update .env file

.env.db.example

@@ -0,0 +1,3 @@
+POSTGRES_PASSWORD=
+POSTGRES_USER=
+POSTGRES_DB=

.env.production.example

@@ -0,0 +1,9 @@
+OPENROUTER_API_KEY=
+AUTH_AUTHENTIK_CLIENT_ID=
+AUTH_AUTHENTIK_CLIENT_SECRET=notsosupersecret
+AUTH_AUTHENTIK_ISSUER=https://example.com
+
+NEXTAUTH_URL=https://example.com
+AUTH_SECRET=supersecret
+NEXTAUTH_SECRET=supersecret
+DB_URL=postgres://<user>:<password>@<host>:<port>/<database>

.gitignore

@@ -38,6 +38,7 @@ report.[0-9]_.[0-9]_.[0-9]_.[0-9]_.json
 
 # dotenv environment variable files
 .env*
+!.env*.example
 
 # caches
 .eslintcache

docker-compose.yml

@@ -3,6 +3,9 @@ services:
     build: .
     container_name: local-ical
     restart: unless-stopped
+    depends_on:
+      postgresql:
+        condition: service_started
     networks:
       - traefik
       - internal
@@ -14,6 +17,36 @@ services:
       'traefik.http.routers.ical-local.tls.certresolver': 'letsencrypt'
       'traefik.http.routers.ical-local.service': 'ical-local-service'
       'traefik.http.services.ical-local-service.loadbalancer.server.port': '3000'
+  postgresql:
+    image: docker.io/library/postgres:16-alpine
+    restart: unless-stopped
+    container_name: local-ical-db
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
+      start_period: 20s
+      interval: 30s
+      retries: 5
+      timeout: 5s
+    # ports:
+    #   - '5432:5432'
+    volumes:
+      - ical-local-postges:/var/lib/postgresql/data
+    env_file:
+      - .env.db
+    networks:
+      - traefik
+      - internal
+    labels:
+      'traefik.enable': 'true'
+      'traefik.docker.network': 'traefik'
+      'traefik.http.routers.ical-local-db.rule': 'Host(`db.cal.cloud.dmytros.dev`)'
+      'traefik.http.routers.ical-local-db.entrypoints': 'websecure'
+      'traefik.http.routers.ical-local-db.tls.certresolver': 'letsencrypt'
+      'traefik.http.routers.ical-local-db.service': 'ical-local-db-service'
+      'traefik.http.services.ical-local-db-service.loadbalancer.server.port': '5432'
+volumes:
+  ical-local-postges:
+    driver: local
 networks:
   traefik:
     external: true