ansible/roles/services/templates/compose-files/membersystem.yml.j2

{# code: language=ansible-jinja #}
# THIS FILE IS MANAGED BY ANSIBLE

version: "3.8"

services:
  app:
    image: docker.data.coop/membersystem:{{ services.membersystem.version }}
    restart: always
    user: "$UID:$GID"
    tty: true
    networks:
      - default
      - external_services
      - postfix
    environment:
      SECRET_KEY: "{{ membersystem_secrets.secret_key }}"
      DATABASE_URL: postgres://postgres:{{ postgres_passwords.membersystem }}@postgres:5432/postgres
      POSTGRES_HOST: postgres
      POSTGRES_PORT: 5432
      EMAIL_BACKEND: django.core.mail.backends.smtp.EmailBackend
      EMAIL_URL: smtp://noop@{{ smtp_host }}:{{ smtp_port }}
      VIRTUAL_HOST: "{{ services.membersystem.domain }}"
      VIRTUAL_PORT: "8000"
      LETSENCRYPT_HOST: "{{ services.membersystem.domain }}"
      LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"
      ALLOWED_HOSTS: "{{ services.membersystem.domain }}"
      CSRF_TRUSTED_ORIGINS: https://{{ services.membersystem.domain }}
      DJANGO_ADMINS: "{{ services.membersystem.django_admins }}"
      DEFAULT_FROM_EMAIL: noreply@{{ services.membersystem.domain }}
      STRIPE_API_KEY: "{{ membersystem_secrets.stripe_api_key }}"
      STRIPE_ENDPOINT_SECRET: "{{ membersystem_secrets.stripe_endpoint_secret }}"
    depends_on:
      - postgres

  postgres:
    image: postgres:{{ services.membersystem.postgres_version }}
    restart: always
    volumes:
      - "./postgres/data:/var/lib/postgresql/data"
    environment:
      POSTGRES_PASSWORD: "{{ postgres_passwords.membersystem }}"

networks:
  external_services:
    external: true
  postfix:
    external: true