733bb0cb35
- tkuser 서비스 신규 추가 (API + Web) - 사용자/권한/프로젝트/부서/작업자/작업장/설비/작업/휴가 통합 관리 - 작업장 탭: 공장→작업장 드릴다운 네비게이션 + 구역지도 클릭 연동 - 작업 탭: 공정(work_types)→작업(tasks) 계층 관리 - 휴가 탭: 유형 관리 + 연차 배정(근로기준법 자동계산) - 전 시스템 SSO 쿠키 인증으로 통합 (.technicalkorea.net 공유) - System 2: 작업 이슈 리포트 기능 강화 - System 3: tkuser API 연동, 페이지 권한 체계 적용 - docker-compose에 tkuser-api, tkuser-web 서비스 추가 - ARCHITECTURE.md, DEPLOYMENT.md 문서 작성 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
387 lines
10 KiB
YAML
387 lines
10 KiB
YAML
version: "3.8"
|
|
|
|
services:
|
|
# =================================================================
|
|
# Databases
|
|
# =================================================================
|
|
|
|
mariadb:
|
|
image: mariadb:10.9
|
|
container_name: tk-mariadb
|
|
restart: unless-stopped
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
|
|
- MYSQL_DATABASE=${MYSQL_DATABASE:-hyungi}
|
|
- MYSQL_USER=${MYSQL_USER:-hyungi_user}
|
|
- MYSQL_PASSWORD=${MYSQL_PASSWORD}
|
|
- TZ=Asia/Seoul
|
|
volumes:
|
|
- mariadb_data:/var/lib/mysql
|
|
- ./scripts/migrate-users.sql:/docker-entrypoint-initdb.d/99-sso-users.sql
|
|
ports:
|
|
- "30306:3306"
|
|
healthcheck:
|
|
test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
|
|
timeout: 20s
|
|
retries: 10
|
|
networks:
|
|
- tk-network
|
|
|
|
postgres:
|
|
image: postgres:15-alpine
|
|
container_name: tk-postgres
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: ${POSTGRES_USER:-mproject}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
POSTGRES_DB: ${POSTGRES_DB:-mproject}
|
|
TZ: Asia/Seoul
|
|
PGTZ: Asia/Seoul
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
- ./system3-nonconformance/api/migrations:/docker-entrypoint-initdb.d
|
|
ports:
|
|
- "30432:5432"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-mproject}"]
|
|
timeout: 10s
|
|
retries: 5
|
|
networks:
|
|
- tk-network
|
|
|
|
redis:
|
|
image: redis:6-alpine
|
|
container_name: tk-redis
|
|
restart: unless-stopped
|
|
command: redis-server --maxmemory 200mb --maxmemory-policy allkeys-lru
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "ping"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 3
|
|
networks:
|
|
- tk-network
|
|
|
|
# =================================================================
|
|
# SSO Auth Service
|
|
# =================================================================
|
|
|
|
sso-auth:
|
|
build:
|
|
context: ./sso-auth-service
|
|
dockerfile: Dockerfile
|
|
container_name: tk-sso-auth
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30050:3000"
|
|
environment:
|
|
- NODE_ENV=production
|
|
- PORT=3000
|
|
- DB_HOST=mariadb
|
|
- DB_PORT=3306
|
|
- DB_USER=${MYSQL_USER:-hyungi_user}
|
|
- DB_PASSWORD=${MYSQL_PASSWORD}
|
|
- DB_NAME=${MYSQL_DATABASE:-hyungi}
|
|
- SSO_JWT_SECRET=${SSO_JWT_SECRET}
|
|
- SSO_JWT_EXPIRES_IN=${SSO_JWT_EXPIRES_IN:-7d}
|
|
- SSO_JWT_REFRESH_SECRET=${SSO_JWT_REFRESH_SECRET}
|
|
- SSO_JWT_REFRESH_EXPIRES_IN=${SSO_JWT_REFRESH_EXPIRES_IN:-30d}
|
|
- REDIS_HOST=redis
|
|
- REDIS_PORT=6379
|
|
depends_on:
|
|
mariadb:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
networks:
|
|
- tk-network
|
|
|
|
# =================================================================
|
|
# System 1 - 공장관리
|
|
# =================================================================
|
|
|
|
system1-api:
|
|
build:
|
|
context: ./system1-factory/api
|
|
dockerfile: Dockerfile
|
|
container_name: tk-system1-api
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30005:3005"
|
|
environment:
|
|
- NODE_ENV=${SYSTEM1_NODE_ENV:-production}
|
|
- PORT=3005
|
|
- DB_HOST=mariadb
|
|
- DB_PORT=3306
|
|
- DB_USER=${MYSQL_USER:-hyungi_user}
|
|
- DB_PASSWORD=${MYSQL_PASSWORD}
|
|
- DB_NAME=${MYSQL_DATABASE:-hyungi}
|
|
- DB_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
|
|
- JWT_SECRET=${SSO_JWT_SECRET}
|
|
- JWT_EXPIRES_IN=${SSO_JWT_EXPIRES_IN:-7d}
|
|
- JWT_REFRESH_SECRET=${SSO_JWT_REFRESH_SECRET}
|
|
- JWT_REFRESH_EXPIRES_IN=${SSO_JWT_REFRESH_EXPIRES_IN:-30d}
|
|
- REDIS_HOST=redis
|
|
- REDIS_PORT=6379
|
|
- WEATHER_API_URL=${WEATHER_API_URL:-}
|
|
- WEATHER_API_KEY=${WEATHER_API_KEY:-}
|
|
volumes:
|
|
- system1_uploads:/usr/src/app/uploads
|
|
- system1_logs:/usr/src/app/logs
|
|
depends_on:
|
|
mariadb:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
networks:
|
|
- tk-network
|
|
|
|
system1-web:
|
|
build:
|
|
context: ./system1-factory/web
|
|
dockerfile: Dockerfile
|
|
container_name: tk-system1-web
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30080:80"
|
|
depends_on:
|
|
- system1-api
|
|
networks:
|
|
- tk-network
|
|
|
|
system1-fastapi:
|
|
build:
|
|
context: ./system1-factory/fastapi-bridge
|
|
dockerfile: Dockerfile
|
|
container_name: tk-system1-fastapi
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30008:8000"
|
|
environment:
|
|
- API_BASE_URL=http://system1-api:3005
|
|
depends_on:
|
|
- system1-api
|
|
networks:
|
|
- tk-network
|
|
|
|
# =================================================================
|
|
# System 2 - 신고
|
|
# =================================================================
|
|
|
|
system2-api:
|
|
build:
|
|
context: ./system2-report/api
|
|
dockerfile: Dockerfile
|
|
container_name: tk-system2-api
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30105:3005"
|
|
environment:
|
|
- NODE_ENV=${SYSTEM2_NODE_ENV:-production}
|
|
- PORT=3005
|
|
- DB_HOST=mariadb
|
|
- DB_PORT=3306
|
|
- DB_USER=${MYSQL_USER:-hyungi_user}
|
|
- DB_PASSWORD=${MYSQL_PASSWORD}
|
|
- DB_NAME=${MYSQL_DATABASE:-hyungi}
|
|
- JWT_SECRET=${SSO_JWT_SECRET}
|
|
- JWT_EXPIRES_IN=${SSO_JWT_EXPIRES_IN:-7d}
|
|
- REDIS_HOST=redis
|
|
- REDIS_PORT=6379
|
|
- M_PROJECT_API_URL=${M_PROJECT_API_URL:-http://system3-api:8000}
|
|
- M_PROJECT_USERNAME=${M_PROJECT_USERNAME:-api_service}
|
|
- M_PROJECT_PASSWORD=${M_PROJECT_PASSWORD:-}
|
|
- M_PROJECT_DEFAULT_PROJECT_ID=${M_PROJECT_DEFAULT_PROJECT_ID:-1}
|
|
volumes:
|
|
- system2_uploads:/usr/src/app/uploads
|
|
- system2_logs:/usr/src/app/logs
|
|
depends_on:
|
|
mariadb:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
networks:
|
|
- tk-network
|
|
|
|
system2-web:
|
|
build:
|
|
context: ./system2-report/web
|
|
dockerfile: Dockerfile
|
|
container_name: tk-system2-web
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30180:80"
|
|
depends_on:
|
|
- system2-api
|
|
networks:
|
|
- tk-network
|
|
|
|
# =================================================================
|
|
# System 3 - 부적합관리
|
|
# =================================================================
|
|
|
|
system3-api:
|
|
build:
|
|
context: ./system3-nonconformance/api
|
|
dockerfile: Dockerfile
|
|
container_name: tk-system3-api
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30200:8000"
|
|
environment:
|
|
- DB_HOST=mariadb
|
|
- DB_PORT=3306
|
|
- DB_USER=${MYSQL_USER:-hyungi_user}
|
|
- DB_PASSWORD=${MYSQL_PASSWORD}
|
|
- DB_NAME=${MYSQL_DATABASE:-hyungi}
|
|
- SECRET_KEY=${SSO_JWT_SECRET}
|
|
- ALGORITHM=HS256
|
|
- ACCESS_TOKEN_EXPIRE_MINUTES=10080
|
|
- ADMIN_USERNAME=${SYSTEM3_ADMIN_USERNAME:-hyungi}
|
|
- TZ=Asia/Seoul
|
|
- TKUSER_API_URL=http://tkuser-api:3000
|
|
volumes:
|
|
- system3_uploads:/app/uploads
|
|
depends_on:
|
|
mariadb:
|
|
condition: service_healthy
|
|
networks:
|
|
- tk-network
|
|
|
|
system3-web:
|
|
build:
|
|
context: ./system3-nonconformance/web
|
|
dockerfile: Dockerfile
|
|
container_name: tk-system3-web
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30280:80"
|
|
volumes:
|
|
- system3_uploads:/usr/share/nginx/html/uploads
|
|
depends_on:
|
|
- system3-api
|
|
networks:
|
|
- tk-network
|
|
|
|
# =================================================================
|
|
# User Management (tkuser)
|
|
# =================================================================
|
|
|
|
tkuser-api:
|
|
build:
|
|
context: ./user-management/api
|
|
dockerfile: Dockerfile
|
|
container_name: tk-tkuser-api
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30300:3000"
|
|
environment:
|
|
- NODE_ENV=production
|
|
- PORT=3000
|
|
- DB_HOST=mariadb
|
|
- DB_PORT=3306
|
|
- DB_USER=${MYSQL_USER:-hyungi_user}
|
|
- DB_PASSWORD=${MYSQL_PASSWORD}
|
|
- DB_NAME=${MYSQL_DATABASE:-hyungi}
|
|
- SSO_JWT_SECRET=${SSO_JWT_SECRET}
|
|
volumes:
|
|
- system1_uploads:/usr/src/app/uploads
|
|
depends_on:
|
|
mariadb:
|
|
condition: service_healthy
|
|
networks:
|
|
- tk-network
|
|
|
|
tkuser-web:
|
|
build:
|
|
context: ./user-management/web
|
|
dockerfile: Dockerfile
|
|
container_name: tk-tkuser-web
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30380:80"
|
|
depends_on:
|
|
- tkuser-api
|
|
networks:
|
|
- tk-network
|
|
|
|
# =================================================================
|
|
# Gateway
|
|
# =================================================================
|
|
|
|
gateway:
|
|
build:
|
|
context: ./gateway
|
|
dockerfile: Dockerfile
|
|
container_name: tk-gateway
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30000:80"
|
|
depends_on:
|
|
- sso-auth
|
|
- system1-web
|
|
- system2-web
|
|
- system3-web
|
|
networks:
|
|
- tk-network
|
|
|
|
# =================================================================
|
|
# Tools
|
|
# =================================================================
|
|
|
|
phpmyadmin:
|
|
image: phpmyadmin/phpmyadmin:latest
|
|
container_name: tk-phpmyadmin
|
|
restart: unless-stopped
|
|
ports:
|
|
- "30880:80"
|
|
environment:
|
|
- PMA_HOST=mariadb
|
|
- PMA_USER=${PMA_USER:-root}
|
|
- PMA_PASSWORD=${MYSQL_ROOT_PASSWORD}
|
|
- UPLOAD_LIMIT=${UPLOAD_LIMIT:-50M}
|
|
depends_on:
|
|
mariadb:
|
|
condition: service_healthy
|
|
networks:
|
|
- tk-network
|
|
|
|
# =================================================================
|
|
# Cloudflare Tunnel
|
|
# =================================================================
|
|
|
|
cloudflared:
|
|
image: cloudflare/cloudflared:latest
|
|
container_name: tk-cloudflared
|
|
restart: unless-stopped
|
|
command: tunnel --no-autoupdate run
|
|
environment:
|
|
- TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}
|
|
depends_on:
|
|
- gateway
|
|
- system2-web
|
|
- system3-web
|
|
networks:
|
|
- tk-network
|
|
|
|
volumes:
|
|
mariadb_data:
|
|
external: true
|
|
name: tkfb-package_db_data
|
|
postgres_data:
|
|
external: true
|
|
name: tkqc-package_postgres_data
|
|
system1_uploads:
|
|
external: true
|
|
name: tkfb_api_uploads
|
|
system1_logs:
|
|
system2_uploads:
|
|
system2_logs:
|
|
system3_uploads:
|
|
external: true
|
|
name: tkqc-package_uploads
|
|
networks:
|
|
tk-network:
|
|
driver: bridge
|
|
name: tk-factory-network
|