NilsBriggen
ac1de66e6d
The 'external drive' turned out to be a CIFS-mounted Hetzner storage box — SQLite cannot run on a network mount (WAL shared memory and locking break), and the live DB is only ~7MB anyway. So: the hot database stays on the local volume, and a nightly VACUUM INTO snapshot (transactionally consistent, a plain sequential file write — perfect for CIFS) lands in /data/archive, which compose binds to the storage box via HOST_ARCHIVE_DIR. 14-day retention, plus a snapshot at boot. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
53 lines
1.8 KiB
YAML
53 lines
1.8 KiB
YAML
# Self-contained compose project for cup26.briggen.dev.
|
|
# Deploy: rsync the repo to /root/cup26/, place this file there as
|
|
# docker-compose.yml, then `docker compose up -d --build`.
|
|
# Joins the EXISTING external `proxy` network — the shared Traefik stack is untouched.
|
|
name: cup26
|
|
|
|
services:
|
|
cup26:
|
|
build: .
|
|
container_name: cup26
|
|
restart: unless-stopped
|
|
environment:
|
|
- PORT=8787
|
|
- STATIC_DIR=/app/dist
|
|
- NODE_ENV=production
|
|
- ALLOWED_ORIGINS=https://cup26.briggen.dev
|
|
- DATA_DIR=/data
|
|
# football-data.org free API token (https://www.football-data.org/client/register)
|
|
- FOOTBALL_DATA_TOKEN=${FOOTBALL_DATA_TOKEN:-}
|
|
# opt-in unofficial sources (usually blocked from a datacenter IP; ESPN is primary)
|
|
- ENABLE_SOFASCORE=${ENABLE_SOFASCORE:-false}
|
|
- ENABLE_FOTMOB=${ENABLE_FOTMOB:-false}
|
|
- ARCHIVE_DIR=/data/archive
|
|
volumes:
|
|
# The LIVE SQLite must stay on a real local filesystem (WAL + locking do
|
|
# not survive network mounts). HOST_DATA_DIR can override if ever needed.
|
|
- ${HOST_DATA_DIR:-cup26-data}:/data
|
|
# Nightly VACUUM INTO snapshots land here — point HOST_ARCHIVE_DIR at the
|
|
# 1TB storage box (CIFS is fine for sequential snapshot files).
|
|
- ${HOST_ARCHIVE_DIR:-cup26-archive}:/data/archive
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
mem_limit: 384m
|
|
memswap_limit: 384m
|
|
pids_limit: 200
|
|
cpus: 1.0
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.cup26.rule=Host(`cup26.briggen.dev`)"
|
|
- "traefik.http.routers.cup26.entrypoints=websecure"
|
|
- "traefik.http.routers.cup26.tls.certresolver=letsencrypt"
|
|
- "traefik.http.services.cup26.loadbalancer.server.port=8787"
|
|
networks:
|
|
- proxy
|
|
|
|
volumes:
|
|
cup26-data:
|
|
cup26-archive:
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|