docker-compose.yml

version: '3'

services:
  postgresql:
    container_name: postgresql
    image: docker.io/postgres:15.3
    env_file: mastodon.prod.env
    restart: always
    healthcheck:
      test: ['CMD', 'pg_isready', '-U', 'postgres']
    volumes:
      - /opt/mastodon/database/postgresql:/var/lib/postgresql/data
    networks:
      - internal_network

  redis:
    container_name: redis
    image: docker.io/redis:7.0.11
    restart: always
    healthcheck:
      test: ['CMD', 'redis-cli', 'ping']
    volumes:
      - /opt/mastodon/database/redis:/data
    networks:
      - internal_network

  web:
    container_name: mastodon-web
    image: ghcr.io/mastodon/mastodon:v4.1.2@sha256:6b18e6d0eda476397d48cc36ac040b5da9c73503e374708a815a7f76db740576
    env_file:
      - mastodon.prod.env
    command: bash -c "bundle exec puma -C config/puma.rb"
    restart: always
    depends_on:
      - postgresql
      - redis
      - elasticsearch 
    ports:
      - '127.0.0.1:3000:3000'
    networks:
      - internal_network
      - external_network
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.photoprism-social.loadbalancer.server.port=3000"
      - "traefik.http.services.photoprism-social.loadbalancer.server.scheme=http"
      - "traefik.http.routers.photoprism-social.entrypoints=websecure"
      - "traefik.http.routers.photoprism-social.rule=Host(`localssl.dev`, `app.localssl.dev`)"
      - "traefik.http.routers.photoprism-social.tls.domains[0].main=localssl.dev"
      - "traefik.http.routers.photoprism-social.tls.domains[0].sans=*.localssl.dev"
      - "traefik.http.routers.photoprism-social.tls=true"
    healthcheck:
      test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
    volumes:
      - /opt/mastodon/web/system:/mastodon/public/system

  streaming:
    container_name: mastodon-streaming
    image: ghcr.io/mastodon/mastodon:v4.1.2@sha256:6b18e6d0eda476397d48cc36ac040b5da9c73503e374708a815a7f76db740576
    env_file:
      - mastodon.prod.env
    command: node ./streaming
    restart: always
    depends_on:
      - postgresql
      - redis
    ports:
      - '127.0.0.1:4000:4000'
    networks:
      - internal_network
      - external_network
    healthcheck:
      test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']

  sidekiq:
    container_name: mastodon-sidekiq
    image: ghcr.io/mastodon/mastodon:v4.1.2@sha256:6b18e6d0eda476397d48cc36ac040b5da9c73503e374708a815a7f76db740576
    env_file:
      - mastodon.prod.env
    command: bundle exec sidekiq -c 25 -q default,8 -q push,6 -q ingress,4 -q mailers,2 -q pull -q scheduler
    restart: always
    depends_on:
      - postgresql
      - redis
      - web
    networks:
      - internal_network
      - external_network
    healthcheck:
      test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
    volumes:
      - /opt/mastodon/web/system:/mastodon/public/system

  tootctl:
    container_name: tootctl
    image: ghcr.io/mastodon/mastodon:v4.1.2@sha256:6b18e6d0eda476397d48cc36ac040b5da9c73503e374708a815a7f76db740576
    env_file:
      - mastodon.prod.env
    command: bash -c "bundle exec bin/tootctl $*"
    networks:
      - internal_network
  elasticsearch:
    image: docker.io/elasticsearch:7.17.10
    container_name: elasticsearch
    restart: always
    env_file: mastodon.prod.env
    environment:
      - cluster.name=elasticsearch-mastodon
      - discovery.type=single-node
      - bootstrap.memory_lock=true
      - xpack.security.enabled=true
      - ingest.geoip.downloader.enabled=false
    ulimits:
      memlock:
        soft: -1
        hard: -1
    healthcheck:
      test: ["CMD-SHELL", "nc -z elasticsearch 9200"]
    volumes:
      - /opt/mastodon/database/elasticsearch:/usr/share/elasticsearch/data
    networks:
      - internal_network
  traefik:
    image: photoprism/traefik:latest
    ports:
      - "80:80" # HTTP (redirects to HTTPS)
      - "443:443" # HTTPS (required)
    labels:
      - "traefik.enable=true"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock" # enables Traefik to watch services

networks:
  external_network:
  internal_network:
    internal: true