Added infisical

templates/compose/infisical.yaml

@@ -0,0 +1,75 @@
+# documentation: https://infisical.com/docs/documentation/getting-started/introduction
+# slogan: Infisical is the open source secret management platform that developers use to centralize their application configuration and secrets like API keys and database credentials.
+# tags: security, environment, secrets, infisical, database, configuration, secret, api, keys, auth, encryption
+# logo: svgs/infisical.png
+# port: 8080
+
+version: "3"
+
+services:
+  backend:
+    restart: always
+    depends_on:
+      redis:
+        condition: service_healthy
+      db-migration:
+        condition: service_completed_successfully
+    image: "infisical/infisical:latest-postgres"
+    environment:
+      - SERVICE_FQDN_BACKEND_8080
+      - SITE_URL=${SERVICE_FQDN_BACKEND_8080}
+      - NODE_ENV=production
+      - ENCRYPTION_KEY=${SERVICE_PASSWORD_ENCRYPTIONKEY}
+      - AUTH_SECRET=${SERVICE_REALBASE64_AUTHSECRET}
+      - DB_CONNECTION_URI=postgres://${SERVICE_USER_POSTGRES}:${SERVICE_PASSWORD_POSTGRES}@db:5432/${POSTGRES_DB}
+      - REDIS_URL=redis://redis:6379
+    healthcheck:
+      test:
+        - CMD-SHELL
+        - "wget --no-verbose --tries=1 --spider http://127.0.0.1:8080/api/status || exit 1"
+  redis:
+    image: "redis:7"
+    environment:
+      - ALLOW_EMPTY_PASSWORD=yes
+    restart: always
+    healthcheck:
+      test:
+        - CMD-SHELL
+        - "redis-cli -h localhost -p 6379 ping"
+      interval: 5s
+      timeout: 5s
+      retries: 3
+    volumes:
+      - redis_data:/data
+  db:
+    image: "postgres:14-alpine"
+    restart: always
+    volumes:
+      - pg_data:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_USER=${SERVICE_USER_POSTGRES}
+      - POSTGRES_PASSWORD=${SERVICE_PASSWORD_POSTGRES}
+      - POSTGRES_DB=${POSTGRES_DB:-infisical}
+    healthcheck:
+      test:
+        - CMD-SHELL
+        - "pg_isready -h localhost -U $${POSTGRES_USER} -d $${POSTGRES_DB}"
+      interval: 5s
+      timeout: 10s
+      retries: 10
+  db-migration:
+    depends_on:
+      db:
+        condition: service_healthy
+    image: "infisical/infisical:latest-postgres"
+    command: "npm run migration:latest"
+    restart: on-failure
+    environment:
+      - POSTGRES_USER=${SERVICE_USER_POSTGRES}
+      - POSTGRES_PASSWORD=${SERVICE_PASSWORD_POSTGRES}
+      - POSTGRES_DB=${POSTGRES_DB:-infisical}
+      - DB_CONNECTION_URI=postgres://${SERVICE_USER_POSTGRES}:${SERVICE_PASSWORD_POSTGRES}@db:5432/${POSTGRES_DB:-infisical}
+      - REDIS_URL=redis://redis:6379
+volumes:
+  pg_data:
+  redis_data: