invoicerr/docker-compose.yml at dev · koo-projects/invoicerr · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
services:
  invoicerr:
    image: ghcr.io/invoicerr-app/invoicerr:latest
    ports:
      - "80:80"
    environment:
      - DATABASE_URL=postgresql://invoicerr:invoicerr@invoicerr_db:5432/invoicerr_db

      - APP_URL=https://invoicerr.example.com # Required for email templates, as it redirects to the app
      - CORS_ORIGINS=http://localhost:5173,https://invoicerr.example.com # Comma-separated list of allowed origins for CORS

      # Required for email features - choose ONE provider below
      # Option 1: SMTP (default, MAIL_PROVIDER can be omitted)
      - MAIL_PROVIDER=smtp
      - SMTP_HOST=smtp-relay.example.com
      - SMTP_USER="username@example.com"
      - SMTP_FROM="user-from@example.com" # Not required if SMTP_USER is the same as SMTP_FROM
      - SMTP_PASSWORD="your_smtp_password"
      - SMTP_PORT=587 # Change this to your SMTP port (default is 587 for TLS)
      - SMTP_SECURE=false # Set to true if your SMTP server requires a secure connection (default is false)

      # Option 2: Brevo (set MAIL_PROVIDER=brevo and comment out the SMTP_* variables above)
      # - MAIL_PROVIDER=brevo
      # - BREVO_API_KEY="your_brevo_api_key"
      # - MAIL_FROM="user-from@example.com" # Sender address, falls back to SMTP_FROM/SMTP_USER if unset

      # OIDC Configuration (example for Authentik)
      - OIDC_ISSUER="https://auth.chevrier.dev"
      - OIDC_NAME="Pocket ID"
      # Endpoints for OIDC
      - OIDC_AUTHORIZATION_ENDPOINT="https://auth.chevrier.dev/authorize"
      - OIDC_TOKEN_ENDPOINT="https://auth.chevrier.dev/token"
      - OIDC_USERINFO_ENDPOINT="https://auth.chevrier.dev/userinfo"
      - OIDC_TOKEN_REVOKE_ENDPOINT="https://auth.chevrier.dev/revoke"
      - OIDC_END_SESSION_ENDPOINT="https://auth.chevrier.dev/end_session"
      - OIDC_JWKS_URI="https://auth.chevrier.dev/.well-known/jwks.json"
      # Client ID and Secret for OIDC
      - OIDC_CLIENT_ID="your-client-id"
      - OIDC_CLIENT_SECRET="your-client-secret"

      # Optional, but recommended for docker deployments
      - JWT_SECRET="your_jwt_secret" # Used for JWT authentication, can be any random string
    depends_on:
      - invoicerr_db

  invoicerr_db:
    image: postgres:15
    environment:
      POSTGRES_USER: invoicerr
      POSTGRES_PASSWORD: invoicerr
      POSTGRES_DB: invoicerr_db
    volumes:
      - db_data:/var/lib/postgresql/data

volumes:
  db_data:
    driver: local