Lageplan/deploy/portainer-stack.yml

# =============================================================
# Lageplan - Portainer Stack
# =============================================================
# Deployment:
#   1. Image auf Server laden:  docker load -i lageplan-web-v1.0.0.tar
#   2. In Portainer: Stacks → Add Stack → Web editor
#   3. Diese YAML einfügen + Environment Variables setzen
# =============================================================

services:
  # --- PostgreSQL Database ---
  db:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - lageplan-net
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER}"]
      interval: 10s
      timeout: 5s
      retries: 5

  # --- MinIO Object Storage (S3-kompatibel, für Symbole/Icons) ---
  # Kein externer Port nötig — Icons werden über die Web-App gestreamt
  minio:
    image: minio/minio:latest
    restart: unless-stopped
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
    volumes:
      - minio_data:/data
    networks:
      - lageplan-net
    healthcheck:
      test: ["CMD", "mc", "ready", "local"]
      interval: 10s
      timeout: 5s
      retries: 5

  # --- MinIO Bucket Initialisierung (einmalig) ---
  minio-init:
    image: minio/mc:latest
    depends_on:
      minio:
        condition: service_healthy
    networks:
      - lageplan-net
    entrypoint: >
      /bin/sh -c "
      mc alias set myminio http://minio:9000 ${MINIO_ROOT_USER} ${MINIO_ROOT_PASSWORD};
      mc mb myminio/${MINIO_BUCKET} --ignore-existing;
      mc anonymous set download myminio/${MINIO_BUCKET};
      echo 'Bucket ready';
      exit 0;
      "

  # --- Lageplan Web App (Next.js) ---
  web:
    image: lageplan-web:v1.0.0
    restart: unless-stopped
    environment:
      DATABASE_URL: postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB}
      NEXTAUTH_URL: ${NEXTAUTH_URL}
      NEXTAUTH_SECRET: ${NEXTAUTH_SECRET}
      MINIO_ENDPOINT: minio
      MINIO_PORT: "9000"
      MINIO_ACCESS_KEY: ${MINIO_ROOT_USER}
      MINIO_SECRET_KEY: ${MINIO_ROOT_PASSWORD}
      MINIO_BUCKET: ${MINIO_BUCKET}
      MINIO_USE_SSL: "false"
    ports:
      - "${WEB_PORT:-3000}:3000"
    depends_on:
      db:
        condition: service_healthy
      minio:
        condition: service_healthy
    networks:
      - lageplan-net

  # --- Automatisches Backup: täglicher DB-Dump + Datei-Backup (30 Tage) ---
  # Backups im Volume "backups_data". Für Off-Site auf einen NAS-Pfad umstellen, z.B.:
  #   volumes: - /volume1/backups/lageplan:/backups
  backup:
    image: postgres:16-alpine
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
    environment:
      PGHOST: db
      PGUSER: ${POSTGRES_USER}
      PGPASSWORD: ${POSTGRES_PASSWORD}
      PGDATABASE: ${POSTGRES_DB}
      BACKUP_RETENTION_DAYS: ${BACKUP_RETENTION_DAYS:-30}
      BACKUP_INTERVAL_HOURS: ${BACKUP_INTERVAL_HOURS:-24}
    volumes:
      - backups_data:/backups
      - minio_data:/minio:ro
    networks:
      - lageplan-net
    entrypoint:
      - /bin/sh
      - -c
      - |
        echo "[backup] Start - alle $${BACKUP_INTERVAL_HOURS}h, Aufbewahrung $${BACKUP_RETENTION_DAYS} Tage";
        while true; do
          TS=$$(date +%Y-%m-%d_%H%M%S);
          mkdir -p /backups;
          echo "[backup] $$TS Datenbank sichern...";
          if pg_dump -h "$$PGHOST" -U "$$PGUSER" -d "$$PGDATABASE" -Fc -f "/backups/db_$$TS.dump"; then
            echo "[backup] DB ok: db_$$TS.dump";
          else
            echo "[backup] DB FEHLGESCHLAGEN"; rm -f "/backups/db_$$TS.dump";
          fi;
          if [ -d /minio ]; then
            tar czf "/backups/files_$$TS.tar.gz" -C /minio . 2>/dev/null && echo "[backup] Dateien ok: files_$$TS.tar.gz" || echo "[backup] Dateien uebersprungen";
          fi;
          find /backups -name "db_*.dump" -mtime +$$BACKUP_RETENTION_DAYS -delete 2>/dev/null || true;
          find /backups -name "files_*.tar.gz" -mtime +$$BACKUP_RETENTION_DAYS -delete 2>/dev/null || true;
          echo "[backup] fertig - naechstes in $${BACKUP_INTERVAL_HOURS}h";
          sleep $$(( BACKUP_INTERVAL_HOURS * 3600 ));
        done

volumes:
  postgres_data:
    driver: local
  minio_data:
    driver: local
  backups_data:
    driver: local

networks:
  lageplan-net:
    driver: bridge