在 VPS(VULTR) 上部屬 NestJS + PostgreSQL

# Git
.git
.gitignore

# Docker
.docker
Dockerfile
.dockerignore

# Node
node_modules
npm-debug.log
dist
.env.*

FROM node:lts-alpine
# Create app directory
WORKDIR /app
EXPOSE 3000


# A wildcard is used to ensure both package.json AND package-lock.json are copied
COPY package.json ./
COPY pnpm-lock.yaml ./

# Install app dependencies
RUN npm i -g pnpm
RUN pnpm install

# Bundle app source
COPY . .

# Creates a "dist" folder with the production build
RUN pnpm run build

version: '3.9'

services:
  app:
    build:
      context: .
    restart: always
    ports:
      - 3000:3000
    volumes:
      - ./src:/app/src
    command: >
      sh -c "pnpm run start:prod"
    environment:
      - DB_HOST=your_host
      - DB_NAME=your_db_name
      - DB_USERNAME=your_user_name
      - DB_PASSWORD=your_db_password
      - GOOGLE_CLIENT_ID=your_google_client_id
      - GOOGLE_CLIENT_SECRET=your_google_client_secret
    depends_on:
      - db

  db:
    image: postgres:13-alpine
    restart: always
    volumes:
      - dev-db-data:/var/lib/postgresql/data
    environment:
      - POSTGRES_DB=your_db_name
      - POSTGRES_USER=your_user_name
      - POSTGRES_PASSWORD=your_db_password

  dbGUI:
    container_name: 'pgadmin'
    image: dpage/pgadmin4
    restart: always
    environment:
      PGADMIN_DEFAULT_EMAIL: your_email
      PGADMIN_DEFAULT_PASSWORD: your_password
      PGADMIN_LISTEN_PORT: 16543
    ports:
      - '16543:16543'
    depends_on:
      - db

  nginx:
    image: jonasal/nginx-certbot:latest
    restart: unless-stopped
    env_file:
      - ./nginx-certbot.env
    ports:
      - 80:80
      - 443:443
    links:
      - app
      - dbGUI
    volumes:
      - nginx_secrets:/etc/letsencrypt
      - ./user_conf.d:/etc/nginx/user_conf.d

volumes:
  dev-db-data:
  nginx_secrets:

upstream backend {
    server app:3000;
}

upstream dbGUI {
    server dbGUI:16543;
}

server {
    # Listen to port 443 on both IPv4 and IPv6.
    listen 443 ssl default_server reuseport;
    listen [::]:443 ssl default_server reuseport;

    # Domain names this server should respond to.
    server_name yourdomain.example;

    # Load the certificate files.
    ssl_certificate         /etc/letsencrypt/live/yourdomain.example/fullchain.pem;
    ssl_certificate_key     /etc/letsencrypt/live/yourdomain.example/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/yourdomain.example/chain.pem;

    # Load the Diffie-Hellman parameter.
    ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;

    location ^~ /admin/ {
        proxy_set_header X-Script-Name /admin;
        proxy_set_header Host $host;
        proxy_pass http://dbGUI/;
        proxy_redirect off;
    }

    location / {
        proxy_pass http://backend/;
    }
}