bearlypro/khirby repository overview

docker pull bearlypro/khirby:latest

node -e "console.log(require('crypto').randomBytes(48).toString('base64url'))"  # SESSION_SECRET
node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"         # MAIL_SECRETS_KEY etc.

services:
  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-crm}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB:-crm}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U ${POSTGRES_USER:-crm} -d ${POSTGRES_DB:-crm}']
      interval: 5s
      timeout: 5s
      retries: 10
    restart: unless-stopped

  redis:
    image: redis:7-alpine
    command: ['redis-server', '--appendonly', 'yes']
    volumes:
      - redis_data:/data
    healthcheck:
      test: ['CMD', 'redis-cli', 'ping']
      interval: 5s
      timeout: 3s
      retries: 5
    restart: unless-stopped

  app:
    image: bearlypro/khirby:latest
    environment:
      NODE_ENV: production
      PORT: '3000'
      DATABASE_URL: postgres://${POSTGRES_USER:-crm}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB:-crm}
      REDIS_URL: redis://redis:6379
      SESSION_SECRET: ${SESSION_SECRET}
      CORS_ORIGIN: ${CORS_ORIGIN}
      ADMIN_EMAIL: ${ADMIN_EMAIL}
      ADMIN_PASSWORD: ${ADMIN_PASSWORD}
      APP_URL: ${APP_URL:-}
      MAIL_SECRETS_KEY: ${MAIL_SECRETS_KEY:-}
      GOOGLE_MAIL_CLIENT_ID: ${GOOGLE_MAIL_CLIENT_ID:-}
      GOOGLE_MAIL_CLIENT_SECRET: ${GOOGLE_MAIL_CLIENT_SECRET:-}
      AI_COMPOSE_SECRETS_KEY: ${AI_COMPOSE_SECRETS_KEY:-}
      POKELO_SECRETS_KEY: ${POKELO_SECRETS_KEY:-}
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
    ports:
      - '127.0.0.1:8080:80'
    restart: unless-stopped
    healthcheck:
      test: ['CMD-SHELL', 'wget -qO- http://127.0.0.1/api/health || exit 1']
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 120s

volumes:
  postgres_data:
  redis_data:

CORS_ORIGIN=https://crm.example.com
APP_URL=crm.example.com
POSTGRES_USER=crm
POSTGRES_PASSWORD=change-me-strong-db-password
POSTGRES_DB=crm
SESSION_SECRET=change-me-to-a-random-string-at-least-32-chars
[email protected]
ADMIN_PASSWORD=change-me-strong-admin-password

docker compose pull
docker compose up -d
curl -sS http://127.0.0.1:8080/api/health

cp docker/crm.env.example docker/crm.env   # fill secrets
docker stack deploy --with-registry-auth --env-file docker/crm.env \
  -c docker/docker-stack.yml khirby