배포 도커 수정

docker/compose.infra.yaml

@@ -1,82 +1,80 @@
 services:
-    postgres:
-        image: postgres:17-alpine
-        container_name: baron_postgres
-        environment:
-            POSTGRES_USER: ${DB_USER:-baron}
-            POSTGRES_PASSWORD: ${DB_PASSWORD:-password}
-            POSTGRES_DB: ${DB_NAME:-baron_sso}
-        ports:
-            - "${DB_PORT:-5432}:5432"
-        volumes:
-            - postgres_data:/var/lib/postgresql/data
-            - ./docker/init-metadata:/docker-entrypoint-initdb.d
-        networks:
-            - baron_net
-        healthcheck:
-            test:
-                [
-                    "CMD-SHELL",
-                    "pg_isready -U ${DB_USER:-baron} -d ${DB_NAME:-baron_sso}",
-                ]
-            interval: 5s
-            timeout: 5s
-            retries: 5
-        restart: always
+  postgres:
+    image: postgres:17-alpine
+    container_name: baron_postgres
+    environment:
+      POSTGRES_USER: "${DB_USER:-baron}"
+      POSTGRES_PASSWORD: "${DB_PASSWORD:-password}"
+      POSTGRES_DB: "${DB_NAME:-baron_sso}"
+    ports:
+      - "${DB_PORT:-5432}:5432"
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+      - ./docker/init-metadata:/docker-entrypoint-initdb.d
+    networks:
+      - baron_net
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          "pg_isready -U ${DB_USER:-baron} -d ${DB_NAME:-baron_sso}",
+        ]
+      interval: 5s
+      timeout: 5s
+      retries: 5
+    restart: always
 
-    clickhouse:
-        image: clickhouse/clickhouse-server:latest
-        container_name: baron_clickhouse
-        restart: always
-        volumes:
-          - clickhouse_data:/var/lib/clickhouse
-        environment:
-            CLICKHOUSE_USER: ${CLICKHOUSE_USER:-baron}
-            CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-password}
-        networks:
-            - baron_net
+  clickhouse:
+    image: clickhouse/clickhouse-server:latest
+    container_name: baron_clickhouse
+    restart: always
+    volumes:
+      - clickhouse_data:/var/lib/clickhouse
+    environment:
+      CLICKHOUSE_USER: "${CLICKHOUSE_USER:-baron}"
+      CLICKHOUSE_PASSWORD: "${CLICKHOUSE_PASSWORD:-password}"
+    networks:
+      - baron_net
 
-    redis:
-        image: redis:7-alpine
-        container_name: baron_redis
-        restart: always
-        command: redis-server --port 6389
-        ports:
-            - "6389:6389"
-        volumes:
-            - redis_data:/data
-        networks:
-            - baron_net
+  redis:
+    image: redis:7-alpine
+    container_name: baron_redis
+    restart: always
+    command: redis-server --port 6389
+    ports:
+      - "6389:6389"
+    volumes:
+      - redis_data:/data
+    networks:
+      - baron_net
 
-    gateway:
-        build:
-            context: ./gateway
-            dockerfile: Dockerfile
-        container_name: baron_gateway
-        restart: always
-        ports:
-            - "${USERFRONT_PORT:-5000}:5000"
-        networks:
-            - baron_net
-            - public_net
-        healthcheck:
-            test: ["CMD", "wget", "-qO-", "http://127.0.0.1:5000/"]
-            interval: 10s
-            timeout: 5s
-            retries: 3
-            start_period: 10s
+  gateway:
+    build:
+      context: ./gateway
+      dockerfile: Dockerfile
+    container_name: baron_gateway
+    restart: always
+    ports:
+      - "${USERFRONT_PORT:-5000}:5000"
+    networks:
+      - baron_net
+      - public_net
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://127.0.0.1:5000/"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
 
 volumes:
-    postgres_data:
-    clickhouse_data:
-    redis_data:
+  postgres_data:
+  clickhouse_data:
+  redis_data:
 
 networks:
-    baron_net:
-        name: baron_net
-        external: true
-        driver: bridge
-    public_net:
-        name: public_net
-        external: true
-
+  baron_net:
+    external: true
+    name: baron_net
+  public_net:
+    external: true
+    name: public_net

docker/compose.ory.yaml

@@ -1,255 +1,92 @@
 services:
-    postgres_ory:
-        image: postgres:${ORY_POSTGRES_TAG:-17-alpine}
-        container_name: ory_postgres
-        environment:
-            - POSTGRES_USER=${ORY_POSTGRES_USER:-ory}
-            - POSTGRES_PASSWORD=${ORY_POSTGRES_PASSWORD:-secret}
-            - POSTGRES_DB=${ORY_POSTGRES_DB:-ory}
-        volumes:
-            - ./docker/ory/init-db:/docker-entrypoint-initdb.d
-            - ory_postgres_data:/var/lib/postgresql/data
-        networks:
-            - ory-net
-        healthcheck:
-            test:
-                [
-                    "CMD-SHELL",
-                    "pg_isready -U ${ORY_POSTGRES_USER:-ory} -d ${KRATOS_DB:-ory_kratos}",
-                ]
-            interval: 5s
-            timeout: 5s
-            retries: 5
+  postgres_ory:
+    image: postgres:${ORY_POSTGRES_TAG:-17-alpine}
+    container_name: ory_postgres
+    environment:
+      - POSTGRES_USER=${ORY_POSTGRES_USER:-ory}
+      - POSTGRES_PASSWORD=${ORY_POSTGRES_PASSWORD:-secret}
+      - POSTGRES_DB=${ORY_POSTGRES_DB:-ory}
+    volumes:
+      - ./docker/ory/init-db:/docker-entrypoint-initdb.d
+      - ory_postgres_data:/var/lib/postgresql/data
+    networks:
+      - ory-net
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          "pg_isready -U ${ORY_POSTGRES_USER:-ory} -d ${KRATOS_DB:-ory_kratos}",
+        ]
+      interval: 5s
+      timeout: 5s
+      retries: 5
 
-    # --- Kratos ---
-    kratos-migrate:
-        image: oryd/kratos:${KRATOS_VERSION:-v25.4.0}
-        environment:
-            - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KRATOS_DB:-ory_kratos}?sslmode=disable&max_conns=20
-            - KRATOS_SERVE_PUBLIC_BASE_URL=${KRATOS_BROWSER_URL:-http://localhost:4433}
-            - KRATOS_SERVE_ADMIN_BASE_URL=${KRATOS_ADMIN_URL:-http://kratos:4434}
-            - KRATOS_SELFSERVICE_DEFAULT_BROWSER_RETURN_URL=${KRATOS_UI_URL:-http://localhost:5000}
-            - KRATOS_SELFSERVICE_ALLOWED_RETURN_URLS=["${KRATOS_UI_URL:-http://localhost:5000}","${USERFRONT_URL:-http://localhost:5000}"]
-            - KRATOS_SELFSERVICE_FLOWS_ERROR_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/error
-            - KRATOS_SELFSERVICE_FLOWS_SETTINGS_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/error?error=settings_disabled
-            - KRATOS_SELFSERVICE_FLOWS_RECOVERY_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/recovery
-            - KRATOS_SELFSERVICE_FLOWS_VERIFICATION_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/verification
-            - KRATOS_SELFSERVICE_FLOWS_LOGIN_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/login
-            - KRATOS_SELFSERVICE_FLOWS_REGISTRATION_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/registration
-            - KRATOS_SELFSERVICE_FLOWS_LOGOUT_AFTER_DEFAULT_BROWSER_RETURN_URL=${KRATOS_UI_URL:-http://localhost:5000}/login
-        volumes:
-            - ./docker/ory/kratos:/etc/config/kratos
-        command: -c /etc/config/kratos/kratos.yml migrate sql -e --yes
-        depends_on:
-            postgres_ory:
-                condition: service_healthy
-        networks:
-            - ory-net
+  kratos-migrate:
+    image: oryd/kratos:${KRATOS_VERSION:-v25.4.0}
+    environment:
+      - DSN="postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KRATOS_DB:-ory_kratos}?sslmode=disable&max_conns=20"
+      - KRATOS_SERVE_PUBLIC_BASE_URL="${KRATOS_BROWSER_URL:-http://localhost:4433}"
+      - KRATOS_SERVE_ADMIN_BASE_URL="${KRATOS_ADMIN_URL:-http://kratos:4434}"
+      - KRATOS_SELFSERVICE_DEFAULT_BROWSER_RETURN_URL="${KRATOS_UI_URL:-http://localhost:5000}"
+      - KRATOS_SELFSERVICE_ALLOWED_RETURN_URLS='["${KRATOS_UI_URL:-http://localhost:5000}","${USERFRONT_URL:-http://localhost:5000}"]'
+    volumes:
+      - ./docker/ory/kratos:/etc/config/kratos
+    command: -c /etc/config/kratos/kratos.yml migrate sql -e --yes
+    depends_on:
+      postgres_ory:
+        condition: service_healthy
+    networks:
+      - ory-net
 
-    kratos:
-        image: oryd/kratos:${KRATOS_VERSION:-v25.4.0}
-        container_name: ory_kratos
-        environment:
-            - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KRATOS_DB:-ory_kratos}?sslmode=disable&max_conns=20
-            - COOKIE_SECRET=${COOKIE_SECRET:-localcookie123}
-            - KRATOS_SERVE_PUBLIC_BASE_URL=${KRATOS_BROWSER_URL:-http://localhost:4433}
-            - KRATOS_SERVE_ADMIN_BASE_URL=${KRATOS_ADMIN_URL:-http://kratos:4434}
-            - KRATOS_SELFSERVICE_DEFAULT_BROWSER_RETURN_URL=${KRATOS_UI_URL:-http://localhost:5000}
-            - KRATOS_SELFSERVICE_ALLOWED_RETURN_URLS=["${KRATOS_UI_URL:-http://localhost:5000}","${USERFRONT_URL:-http://localhost:5000}"]
-            - KRATOS_SELFSERVICE_FLOWS_ERROR_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/error
-            - KRATOS_SELFSERVICE_FLOWS_SETTINGS_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/error?error=settings_disabled
-            - KRATOS_SELFSERVICE_FLOWS_RECOVERY_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/recovery
-            - KRATOS_SELFSERVICE_FLOWS_VERIFICATION_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/verification
-            - KRATOS_SELFSERVICE_FLOWS_LOGIN_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/login
-            - KRATOS_SELFSERVICE_FLOWS_REGISTRATION_UI_URL=${KRATOS_UI_URL:-http://localhost:5000}/registration
-            - KRATOS_SELFSERVICE_FLOWS_LOGOUT_AFTER_DEFAULT_BROWSER_RETURN_URL=${KRATOS_UI_URL:-http://localhost:5000}/login
-        volumes:
-            - ./docker/ory/kratos:/etc/config/kratos
-        command: serve -c /etc/config/kratos/kratos.yml --dev --watch-courier
-        depends_on:
-            kratos-migrate:
-                condition: service_completed_successfully
-        networks:
-            - ory-net
-            - kratosnet
+  kratos:
+    image: oryd/kratos:${KRATOS_VERSION:-v25.4.0}
+    container_name: ory_kratos
+    environment:
+      - DSN="postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KRATOS_DB:-ory_kratos}?sslmode=disable&max_conns=20"
+      - COOKIE_SECRET="${COOKIE_SECRET:-localcookie123}"
+      - KRATOS_SERVE_PUBLIC_BASE_URL="${KRATOS_BROWSER_URL:-http://localhost:4433}"
+      - KRATOS_SERVE_ADMIN_BASE_URL="${KRATOS_ADMIN_URL:-http://kratos:4434}"
+      - KRATOS_SELFSERVICE_DEFAULT_BROWSER_RETURN_URL="${KRATOS_UI_URL:-http://localhost:5000}"
+      - KRATOS_SELFSERVICE_ALLOWED_RETURN_URLS='["${KRATOS_UI_URL:-http://localhost:5000}","${USERFRONT_URL:-http://localhost:5000}"]'
+    volumes:
+      - ./docker/ory/kratos:/etc/config/kratos
+    command: serve -c /etc/config/kratos/kratos.yml --dev
+    depends_on:
+      kratos-migrate:
+        condition: service_completed_successfully
+    networks:
+      - ory-net
+      - kratosnet
 
-    # --- Hydra ---
-    hydra-migrate:
-        image: oryd/hydra:${HYDRA_VERSION:-v25.4.0}
-        environment:
-            - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${HYDRA_DB:-ory_hydra}?sslmode=disable&max_conns=20
-        command: migrate sql up -e --yes
-        depends_on:
-            postgres_ory:
-                condition: service_healthy
-        networks:
-            - ory-net
-
-    hydra:
-        image: oryd/hydra:${HYDRA_VERSION:-v25.4.0}
-        container_name: ory_hydra
-        environment:
-            - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${HYDRA_DB:-ory_hydra}?sslmode=disable&max_conns=20
-            - URLS_SELF_ISSUER=${USERFRONT_URL:-http://localhost:5000}/oidc
-            - URLS_LOGIN=${USERFRONT_URL:-http://localhost:5000}/login
-            - URLS_CONSENT=${USERFRONT_URL:-http://localhost:5000}/consent
-            - SECRETS_SYSTEM=${ORY_POSTGRES_PASSWORD}
-        volumes:
-            - ./docker/ory/hydra:/etc/config/hydra
-        command: serve -c /etc/config/hydra/hydra.yml all --dev
-        depends_on:
-            hydra-migrate:
-                condition: service_completed_successfully
-        networks:
-            - ory-net
-            - hydranet
-
-    # --- Keto ---
-    keto-migrate:
-        image: oryd/keto:${KETO_VERSION:-v25.4.0}
-        environment:
-            - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KETO_DB:-ory_keto}?sslmode=disable&max_conns=20
-        volumes:
-            - ./docker/ory/keto:/etc/config/keto
-        command: ["migrate", "up", "-c", "/etc/config/keto/keto.yml", "--yes"]
-        depends_on:
-            postgres_ory:
-                condition: service_healthy
-        networks:
-            - ory-net
-
-    keto:
-        image: oryd/keto:${KETO_VERSION:-v25.4.0}
-        container_name: ory_keto
-        environment:
-            - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KETO_DB:-ory_keto}?sslmode=disable&max_conns=20
-        volumes:
-            - ./docker/ory/keto:/etc/config/keto
-        command: serve -c /etc/config/keto/keto.yml
-        depends_on:
-            keto-migrate:
-                condition: service_completed_successfully
-        networks:
-            - ory-net
-
-    # --- Oathkeeper ---
-    oathkeeper:
-        image: oryd/oathkeeper:${OATHKEEPER_VERSION:-v25.4.0}
-        container_name: ory_oathkeeper
-        user: "${OATHKEEPER_UID:-1001}:${OATHKEEPER_GID:-1001}"
-        ports:
-            - "4457:4455" # Proxy
-        environment:
-            - APP_ENV=${APP_ENV:-development}
-            - LOG_LEVEL=debug
-            - OATHKEEPER_INTROSPECT_CLIENT_ID=${OATHKEEPER_INTROSPECT_CLIENT_ID:-oathkeeper-introspect}
-            - OATHKEEPER_INTROSPECT_CLIENT_SECRET=${OATHKEEPER_INTROSPECT_CLIENT_SECRET:-oathkeeper-secret}
-        volumes:
-            - ./docker/ory/oathkeeper:/etc/config/oathkeeper
-            - ./docker/ory/oathkeeper/logs:/var/log/oathkeeper
-        entrypoint: ["/etc/config/oathkeeper/entrypoint.sh"]
-        networks:
-            - ory-net
-            - public_net
-
-    ory_clickhouse:
-        image: clickhouse/clickhouse-server:latest
-        container_name: ory_clickhouse
-        environment:
-            - CLICKHOUSE_USER=${ORY_CLICKHOUSE_USER:-ory}
-            - CLICKHOUSE_PASSWORD=${ORY_CLICKHOUSE_PASSWORD:-orypass}
-        volumes:
-            - ory_clickhouse_data:/var/lib/clickhouse
-            - ./docker/ory/clickhouse:/docker-entrypoint-initdb.d
-        networks:
-            - ory-net
-
-    ory_vector:
-        image: timberio/vector:0.36.0-alpine
-        container_name: ory_vector
-        volumes:
-            - ./docker/ory/vector:/etc/vector
-            - ./docker/ory/oathkeeper/logs:/var/log/oathkeeper
-        command: ["-c", "/etc/vector/vector.toml"]
-        depends_on:
-            - oathkeeper
-            - ory_clickhouse
-        networks:
-            - ory-net
-
-    # --- 초기화 & 헬스체크 ---
-    ory_stack_check:
-        image: alpine:latest
-        container_name: ory_stack_check
-        command: >
-            /bin/sh -c "
-              apk add --no-cache curl;
-              echo 'Wait for services...';
-              until curl -s http://kratos:4433/health/ready; do sleep 1; done;
-              until curl -s http://hydra:4444/health/ready; do sleep 1; done;
-              until curl -s http://keto:4466/health/ready; do sleep 1; done;
-              echo 'Ory Stack is fully operational!';"
-        depends_on:
-            - kratos
-            - hydra
-            - keto
-        networks:
-            - ory-net
-
-    # 기본 RP (Admin Front 등) 자동 등록 컨테이너
-    init-rp:
-        image: oryd/hydra:${HYDRA_VERSION:-v25.4.0}
-        environment:
-            - HYDRA_ADMIN_URL=http://hydra:4445
-            - OATHKEEPER_INTROSPECT_CLIENT_ID=${OATHKEEPER_INTROSPECT_CLIENT_ID:-oathkeeper-introspect}
-            - OATHKEEPER_INTROSPECT_CLIENT_SECRET=${OATHKEEPER_INTROSPECT_CLIENT_SECRET:-oathkeeper-secret}
-        command: |
-            hydra clients create \
-              --endpoint http://hydra:4445 \
-              --id adminfront \
-              --secret admin-secret \
-              --grant-types authorization_code,refresh_token \
-              --response-types code \
-              --scope openid,offline_access,profile,email \
-              --callbacks http://localhost:5000/callback;
-
-            hydra clients create \
-              --endpoint http://hydra:4445 \
-              --id devfront \
-              --grant-types authorization_code,refresh_token \
-              --response-types code \
-              --scope openid,offline_access,profile,email \
-              --token-endpoint-auth-method none \
-              --response-types code \
-              --callbacks http://localhost:5174/callback;
-
-            hydra clients create \
-              --endpoint http://hydra:4445 \
-              --id "$OATHKEEPER_INTROSPECT_CLIENT_ID" \
-              --secret "$OATHKEEPER_INTROSPECT_CLIENT_SECRET" \
-              --grant-types client_credentials \
-              --response-types token \
-              --scope openid,offline_access,profile,email;
-        depends_on:
-            ory_stack_check:
-                condition: service_completed_successfully
-        networks:
-            - hydranet
+  hydra:
+    image: oryd/hydra:${HYDRA_VERSION:-v25.4.0}
+    container_name: ory_hydra
+    environment:
+      - DSN="postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${HYDRA_DB:-ory_hydra}?sslmode=disable&max_conns=20"
+      - URLS_SELF_ISSUER="${USERFRONT_URL:-http://localhost:5000}/oidc"
+      - URLS_LOGIN="${USERFRONT_URL:-http://localhost:5000}/login"
+      - URLS_CONSENT="${USERFRONT_URL:-http://localhost:5000}/consent"
+      - SECRETS_SYSTEM="${ORY_POSTGRES_PASSWORD}"
+    volumes:
+      - ./docker/ory/hydra:/etc/config/hydra
+    command: serve -c /etc/config/hydra/hydra.yml all --dev
+    networks:
+      - ory-net
+      - hydranet
 
 volumes:
-    ory_postgres_data:
-    ory_clickhouse_data:
+  ory_postgres_data:
 
 networks:
-    ory-net:
-        external: true
-        name: ory-net
-    hydranet:
-        external: true
-        name: hydranet
-    kratosnet:
-        external: true
-        name: kratosnet
-    public_net:
-        external: true
-        name: public_net
+  ory-net:
+    external: true
+    name: ory-net
+  hydranet:
+    external: true
+    name: hydranet
+  kratosnet:
+    external: true
+    name: kratosnet
+  public_net:
+    external: true
+    name: public_net

docker/docker-compose.staging.template.yaml

@@ -8,114 +8,26 @@ services:
     env_file:
       - .env
     environment:
-      - APP_ENV=stage # 스테이징 환경 명시
-      - COOKIE_SECRET=${COOKIE_SECRET}
+      - APP_ENV=stage
+      - COOKIE_SECRET="${COOKIE_SECRET}"
       - DB_HOST=postgres
       - CLICKHOUSE_HOST=clickhouse
-      - CLICKHOUSE_PORT=${CLICKHOUSE_PORT_NATIVE:-9000}
-      - CLICKHOUSE_USER=${CLICKHOUSE_USER:-baron}
-      - CLICKHOUSE_PASSWORD=${CLICKHOUSE_PASSWORD:-password}
-      - USERFRONT_URL=${USERFRONT_URL:-http://sso.hmac.kr}
-      - REDIS_ADDR=${REDIS_ADDR:-redis:6389}
-      - IDP_PROVIDER=${IDP_PROVIDER:-ory}
-      - KRATOS_ADMIN_URL=${KRATOS_ADMIN_URL:-http://ory_kratos:4434}
-      - HYDRA_ADMIN_URL=${HYDRA_ADMIN_URL:-http://ory_hydra:4445}
-      - HYDRA_PUBLIC_URL=${HYDRA_PUBLIC_URL:-http://ory_hydra:4444}
-      - PROFILE_CACHE_TTL=${PROFILE_CACHE_TTL:-30m}
-      - DESCOPE_PROJECT_ID=${DESCOPE_PROJECT_ID}
-      - DESCOPE_MANAGEMENT_KEY=${DESCOPE_MANAGEMENT_KEY}
-      - NAVER_CLOUD_ACCESS_KEY=${NAVER_CLOUD_ACCESS_KEY}
-      - NAVER_CLOUD_SECRET_KEY=${NAVER_CLOUD_SECRET_KEY}
-      - NAVER_CLOUD_SERVICE_ID=${NAVER_CLOUD_SERVICE_ID}
-      - NAVER_SENDER_PHONE_NUMBER=${NAVER_SENDER_PHONE_NUMBER}
-      - AWS_REGION=${AWS_REGION}
-      - AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
-      - AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
-      - AWS_SES_SENDER=${AWS_SES_SENDER}
+      - CLICKHOUSE_PORT="${CLICKHOUSE_PORT_NATIVE:-9000}"
+      - CLICKHOUSE_USER="${CLICKHOUSE_USER:-baron}"
+      - CLICKHOUSE_PASSWORD="${CLICKHOUSE_PASSWORD:-password}"
+      - USERFRONT_URL="${USERFRONT_URL:-http://sso.hmac.kr}"
+      - REDIS_ADDR="${REDIS_ADDR:-redis:6389}"
+      - IDP_PROVIDER=ory
+      - KRATOS_ADMIN_URL="${KRATOS_ADMIN_URL:-http://ory_kratos:4434}"
+      - HYDRA_ADMIN_URL="${HYDRA_ADMIN_URL:-http://ory_hydra:4445}"
+      - HYDRA_PUBLIC_URL="${HYDRA_PUBLIC_URL:-http://ory_hydra:4444}"
+      - PROFILE_CACHE_TTL="${PROFILE_CACHE_TTL:-30m}"
     ports:
       - "${BACKEND_PORT:-3000}:3000"
-    depends_on:
-      infra_check:
-        condition: service_healthy
-      ory_kratos: # Kratos SoT이므로 명시적 의존성 추가
-        condition: service_started
-      ory_hydra: # Hydra 의존성 추가
-        condition: service_started
-    healthcheck:
-      test: ["CMD", "wget", "-qO-", "http://127.0.0.1:3000/health"]
-      interval: 10s
-      timeout: 5s
-      retries: 3
-      start_period: 10s
     networks:
       - baron_net
       - ory-net
 
-  adminfront:
-    image: ${ADMINFRONT_IMAGE_NAME}:${IMAGE_TAG}
-    container_name: baron_adminfront
-    restart: unless-stopped
-    env_file:
-      - .env
-    environment:
-      - APP_ENV=stage
-      - API_PROXY_TARGET=http://baron_backend:${BACKEND_PORT:-3000}
-      - ADMIN_EMAIL=${ADMIN_EMAIL}
-      - ADMIN_PASSWORD=${ADMIN_PASSWORD}
-    ports:
-      - "${ADMINFRONT_PORT:-5173}:5173"
-    networks:
-      - baron_net
-    depends_on:
-      backend:
-        condition: service_healthy
-
-  devfront:
-    image: ${DEVFRONT_IMAGE_NAME}:${IMAGE_TAG}
-    container_name: baron_devfront
-    restart: unless-stopped
-    env_file:
-      - .env
-    environment:
-      - APP_ENV=stage
-      - API_PROXY_TARGET=http://baron_backend:${BACKEND_PORT:-3000}
-    ports:
-      - "${DEVFRONT_PORT:-5174}:5173"
-    networks:
-      - baron_net
-    depends_on:
-      backend:
-        condition: service_healthy
-
-  userfront:
-    image: ${USERFRONT_IMAGE_NAME}:${IMAGE_TAG}
-    container_name: baron_userfront
-    restart: unless-stopped
-    env_file:
-      - .env
-    environment:
-      - USERFRONT_URL=${USERFRONT_URL:-http://sso.hmac.kr}
-      - BACKEND_URL=${BACKEND_URL:-http://sso.hmac.kr/api}
-      - APP_ENV=stage
-      - OATHKEEPER_PUBLIC_URL=${OATHKEEPER_PUBLIC_URL:-http://sso.hmac.kr}
-      - KRATOS_BROWSER_URL=${KRATOS_BROWSER_URL:-http://sso.hmac.kr/auth}
-      - KRATOS_UI_URL=${KRATOS_UI_URL:-http://sso.hmac.kr}
-      - HYDRA_PUBLIC_URL=${HYDRA_PUBLIC_URL:-http://sso.hmac.kr/oidc}
-    ports:
-      - "${USERFRONT_PORT:-5000}:80"
-    depends_on:
-      backend:
-        condition: service_healthy
-    networks:
-      - baron_net
-      - ory-net
-
-  infra_check:
-    image: alpine
-    command: ["echo", "Infrastructure assumed running"]
-    networks:
-      - baron_net
-
 networks:
   baron_net:
     external: true