docker-compose-dev.yml

services:
  planka-server:
    build:
      context: .
      dockerfile: Dockerfile.dev
    image: planka-dev
    pull_policy: never
    command: ["bash", "-c", "npm install && npm run db:init && npm start"]
    restart: on-failure
    volumes:
      - ./server:/app
    # remove host port publish when using traefik
    #ports:
    #  - 1337:1337
    environment:
      - BASE_URL=https://planka.sysblok.team
      - DATABASE_URL=postgresql://postgres@postgres/planka
      - SECRET_KEY=notsecretkey

      # - LOG_LEVEL=warn

      - TRUST_PROXY=true
      # - MAX_UPLOAD_FILE_SIZE=
      # - TOKEN_EXPIRES_IN=365 # In days

      # related: https://github.com/knex/knex/issues/2354
      # As knex does not pass query parameters from the connection string,
      # we have to use environment variables in order to pass the desired values, e.g.
      # - PGSSLMODE=<value>

      # Configure knex to accept SSL certificates
      # - KNEX_REJECT_UNAUTHORIZED_SSL_CERTIFICATE=false

      # The default application language used as a fallback when a user's language is not set.
      # This language is also used for per-board notifications.
      # - DEFAULT_LANGUAGE=en-US

      # Do not comment out DEFAULT_ADMIN_EMAIL if you want to prevent this user from being edited/deleted
      # - DEFAULT_ADMIN_EMAIL=demo@demo.demo
      # - DEFAULT_ADMIN_PASSWORD=demo
      # - DEFAULT_ADMIN_NAME=Demo Demo
      # - DEFAULT_ADMIN_USERNAME=demo

      # - INTERNAL_ACCESS_TOKEN=
      # - STORAGE_LIMIT=
      # - ACTIVE_USERS_LIMIT=
      # - CUSTOMER_PANEL_URL=

      # Set to true to show more detailed authentication error messages.
      # It should not be enabled without a rate limiter for security reasons.
      # - SHOW_DETAILED_AUTH_ERRORS=false

      # - S3_ENDPOINT=
      # - S3_REGION=
      # - S3_ACCESS_KEY_ID=
      # - S3_SECRET_ACCESS_KEY=
      # - S3_BUCKET=
      # - S3_FORCE_PATH_STYLE=true

      # - OIDC_ISSUER=
      # - OIDC_CLIENT_ID=
      # - OIDC_CLIENT_SECRET=
      # - OIDC_USE_OAUTH_CALLBACK=true
      # - OIDC_ID_TOKEN_SIGNED_RESPONSE_ALG=
      # - OIDC_USERINFO_SIGNED_RESPONSE_ALG=
      # - OIDC_SCOPES=openid email profile
      # - OIDC_RESPONSE_MODE=fragment
      # - OIDC_USE_DEFAULT_RESPONSE_MODE=true
      # - OIDC_ADMIN_ROLES=admin
      # - OIDC_PROJECT_OWNER_ROLES=project_owner
      # - OIDC_BOARD_USER_ROLES=board_user
      # - OIDC_CLAIMS_SOURCE=userinfo
      # - OIDC_EMAIL_ATTRIBUTE=email
      # - OIDC_NAME_ATTRIBUTE=name
      # - OIDC_USERNAME_ATTRIBUTE=preferred_username
      # - OIDC_ROLES_ATTRIBUTE=groups
      # - OIDC_IGNORE_USERNAME=true
      # - OIDC_IGNORE_ROLES=true
      # - OIDC_ENFORCED=true

      # Email Notifications (https://nodemailer.com/smtp/)
      # These values override and disable configuration in the UI if set.
      # - SMTP_HOST=
      # - SMTP_PORT=587
      # - SMTP_NAME=
      # - SMTP_SECURE=true
      # - SMTP_TLS_REJECT_UNAUTHORIZED=false
      # - SMTP_USER=
      # - SMTP_PASSWORD=
      # - SMTP_FROM="Demo Demo" <demo@demo.demo>

      # Using Gravatar directly exposes user IPs and hashed emails to a third party (GDPR risk).
      # Use a proxy you control for privacy, or leave commented out or empty to disable.
      # - GRAVATAR_BASE_URL=https://www.gravatar.com/avatar/
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - proxy
      - default
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"

      # HTTPS API + websocket → Sails (1337)
      - "traefik.http.routers.planka-dev-api-secure.rule=Host(`${PLANKA_HOST}`) && (PathPrefix(`/api`) || PathPrefix(`/socket.io`))"
      - "traefik.http.routers.planka-dev-api-secure.entrypoints=websecure"
      - "traefik.http.routers.planka-dev-api-secure.tls.certresolver=le"
      - "traefik.http.routers.planka-dev-api-secure.service=planka-dev-api"
      - "traefik.http.routers.planka-dev-api-secure.priority=100"
      - "traefik.http.services.planka-dev-api.loadbalancer.server.port=1337"


  planka-client:
    image: planka-dev
    pull_policy: never
    command: ["bash", "-c", "npm install && npx vite --host 0.0.0.0 --port 3000 --strictPort"]
    restart: on-failure
    volumes:
      - ./client:/app
    #ports:
    #  - 3000:3000
    environment:
      - VITE_SERVER_BASE_URL=https://planka.sysblok.team
    networks:
      - proxy
      - default
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"

      # HTTP → HTTPS redirect
      - "traefik.http.routers.planka-dev.rule=Host(`${PLANKA_HOST}`)"
      - "traefik.http.routers.planka-dev.entrypoints=web"
      - "traefik.http.routers.planka-dev.middlewares=planka-dev-redirect"
      - "traefik.http.middlewares.planka-dev-redirect.redirectscheme.scheme=https"
      - "traefik.http.middlewares.planka-dev-redirect.redirectscheme.permanent=true"

      # HTTPS UI → Vite (3000)
      - "traefik.http.routers.planka-dev-secure.rule=Host(`${PLANKA_HOST}`)"
      - "traefik.http.routers.planka-dev-secure.entrypoints=websecure"
      - "traefik.http.routers.planka-dev-secure.tls.certresolver=le"
      - "traefik.http.routers.planka-dev-secure.service=planka-dev-ui"
      - "traefik.http.routers.planka-dev-secure.priority=1"
      - "traefik.http.services.planka-dev-ui.loadbalancer.server.port=3000"

  postgres:
    image: postgres:16-alpine
    restart: on-failure
    volumes:
      - db-data:/var/lib/postgresql/data
    environment:
      - POSTGRES_DB=planka
      - POSTGRES_HOST_AUTH_METHOD=trust
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "pg_isready -U ${POSTGRES_USER:-postgres} -d ${POSTGRES_DB:-planka} && psql -U ${POSTGRES_USER:-postgres} -d ${POSTGRES_DB:-planka} -c 'SELECT 1'",
        ]
      interval: 3s
      timeout: 5s
      retries: 15
      start_period: 10s

volumes:
  db-data:


networks:
  proxy:
    external: true