本番用Docker Compose作成

docker-compose.yml

@@ -6,8 +6,6 @@ services:
       POSTGRES_DB: certremind
       POSTGRES_USER: certremind
       POSTGRES_PASSWORD: certremind
-    ports:
-      - '5432:5432'
     volumes:
       - postgres-data:/var/lib/postgresql/data
       - ./db/schema.sql:/docker-entrypoint-initdb.d/001-schema.sql:ro
@@ -17,5 +15,43 @@ services:
       timeout: 5s
       retries: 5
 
+  app:
+    build: .
+    image: certremind-app:local
+    container_name: certremind-app
+    environment:
+      NODE_ENV: production
+      HOST: 0.0.0.0
+      PORT: 3000
+      DATABASE_URL: postgres://certremind:certremind@postgres:5432/certremind
+      COOKIE_SECRET: ${COOKIE_SECRET:-replace-with-a-long-random-string}
+      VAPID_PUBLIC_KEY: ${VAPID_PUBLIC_KEY:-}
+      VAPID_PRIVATE_KEY: ${VAPID_PRIVATE_KEY:-}
+      VAPID_SUBJECT: ${VAPID_SUBJECT:-mailto:admin@example.com}
+      OPENSSL_PATH: ${OPENSSL_PATH:-openssl}
+    ports:
+      - '127.0.0.1:3000:3000'
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+  monitor-worker:
+    image: certremind-app:local
+    container_name: certremind-monitor-worker
+    command: ['pnpm', 'monitor:worker']
+    environment:
+      NODE_ENV: production
+      DATABASE_URL: postgres://certremind:certremind@postgres:5432/certremind
+      COOKIE_SECRET: ${COOKIE_SECRET:-replace-with-a-long-random-string}
+      VAPID_PUBLIC_KEY: ${VAPID_PUBLIC_KEY:-}
+      VAPID_PRIVATE_KEY: ${VAPID_PRIVATE_KEY:-}
+      VAPID_SUBJECT: ${VAPID_SUBJECT:-mailto:admin@example.com}
+      OPENSSL_PATH: ${OPENSSL_PATH:-openssl}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      app:
+        condition: service_started
+
 volumes:
   postgres-data: