Maj

docker-compose.yml

@@ -1,15 +1,12 @@
 version: "3.9"
 
 services:
-  backend:
+  crowdlending-backend:
     build:
       context: ./backend
       dockerfile: Dockerfile
     container_name: crowdlending-backend
     restart: unless-stopped
-    # Port exposé uniquement en dev local — en prod, nginx proxie en interne
-    # ports:
-    #   - "4000:4000"
     env_file:
       - .env
     environment:
@@ -18,16 +15,18 @@ services:
       DB_PATH: /app/data/crowdlending.db
       UPLOAD_DIR: /app/uploads
     volumes:
-      - backend_data:/app/data
-      - backend_uploads:/app/uploads
+      - ../volumes/crowdlending/data:/app/data
+      - ../volumes/crowdlending/uploads:/app/uploads
     healthcheck:
       test: ["CMD", "node", "-e", "fetch('http://localhost:4000/api/health').then(r => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))"]
       interval: 30s
       timeout: 5s
       retries: 3
       start_period: 10s
+    networks:
+      - internal
  
-  frontend:
+  crowdlending-frontend:
     build:
       context: ./frontend
       dockerfile: Dockerfile
@@ -35,12 +34,22 @@ services:
         VITE_API_URL: /api
     container_name: crowdlending-frontend
     restart: unless-stopped
-    ports:
-      - "8080:80"
     depends_on:
       backend:
         condition: service_healthy
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.crowdlending.rule=Host(`crowdlending.croguennec.net`)"
+      - "traefik.http.routers.crowdlending.entrypoints=websecure"
+      - "traefik.http.routers.crowdlending.tls.certresolver=le"
+      - "traefik.http.routers.crowdlending.middlewares=ipwhitelist-all"
+      - "traefik.http.services.crowdlending.loadbalancer.server.port=80"
+    networks:
+      - internal
+      - backend    # réseau Traefik
  
-volumes:
-  backend_data:
-  backend_uploads:
+networks:
+  internal:        # communication interne backend <-> frontend
+    driver: bridge
+  backend:         # réseau partagé avec Traefik
+    external: true