docker-compose.yml

name: atlas-cmms
services:
  postgres:
    image: postgres:16-alpine
    container_name: atlas_db
    environment:
      POSTGRES_DB: atlas
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PWD}
    expose:
      - "5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data

  api:
    image: intelloop/atlas-cmms-backend
    container_name: atlas-cmms-backend
    depends_on:
      - postgres
      - minio
    volumes:
      - ./logo:/app/static/images
      - ./config:/app/static/config
    environment:
      DB_URL: postgres/atlas
      DB_USER: ${POSTGRES_USER}
      DB_PWD: ${POSTGRES_PWD}
      PUBLIC_API_URL: ${PUBLIC_SERVER_URL}/api
      PUBLIC_FRONT_URL: ${PUBLIC_SERVER_URL}
      GCP_BUCKET_NAME: ${GCP_BUCKET_NAME}
      GCP_JSON: ${GCP_JSON}
      GCP_PROJECT_ID: ${GCP_PROJECT_ID}
      MAIL_RECIPIENTS: ${MAIL_RECIPIENTS}
      SMTP_PWD: ${SMTP_PWD}
      SMTP_USER: ${SMTP_USER}
      SMTP_FROM: ${SMTP_FROM}
      SMTP_HOST: ${SMTP_HOST}
      SMTP_PORT: ${SMTP_PORT}
      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES_ACTIVE}
      JWT_SECRET_KEY: ${JWT_SECRET_KEY}
      MINIO_ENDPOINT: http://minio:9000
      MINIO_BUCKET: atlas-bucket
      MINIO_ACCESS_KEY: ${MINIO_USER}
      MINIO_SECRET_KEY: ${MINIO_PASSWORD}
      STORAGE_TYPE: ${STORAGE_TYPE:-minio} #gpc|minio
      PUBLIC_MINIO_ENDPOINT: ${PUBLIC_SERVER_URL}/storage
      INVITATION_VIA_EMAIL: ${INVITATION_VIA_EMAIL:-false}
      ENABLE_EMAIL_NOTIFICATIONS: ${ENABLE_EMAIL_NOTIFICATIONS:-false}
      ENABLE_SSO: ${ENABLE_SSO:-false}
      OAUTH2_PROVIDER: ${OAUTH2_PROVIDER}
      OAUTH2_CLIENT_ID: ${OAUTH2_CLIENT_ID}
      OAUTH2_CLIENT_SECRET: ${OAUTH2_CLIENT_SECRET}
      LICENSE_KEY: ${LICENSE_KEY:-}
      LICENSE_FINGERPRINT_REQUIRED: ${LICENSE_FINGERPRINT_REQUIRED:-false}
      LICENSE_FILE_PATH: ${LICENSE_FILE_PATH:-}
      ALLOWED_ORGANIZATION_ADMINS: ${ALLOWED_ORGANIZATION_ADMINS:-}
      LOGO_PATHS: ${LOGO_PATHS:-}
      CUSTOM_COLORS: ${CUSTOM_COLORS:-}
      BRAND_CONFIG: ${BRAND_CONFIG:-}
      PADDLE_API_KEY: ${PADDLE_API_KEY:-}
      PADDLE_WEBHOOK_SECRET_KEY: ${PADDLE_WEBHOOK_SECRET_KEY:-}
      PADDLE_ENVIRONMENT: ${PADDLE_ENVIRONMENT:-sandbox}
      ENABLE_CORS: ${ENABLE_CORS:-false}
      KEYGEN_PRODUCT_TOKEN: ${KEYGEN_PRODUCT_TOKEN:-}
      MAIL_TYPE: ${MAIL_TYPE:-smtp}
      SENDGRID_API_KEY: ${SENDGRID_API_KEY:-}
      SENDGRID_FROM_EMAIL: ${SENDGRID_FROM_EMAIL:-}
      SENDGRID_CONTACT_LIST_ID: ${SENDGRID_CONTACT_LIST_ID:-}
      RECAPTCHA_SECRET_KEY: ${RECAPTCHA_SECRET_KEY:-}
      SINGLE_INGRESS: ${SINGLE_INGRESS:-true}
      TRUSTED_PROXY_IPS: ${TRUSTED_PROXY_IPS:-}

      LDAP_ENABLED: ${LDAP_ENABLED:-false}
      LDAP_ORG_ADMIN: ${LDAP_ORG_ADMIN:-}
      LDAP_URL: ${LDAP_URL:-}
      LDAP_BASE_DN: ${LDAP_BASE_DN:-}
      LDAP_MANAGER_DN: ${LDAP_MANAGER_DN:-}
      LDAP_MANAGER_PASSWORD: ${LDAP_MANAGER_PASSWORD:-}
      LDAP_USER_SEARCH_BASES: ${LDAP_USER_SEARCH_BASES:-}
      LDAP_USER_SEARCH_FILTER: ${LDAP_USER_SEARCH_FILTER:-}
      LDAP_ATTR_EMAIL: ${LDAP_ATTR_EMAIL:-}
      LDAP_ATTR_FIRSTNAME: ${LDAP_ATTR_FIRSTNAME:-}
      LDAP_ATTR_LASTNAME: ${LDAP_ATTR_LASTNAME:-}
      LDAP_ATTR_USERNAME: ${LDAP_ATTR_USERNAME:-}
      LDAP_OBJECT_CLASS: ${LDAP_OBJECT_CLASS:-}
      LDAP_OU_ROLE_MAPPINGS: ${LDAP_OU_ROLE_MAPPINGS:-}
      LDAP_SYNC_ENABLED: ${LDAP_SYNC_ENABLED:-false}
      LDAP_SYNC_CREATE: ${LDAP_SYNC_CREATE:-false}
      LDAP_SYNC_UPDATE: ${LDAP_SYNC_UPDATE:-false}
      LDAP_SYNC_DISABLE: ${LDAP_SYNC_DISABLE:-false}
      LDAP_SYNC_CRON: ${LDAP_SYNC_CRON:-}
    expose:
      - "8080"

  frontend:
    image: intelloop/atlas-cmms-frontend
    container_name: atlas-cmms-frontend
    environment:
      API_URL: /api
      GOOGLE_KEY: ${GOOGLE_KEY:- }
      GOOGLE_TRACKING_ID: ${GOOGLE_TRACKING_ID:- }
      INVITATION_VIA_EMAIL: ${INVITATION_VIA_EMAIL:-false}
      CLOUD_VERSION: ${CLOUD_VERSION:-false}
      NODE_ENV: production
      ENABLE_SSO: ${ENABLE_SSO:-false}
      OAUTH2_PROVIDER: ${OAUTH2_PROVIDER:- }
      LOGO_PATHS: ${LOGO_PATHS:- }
      CUSTOM_COLORS: ${CUSTOM_COLORS:- }
      BRAND_CONFIG: ${BRAND_CONFIG:- }
      DEMO_LINK: ${DEMO_LINK:- }
      HOME_URL: ${HOME_URL:-https://atlas-cmms.com}
      PADDLE_SECRET_TOKEN: ${PADDLE_SECRET_TOKEN:- }
      PADDLE_ENVIRONMENT: ${PADDLE_ENVIRONMENT:-sandbox}
      RECAPTCHA_SITE_KEY: ${RECAPTCHA_SITE_KEY:- }
      LDAP_ENABLED: ${LDAP_ENABLED:-false}
      SENTRY_DSN: ${SENTRY_DSN:- }
      SENTRY_ENVIRONMENT: ${SENTRY_ENVIRONMENT:- }
      SENTRY_RELEASE: ${SENTRY_RELEASE:- }
      CLARITY_ID: ${CLARITY_ID:- }
    expose:
      - "3000"
    depends_on:
      - api

  minio:
    image: pgsty/silo:RELEASE.2026-09-16T00-00-00Z
    container_name: atlas_minio
    user: "0:0"
    environment:
      MINIO_ROOT_USER: ${MINIO_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_PASSWORD}
    volumes:
      - minio_data:/data
    expose:
      - "9000"
      - "9001"
    command: server --address ":9000" --console-address ":9001" /data

  nginx:
    image: nginx:1.27-alpine
    container_name: atlas_nginx
    depends_on:
      - frontend
      - api
      - minio
    volumes:
      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
      # If terminating TLS directly in this container, also mount certs:
      # - ./certs:/etc/nginx/certs:ro
    ports:
      - "3000:80"
      # - "443:443"

volumes:
  postgres_data:
  minio_data: