853a075e8b
All checks were successful
Deploy to Staging / Build Images (push) Successful in 39s
Deploy to Staging / Deploy to Staging (push) Successful in 52s
Deploy to Staging / Verify Staging (push) Successful in 9s
Deploy to Staging / Notify Staging Ready (push) Successful in 8s
Deploy to Staging / Notify Staging Failure (push) Has been skipped
Stripe Price IDs were hardcoded and duplicated across 4 compose files.
Log levels were hardcoded per-overlay instead of using generate-log-config.sh.
This refactors all environment-specific variables into a single .env file
that CI/CD generates from Gitea repo variables + generate-log-config.sh.
- Add .env.example template with documented variables
- Replace hardcoded values with ${VAR:-default} substitution in base compose
- Simplify prod overlay from 90 to 32 lines (remove redundant env blocks)
- Add YAML anchors to blue-green overlay (eliminate blue/green duplication)
- Remove redundant OCR env block from staging overlay
- Change generate-log-config.sh to output to stdout (pipe into .env)
- Update staging/production CI/CD to generate .env with Stripe + log vars
- Remove dangerous pk_live_ default from VITE_STRIPE_PUBLISHABLE_KEY
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
104 lines
4.3 KiB
YAML
104 lines
4.3 KiB
YAML
# Staging Environment Docker Compose
|
|
# Runs full application stack on staging server (staging.motovaultpro.com)
|
|
# Usage: docker compose -f docker-compose.yml -f docker-compose.staging.yml up -d
|
|
#
|
|
# Differences from production:
|
|
# - Single stack (no blue-green)
|
|
# - Staging domain (staging.motovaultpro.com)
|
|
# - Separate database (isolated from production)
|
|
# - Uses same images as production for accurate testing
|
|
|
|
services:
|
|
# ========================================
|
|
# Traefik - Reverse Proxy (Staging)
|
|
# ========================================
|
|
mvp-traefik:
|
|
image: ${REGISTRY_MIRRORS:-git.motovaultpro.com/egullickson/mirrors}/traefik:v3.6
|
|
container_name: mvp-traefik-staging
|
|
volumes:
|
|
- ./config/traefik/dynamic-staging:/etc/traefik/dynamic:ro
|
|
labels:
|
|
- "traefik.http.routers.traefik-dashboard.rule=Host(`traefik.staging.motovaultpro.com`)"
|
|
|
|
# ========================================
|
|
# Frontend (Staging)
|
|
# ========================================
|
|
mvp-frontend:
|
|
image: ${FRONTEND_IMAGE:-git.motovaultpro.com/egullickson/frontend:latest}
|
|
container_name: mvp-frontend-staging
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=motovaultpro_frontend"
|
|
- "traefik.http.routers.mvp-frontend.rule=Host(`staging.motovaultpro.com`) && !PathPrefix(`/api`)"
|
|
- "traefik.http.routers.mvp-frontend.entrypoints=websecure"
|
|
- "traefik.http.routers.mvp-frontend.tls=true"
|
|
- "traefik.http.routers.mvp-frontend.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.mvp-frontend.priority=10"
|
|
- "traefik.http.services.mvp-frontend.loadbalancer.server.port=3000"
|
|
|
|
# ========================================
|
|
# Backend (Staging)
|
|
# ========================================
|
|
mvp-backend:
|
|
image: ${BACKEND_IMAGE:-git.motovaultpro.com/egullickson/backend:latest}
|
|
container_name: mvp-backend-staging
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=motovaultpro_backend"
|
|
- "traefik.http.routers.mvp-backend.rule=Host(`staging.motovaultpro.com`) && PathPrefix(`/api`)"
|
|
- "traefik.http.routers.mvp-backend.entrypoints=websecure"
|
|
- "traefik.http.routers.mvp-backend.tls=true"
|
|
- "traefik.http.routers.mvp-backend.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.mvp-backend.priority=20"
|
|
- "traefik.http.routers.mvp-backend-health.rule=Host(`staging.motovaultpro.com`) && Path(`/api/health`)"
|
|
- "traefik.http.routers.mvp-backend-health.entrypoints=websecure"
|
|
- "traefik.http.routers.mvp-backend-health.tls=true"
|
|
- "traefik.http.routers.mvp-backend-health.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.mvp-backend-health.priority=30"
|
|
- "traefik.http.services.mvp-backend.loadbalancer.server.port=3001"
|
|
|
|
# ========================================
|
|
# OCR Service (Staging)
|
|
# ========================================
|
|
mvp-ocr:
|
|
image: ${OCR_IMAGE:-git.motovaultpro.com/egullickson/ocr:latest}
|
|
container_name: mvp-ocr-staging
|
|
|
|
# ========================================
|
|
# PostgreSQL (Staging - Separate Database)
|
|
# ========================================
|
|
mvp-postgres:
|
|
container_name: mvp-postgres-staging
|
|
volumes:
|
|
- mvp_postgres_staging_data:/var/lib/postgresql/data/pgdata
|
|
- ./secrets/app/postgres-password.txt:/run/secrets/postgres-password:ro
|
|
|
|
# ========================================
|
|
# Redis (Staging)
|
|
# ========================================
|
|
mvp-redis:
|
|
container_name: mvp-redis-staging
|
|
volumes:
|
|
- mvp_redis_staging_data:/data
|
|
|
|
# ========================================
|
|
# Grafana (Staging domain override)
|
|
# ========================================
|
|
mvp-grafana:
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=motovaultpro_frontend"
|
|
- "traefik.http.routers.grafana.rule=Host(`logs.staging.motovaultpro.com`)"
|
|
- "traefik.http.routers.grafana.entrypoints=websecure"
|
|
- "traefik.http.routers.grafana.tls=true"
|
|
- "traefik.http.routers.grafana.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.grafana.middlewares=grafana-ipwhitelist@file"
|
|
- "traefik.http.services.grafana.loadbalancer.server.port=3000"
|
|
|
|
# Staging-specific volumes (separate from production)
|
|
volumes:
|
|
mvp_postgres_staging_data:
|
|
name: mvp_postgres_staging_data
|
|
mvp_redis_staging_data:
|
|
name: mvp_redis_staging_data
|