Docker Compose
Files live in splick-backend/infra/docker.
| File | Role |
|---|---|
docker-compose.yml | Local and the service graph |
docker-compose.prod.yml | Production overrides |
manage.sh / manage-local.sh / manage-remote.sh | Sync, setup, deploy, backup, verify |
resources.env.example | Resource preset template |
OPS.md, BACKUP.md, CONFIG.md | Operator notes next to the scripts |
Compose starts Postgres, PgBouncer, Redis, Kong, the Java services, the relay (host 8089 to container 8088), and optionally the monitoring stack when ENABLE_MONITORING is set.
Do not bake secrets into images. The Dockerfiles (Dockerfile, Dockerfile.prebuilt) expect env at runtime. A key file checked into infra/docker is a security incident even if the docs do not repeat it: rotate it and remove it from history through the normal security process.
Local helper from the backend repo: ./gradlew startTestEnvironment wraps the same infra for a first boot.