production 푸시 초안

deploy/templates/docker-compose.yaml

@@ -288,7 +288,7 @@ services:
     ports:
       - "${BACKEND_PORT}:${BACKEND_PORT}"
     volumes:
-      - ../../adminfront/seed-tenant.csv:/app/seed-tenant.csv:ro
+      - ${SOURCE_ROOT:-../..}/adminfront/seed-tenant.csv:/app/seed-tenant.csv:ro
     networks: [app_net]
     depends_on:
       postgres: { condition: service_healthy }
@@ -297,7 +297,7 @@ services:
 
   gateway:
     build:
-      context: ../..
+      context: ${SOURCE_ROOT:-../..}
       dockerfile: ./userfront/Dockerfile
       target: production
     container_name: ${COMPOSE_PROJECT_NAME}_gateway
@@ -305,11 +305,20 @@ services:
       - "${USERFRONT_PORT}:80"
     volumes:
       - ./gateway/nginx.conf:/etc/nginx/nginx.conf:ro
-    networks: [app_net]
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=${TRAEFIK_PUBLIC_NETWORK:-traefik-public}"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-gateway.rule=Host(`${PUBLIC_HOST}`)"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-gateway.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-gateway.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-myresolver}"
+      - "traefik.http.services.${COMPOSE_PROJECT_NAME}-gateway.loadbalancer.server.port=80"
+    networks:
+      - app_net
+      - traefik_public
 
   adminfront:
     build:
-      context: ../..
+      context: ${SOURCE_ROOT:-../..}
       dockerfile: ./adminfront/Dockerfile
       args:
         VITE_ADMIN_PUBLIC_URL: ${ADMINFRONT_URL}
@@ -323,11 +332,20 @@ services:
       - API_PROXY_TARGET=http://backend:${BACKEND_PORT}
     ports:
       - "${ADMINFRONT_PORT}:5173"
-    networks: [app_net]
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=${TRAEFIK_PUBLIC_NETWORK:-traefik-public}"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-adminfront.rule=Host(`${ADMINFRONT_HOST}`)"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-adminfront.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-adminfront.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-myresolver}"
+      - "traefik.http.services.${COMPOSE_PROJECT_NAME}-adminfront.loadbalancer.server.port=5173"
+    networks:
+      - app_net
+      - traefik_public
 
   devfront:
     build:
-      context: ../..
+      context: ${SOURCE_ROOT:-../..}
       dockerfile: ./devfront/Dockerfile
       args:
         VITE_DEVFRONT_PUBLIC_URL: ${DEVFRONT_URL}
@@ -339,12 +357,21 @@ services:
       - APP_ENV=${APP_ENV:-production}
       - API_PROXY_TARGET=http://backend:${BACKEND_PORT}
     ports:
-      - "${DEVFRONT_PORT}:5173"
-    networks: [app_net]
+      - "${DEVFRONT_PORT}:5174"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=${TRAEFIK_PUBLIC_NETWORK:-traefik-public}"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-devfront.rule=Host(`${DEVFRONT_HOST}`)"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-devfront.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-devfront.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-myresolver}"
+      - "traefik.http.services.${COMPOSE_PROJECT_NAME}-devfront.loadbalancer.server.port=5174"
+    networks:
+      - app_net
+      - traefik_public
 
   orgfront:
     build:
-      context: ../..
+      context: ${SOURCE_ROOT:-../..}
       dockerfile: ./orgfront/Dockerfile
       args:
         VITE_ORGFRONT_PUBLIC_URL: ${ORGFRONT_URL}
@@ -358,11 +385,23 @@ services:
       - USERFRONT_URL=${USERFRONT_URL}
     ports:
       - "${ORGFRONT_PORT}:5175"
-    networks: [app_net]
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=${TRAEFIK_PUBLIC_NETWORK:-traefik-public}"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-orgfront.rule=Host(`${ORGFRONT_HOST}`)"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-orgfront.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-orgfront.tls.certresolver=${TRAEFIK_CERT_RESOLVER:-myresolver}"
+      - "traefik.http.services.${COMPOSE_PROJECT_NAME}-orgfront.loadbalancer.server.port=5175"
+    networks:
+      - app_net
+      - traefik_public
 
 networks:
   app_net:
     name: ${COMPOSE_PROJECT_NAME}_net
+  traefik_public:
+    external: true
+    name: ${TRAEFIK_PUBLIC_NETWORK:-traefik-public}
 
 volumes:
   db_data: