-

docker-compose.yml

@@ -27,17 +27,13 @@ services:
     ports:
       - "8081:80"
     volumes:
-      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
-      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf:ro
+      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro,Z
+      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf:ro,Z
     depends_on:
       - api-service
+      - frontend
     networks:
       - kms-network
-    healthcheck:
-      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost/health"]
-      interval: 30s
-      timeout: 10s
-      retries: 3
 
   api-service:
     build:
@@ -52,11 +48,16 @@ services:
       DB_USER: postgres
       DB_PASSWORD: postgres
       DB_SSLMODE: disable
+      DB_CONN_MAX_LIFETIME: 5m
+      DB_MAX_OPEN_CONNS: 25
+      DB_MAX_IDLE_CONNS: 5
       SERVER_HOST: 0.0.0.0
       SERVER_PORT: 8080
       LOG_LEVEL: debug
       MIGRATION_PATH: /app/migrations
-      INTERNAL_HMAC_KEY: bootstrap-hmac-key-change-in-production
+      INTERNAL_HMAC_KEY: 3924f352b7ea63b27db02bf4b0014f2961a5d2f7c27643853a4581bb3a5457cb
+      JWT_SECRET: 7f5e11d55e957988b00ce002418680af384219ef98c50d08cbbbdd541978450c
+      AUTH_SIGNING_KEY: 484f921b39c383e6b3e0cc5a7cef3c2cec3d7c8d474ab5102891dc4c2bf63a68
       AUTH_PROVIDER: header
       AUTH_HEADER_USER_EMAIL: X-User-Email
       RATE_LIMIT_ENABLED: true
@@ -72,11 +73,17 @@ services:
       - kms-network
     volumes:
       - ./migrations:/app/migrations:ro,Z
-    healthcheck:
-      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:8080/health"]
-      interval: 30s
-      timeout: 10s
-      retries: 3
+    restart: unless-stopped
+
+  frontend:
+    build:
+      context: ./kms-frontend
+      dockerfile: Dockerfile
+    container_name: kms-frontend
+    ports:
+      - "3000:80"
+    networks:
+      - kms-network
     restart: unless-stopped
 
 volumes: