1
0
forked from baron/baron-sso

환경변수 추가

This commit is contained in:
2026-02-09 13:08:18 +09:00
parent eb34d387ad
commit 5d66e983cd
2 changed files with 59 additions and 40 deletions

View File

@@ -57,19 +57,31 @@ jobs:
APP_ENV=stage APP_ENV=stage
TZ=Asia/Seoul TZ=Asia/Seoul
IDP_PROVIDER=ory IDP_PROVIDER=ory
# DB & Clickhouse
DB_PORT=${{ vars.DB_PORT }} DB_PORT=${{ vars.DB_PORT }}
CLICKHOUSE_PORT_HTTP=${{ vars.CLICKHOUSE_PORT_HTTP }} CLICKHOUSE_PORT_HTTP=${{ vars.CLICKHOUSE_PORT_HTTP }}
CLICKHOUSE_PORT_NATIVE=${{ vars.CLICKHOUSE_PORT_NATIVE }} CLICKHOUSE_PORT_NATIVE=${{ vars.CLICKHOUSE_PORT_NATIVE }}
CLICKHOUSE_HOST=baron_clickhouse
CLICKHOUSE_USER=${{ vars.CLICKHOUSE_USER }}
CLICKHOUSE_PASSWORD=${{ vars.CLICKHOUSE_PASSWORD }}
BACKEND_PORT=${{ vars.BACKEND_PORT }} BACKEND_PORT=${{ vars.BACKEND_PORT }}
ADMINFRONT_PORT=${{ vars.ADMINFRONT_PORT }} ADMINFRONT_PORT=${{ vars.ADMINFRONT_PORT }}
DEVFRONT_PORT=${{ vars.DEVFRONT_PORT }} DEVFRONT_PORT=${{ vars.DEVFRONT_PORT }}
USERFRONT_PORT=${{ vars.USERFRONT_PORT }} USERFRONT_PORT=${{ vars.USERFRONT_PORT }}
# [추가] Oathkeeper 명시적 URL (컨테이너 이름 사용)
OATHKEEPER_API_URL=http://ory_oathkeeper:4456
DB_USER=${{ vars.DB_USER }} DB_USER=${{ vars.DB_USER }}
DB_PASSWORD=${{ secrets.STG_DB_PASSWORD }} DB_PASSWORD=${{ secrets.STG_DB_PASSWORD }}
DB_NAME=${{ vars.DB_NAME }} DB_NAME=${{ vars.DB_NAME }}
COOKIE_SECRET=${{ secrets.STG_COOKIE_SECRET }} COOKIE_SECRET=${{ secrets.STG_COOKIE_SECRET }}
JWT_SECRET=${{ secrets.STG_JWT_SECRET }} JWT_SECRET=${{ secrets.STG_JWT_SECRET }}
REDIS_ADDR=${{ vars.REDIS_ADDR }} REDIS_ADDR=$(echo "${{ vars.REDIS_ADDR }}" | tr -d '"')
CORS_ALLOWED_ORIGINS=${{ vars.CORS_ALLOWED_ORIGINS }} CORS_ALLOWED_ORIGINS=${{ vars.CORS_ALLOWED_ORIGINS }}
AUDIT_WORKER_COUNT=5 AUDIT_WORKER_COUNT=5
AUDIT_QUEUE_SIZE=2000 AUDIT_QUEUE_SIZE=2000

View File

@@ -11,20 +11,29 @@ services:
- APP_ENV=stage - APP_ENV=stage
- GO_ENV=stage - GO_ENV=stage
- COOKIE_SECRET="${COOKIE_SECRET}" - COOKIE_SECRET="${COOKIE_SECRET}"
- DB_HOST=postgres
- CLICKHOUSE_HOST=clickhouse # [수정] Infra Compose의 컨테이너 이름과 일치
- CLICKHOUSE_PORT="${CLICKHOUSE_PORT_NATIVE:-9000}" - DB_HOST=baron_postgres
- CLICKHOUSE_HOST=baron_clickhouse
# [수정] 포트 변수 확실하게 매핑 (기본값 9000)
- CLICKHOUSE_PORT=${CLICKHOUSE_PORT_NATIVE:-9000}
- CLICKHOUSE_USER="${CLICKHOUSE_USER:-baron}" - CLICKHOUSE_USER="${CLICKHOUSE_USER:-baron}"
- CLICKHOUSE_PASSWORD="${CLICKHOUSE_PASSWORD:-password}" - CLICKHOUSE_PASSWORD="${CLICKHOUSE_PASSWORD:-password}"
- USERFRONT_URL="${USERFRONT_URL:-https://sso.hmac.kr}" - USERFRONT_URL="${USERFRONT_URL:-https://sso.hmac.kr}"
- REDIS_ADDR="${REDIS_ADDR:-redis:6389}" - REDIS_ADDR="${REDIS_ADDR:-baron_redis:6389}"
- IDP_PROVIDER=ory - IDP_PROVIDER=ory
# Ory Service URLs
- KRATOS_ADMIN_URL="${KRATOS_ADMIN_URL:-http://ory_kratos:4434}" - KRATOS_ADMIN_URL="${KRATOS_ADMIN_URL:-http://ory_kratos:4434}"
- HYDRA_ADMIN_URL="${HYDRA_ADMIN_URL:-http://ory_hydra:4445}" - HYDRA_ADMIN_URL="${HYDRA_ADMIN_URL:-http://ory_hydra:4445}"
- HYDRA_PUBLIC_URL="${HYDRA_PUBLIC_URL:-http://ory_hydra:4444}" - HYDRA_PUBLIC_URL="${HYDRA_PUBLIC_URL:-http://ory_hydra:4444}"
# [추가] Oathkeeper URL 명시 (DNS 문제 해결)
- OATHKEEPER_API_URL=${OATHKEEPER_API_URL:-http://ory_oathkeeper:4456}
- PROFILE_CACHE_TTL="${PROFILE_CACHE_TTL:-30m}" - PROFILE_CACHE_TTL="${PROFILE_CACHE_TTL:-30m}"
# Oathkeeper URL이 필요하다면 명시 (일반적으로 내부 DNS 사용시 불필요하나 확실히 하기 위해)
- OATHKEEPER_API_URL=http://ory_oathkeeper:4456
ports: ports:
- "${BACKEND_PORT:-3000}:3000" - "${BACKEND_PORT:-3000}:3000"
depends_on: depends_on:
@@ -33,14 +42,12 @@ services:
networks: networks:
- baron_net - baron_net
- ory-net - ory-net
# [수정됨] Healthcheck 시간을 넉넉하게 늘림
healthcheck: healthcheck:
test: ["CMD", "wget", "-qO-", "http://127.0.0.1:3000/health"] test: ["CMD", "wget", "-qO-", "http://127.0.0.1:3000/health"]
interval: 10s interval: 10s
timeout: 5s timeout: 5s
retries: 10 # 3회 -> 10회 (최대 10번 재시도) retries: 10
start_period: 60s # 10초 -> 60초 (처음 1분간은 실패해도 봐줌) start_period: 60s
adminfront: adminfront:
image: ${ADMINFRONT_IMAGE_NAME}:${IMAGE_TAG} image: ${ADMINFRONT_IMAGE_NAME}:${IMAGE_TAG}