CI/CD Gitea v1.0

docker-compose.staging.yml

@@ -0,0 +1,80 @@
+# Staging Environment Docker Compose
+# Runs full application stack on staging server (staging.motovaultpro.com)
+# Usage: docker compose -f docker-compose.yml -f docker-compose.staging.yml up -d
+#
+# Differences from production:
+# - Single stack (no blue-green)
+# - Staging domain (staging.motovaultpro.com)
+# - Separate database (isolated from production)
+# - Uses same images as production for accurate testing
+
+services:
+  # ========================================
+  # Traefik - Reverse Proxy (Staging)
+  # ========================================
+  mvp-traefik:
+    image: ${REGISTRY_MIRRORS:-git.motovaultpro.com/egullickson/mirrors}/traefik:v3.6
+    container_name: mvp-traefik-staging
+    labels:
+      - "traefik.http.routers.traefik-dashboard.rule=Host(`traefik.staging.motovaultpro.com`)"
+
+  # ========================================
+  # Frontend (Staging)
+  # ========================================
+  mvp-frontend:
+    image: ${FRONTEND_IMAGE:-git.motovaultpro.com/egullickson/frontend:latest}
+    container_name: mvp-frontend-staging
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=motovaultpro_frontend"
+      - "traefik.http.routers.mvp-frontend.rule=Host(`staging.motovaultpro.com`) && !PathPrefix(`/api`)"
+      - "traefik.http.routers.mvp-frontend.entrypoints=websecure"
+      - "traefik.http.routers.mvp-frontend.tls=true"
+      - "traefik.http.routers.mvp-frontend.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.mvp-frontend.priority=10"
+      - "traefik.http.services.mvp-frontend.loadbalancer.server.port=3000"
+
+  # ========================================
+  # Backend (Staging)
+  # ========================================
+  mvp-backend:
+    image: ${BACKEND_IMAGE:-git.motovaultpro.com/egullickson/backend:latest}
+    container_name: mvp-backend-staging
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=motovaultpro_backend"
+      - "traefik.http.routers.mvp-backend.rule=Host(`staging.motovaultpro.com`) && PathPrefix(`/api`)"
+      - "traefik.http.routers.mvp-backend.entrypoints=websecure"
+      - "traefik.http.routers.mvp-backend.tls=true"
+      - "traefik.http.routers.mvp-backend.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.mvp-backend.priority=20"
+      - "traefik.http.routers.mvp-backend-health.rule=Host(`staging.motovaultpro.com`) && Path(`/api/health`)"
+      - "traefik.http.routers.mvp-backend-health.entrypoints=websecure"
+      - "traefik.http.routers.mvp-backend-health.tls=true"
+      - "traefik.http.routers.mvp-backend-health.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.mvp-backend-health.priority=30"
+      - "traefik.http.services.mvp-backend.loadbalancer.server.port=3001"
+
+  # ========================================
+  # PostgreSQL (Staging - Separate Database)
+  # ========================================
+  mvp-postgres:
+    container_name: mvp-postgres-staging
+    volumes:
+      - mvp_postgres_staging_data:/var/lib/postgresql/data
+      - ./secrets/staging/postgres-password.txt:/run/secrets/postgres-password:ro
+
+  # ========================================
+  # Redis (Staging)
+  # ========================================
+  mvp-redis:
+    container_name: mvp-redis-staging
+    volumes:
+      - mvp_redis_staging_data:/data
+
+# Staging-specific volumes (separate from production)
+volumes:
+  mvp_postgres_staging_data:
+    name: mvp_postgres_staging_data
+  mvp_redis_staging_data:
+    name: mvp_redis_staging_data