- POSTGRES_DB=${POSTGRES_DB:-supersync}
|
|
volumes:
|
|
- postgres-data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test:
|
|
- CMD-SHELL
|
|
- >
|
|
pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB" &&
|
|
psql -U "$$POSTGRES_USER" -d "$$POSTGRES_DB" -c "SELECT 1" > /dev/null 2>&1
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 10s
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
mem_limit: 1g
|
|
networks:
|
|
internal:
|
|
aliases:
|
|
# Keep existing .env files with DATABASE_URL=...@db:5432/... working.
|
|
- db
|
|
logging: *default-logging
|
|
|
|
caddy:
|
|
image: caddy:2.11-alpine
|
|
container_name: supersync-caddy
|
|
restart: always
|
|
ports:
|
|
- '80:80'
|
|
- '443:443'
|
|
volumes:
|
|
- ./Caddyfile:/etc/caddy/Caddyfile:ro
|
|
- caddy-data:/data
|
|
- caddy-config:/config
|
|
environment:
|
|
- DOMAIN=${DOMAIN}
|
|
networks:
|
|
- internal
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- NET_BIND_SERVICE
|
|
mem_limit: 256m
|
|
depends_on:
|
|
- supersync
|
|
logging: *default-logging
|
|
|
|
volumes:
|
|
supersync-data:
|
|
postgres-data:
|
|
caddy-data:
|
|
caddy-config:
|
|
|
|
networks:
|
|
internal:
|
|
driver: bridge
|