docker-compose.yml

volumes:
  keymaterial:

secrets:
  mysql-root-password:
    file: docker/secrets/mysql-root-password
  mysql-password:
    file: docker/secrets/mysql-password
  admin-password:
    file: docker/secrets/admin-password

services:

  db:
    image: mysql
    command: --default-authentication-plugin=mysql_native_password
    environment:
      MYSQL_ROOT_PASSWORD_FILE: /run/secrets/mysql-root-password
      MYSQL_PASSWORD_FILE: /run/secrets/mysql-password
      MYSQL_USER: "coveryourtracks"
      MYSQL_DATABASE: "coveryourtracks"
    volumes:
      - ./examples/sql:/docker-entrypoint-initdb.d
    secrets:
      - mysql-root-password
      - mysql-password

  app:
    build: .
    volumes:
      - .:/opt
      - keymaterial:/tmp
    secrets:
      - mysql-password
      - admin-password

  cron:
    build: .
    entrypoint: []
    command: bash -c 'touch /etc/crontab && cron -f'
    volumes:
      - keymaterial:/tmp
    secrets:
      - admin-password

  nginx:
    image: nginx
    volumes:
      - ./examples/nginx/extra:/etc/nginx/extra
      - ./examples/nginx/conf.d:/etc/nginx/conf.d
    ports:
      - "443:443"