mastodon-deploy/roles/mastodon/files/docker-compose.yaml

version: '3'
services:
  mastodon_db:
    container_name: mastodon_db
    restart: always
    image: postgres:14-alpine
    shm_size: 256mb
    networks:
      - mastodon
    healthcheck:
      test: ['CMD', 'pg_isready', '-U', 'postgres']
    volumes:
      - ./postgres14:/var/lib/postgresql/data
    env_file: .env.production
    environment:
      - 'POSTGRES_HOST_AUTH_METHOD=trust'

  mastodon_redis:
    container_name: mastodon_redis
    restart: always
    image: redis:7-alpine
    networks:
      - mastodon
    healthcheck:
      test: ['CMD', 'redis-cli', 'ping']
    volumes:
      - ./redis:/data

  # es:
  #   restart: always
  #   image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4
  #   environment:
  #     - "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true"
  #     - "xpack.license.self_generated.type=basic"
  #     - "xpack.security.enabled=false"
  #     - "xpack.watcher.enabled=false"
  #     - "xpack.graph.enabled=false"
  #     - "xpack.ml.enabled=false"
  #     - "bootstrap.memory_lock=true"
  #     - "cluster.name=es-mastodon"
  #     - "discovery.type=single-node"
  #     - "thread_pool.write.queue_size=1000"
#    networks:
#      - mastodon
#      - nginx
  #   healthcheck:
  #      test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
  #   volumes:
  #      - ./elasticsearch:/usr/share/elasticsearch/data
  #   ulimits:
  #     memlock:
  #       soft: -1
  #       hard: -1
  #     nofile:
  #       soft: 65536
  #       hard: 65536
  #   ports:
  #     - '127.0.0.1:9200:9200'

  mastodon_web:
    container_name: mastodon_web
    build: .
    image: tootsuite/mastodon
    restart: always
    env_file: .env.production
    command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
    networks:
      - mastodon
#      - nginx # XXX <--------- PUT THIS BACK BEFORE PROD
    healthcheck:
      # prettier-ignore
      test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
    ports:
      - '127.0.0.1:3000:3000'
    depends_on:
      - mastodon_db
      - mastodon_redis
      # - es
    volumes:
      - ./public/system:/mastodon/public/system

  mastodon_streaming:
    container_name: mastodon_streaming
    build: .
    image: tootsuite/mastodon
    restart: always
    env_file: .env.production
    environment:
      - PORT=5000
    command: node ./streaming
    networks:
      - mastodon
#      - nginx # XXX <--------- PUT THIS BACK BEFORE PROD
    healthcheck:
      # prettier-ignore
      test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:5000/api/v1/streaming/health || exit 1']
    ports:
      - '127.0.0.1:5000:5000'
    depends_on:
      - mastodon_db
      - mastodon_redis

  mastodon_sidekiq:
    container_name: mastodon_sidekiq
    build: .
    image: tootsuite/mastodon
    restart: always
    env_file: .env.production
    command: bundle exec sidekiq
    depends_on:
      - mastodon_db
      - mastodon_redis
    networks:
      - mastodon
#      - nginx # XXX <--------- PUT THIS BACK BEFORE PROD
    volumes:
      - ./public/system:/mastodon/public/system
    healthcheck:
      test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]

  ## Uncomment to enable federation with tor instances along with adding the following ENV variables
  ## http_proxy=http://privoxy:8118
  ## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
  # tor:
  #   image: sirboops/tor
  #   networks:
  #      - external_network
  #      - internal_network
  #
  # privoxy:
  #   image: sirboops/privoxy
  #   volumes:
  #     - ./priv-config:/opt/config
  #   networks:
  #     - external_network
  #     - internal_network

networks:
  mastodon:
    ipam:
      driver: default
      config:
      - subnet: 172.42.0.0/16
# XXX PUT THIS BACK BEFORE PROD:
#  nginx:
#    external: true