#docker (2020-12)

volumes:
  postgres_data: {}

services:
  app:
    build:
      context: .
      dockerfile: ./docker/app/Dockerfile
    depends_on:
      - db
      - redis
    volumes:
      - assets-volume:/var/www/public
  db:
    image: postgres
    volumes:
      - postgres_data:/var/lib/postgresql/data
  redis:
    image: redis
    command: redis-server
    volumes:
      - '.:/app'
  web:
    build:
      context: .
      dockerfile: ./docker/web/Dockerfile
    depends_on:
      - app
    volumes:
      - assets-volume:/var/www/public
    ports:
      - 80:80
volumes:
  redis: 
  postgres_data:
  assets-volume:

Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
libssl-dev : Depends: libssl1.1 (= 1.1.1d-0+deb10u3) but 1.1.1d-0+deb10u4 is to be installed

version: '3'
services:
  app:
    build:
      context: .
      dockerfile: ./docker/app/Dockerfile
    volumes:
      - assets-volume:/var/www/crovv/public
  web:
    build:
      context: .
      dockerfile: ./docker/web/Dockerfile
    depends_on:
      - app
    volumes:
      - assets-volume:/var/www/crovv/public
    ports:
      - 80:80
volumes:
  redis: 
  postgres_data:
  assets-volume:

 # This is a template. Referenced variables (e.g. $RAILS_ROOT) need 
# to be rewritten with real values in order for this file to work. 

upstream rails_app {
  server app:3000;
}
map $http_upgrade $connection_upgrade {
    default upgrade;
    '' close;
}
server {
  # define your domain
  server_name localhost;

  # define the public application root
  root   $RAILS_ROOT/public;
  index  index.html;

  # define where Nginx should write its logs
  access_log $RAILS_ROOT/log/nginx.access.log;
  error_log $RAILS_ROOT/log/nginx.error.log;

  client_max_body_size 0;

  # deny requests for files that should never be accessed
  location ~ /\. {
    deny all;
  }

  location ~* ^.+\.(rb|log)$ {
    deny all;
  }

  # serve static (compiled) assets directly if they exist (for rails production)
  location ~ ^/(assets|images|javascripts|stylesheets|swfs|system)/ {
    try_files $uri @rails;

    access_log off;
    gzip_static on; # to serve pre-gzipped version

    expires max;
    add_header Cache-Control public;

    # Some browsers still send conditional-GET requests if there's a
    # Last-Modified header or an ETag header even if they haven't
    # reached the expiry date sent in the Expires header.
    add_header Last-Modified "";
    add_header ETag "";
    break;
  }

  # send non-static file requests to the app server
  location / {
    try_files $uri @rails;
  }

  location /cable {
      proxy_pass <http://rails_app/cable>;
      proxy_http_version 1.1;
      proxy_set_header Upgrade websocket;
      proxy_set_header Connection Upgrade;

      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-Proto https;
      proxy_redirect off;
  }

  location @rails {
      proxy_set_header  X-Real-IP  $remote_addr;
      proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header  Host $http_host;
      proxy_redirect off;
      proxy_pass <http://rails_app>;
  }
}

module "app_container" {
  source                       = "[email protected]:cloudposse/terraform-aws-ecs-container-definition.git?ref=0.44.0"
  container_name               = "${var.container_name}-app"
  container_image              = "${local.aws_account_id}.dkr.ecr.${var.aws_region}.amazonaws.com/${local.ecr_app_repo}"
  container_memory_reservation = 512
  essential                    = true
  readonly_root_filesystem     = false
  port_mappings = [
    {
      containerPort = 3000
      hostPort      = 3000
      protocol      = "tcp"
    }
  ]
  log_configuration = {
    logDriver = "awslogs"
    options = {
      "awslogs-group" : "/${var.app_code}/${var.app_type}/${var.app_env}/${var.cluster_name}/app",
      "awslogs-region" : var.aws_region,
      "awslogs-stream-prefix" : "ecs"
    }
    secretOptions = null
  }
## Environment variables declared here
## Secrets declared here
  privileged = false
}

module "web_container" {
  source                       = "[email protected]:cloudposse/terraform-aws-ecs-container-definition.git?ref=0.44.0"
  container_name               = "${var.container_name}-web"
  container_image              = "${local.aws_account_id}.dkr.ecr.${var.aws_region}.amazonaws.com/${local.ecr_web_repo}"
  container_memory_reservation = 512
  essential                    = false
  readonly_root_filesystem     = false
  port_mappings = [
    {
      containerPort = 80
      hostPort      = 8084
      protocol      = "tcp"
    }
  ]
  log_configuration = {
    logDriver = "awslogs"
    options = {
      "awslogs-group" : "/${var.app_code}/${var.app_type}/${var.app_env}/${var.cluster_name}/web",
      "awslogs-region" : var.aws_region,
      "awslogs-stream-prefix" : "ecs"
    }
    secretOptions = null
  }
  links = ["${var.container_name}-app"]
  privileged = false
}

resource "aws_ecs_task_definition" "this" {
  family                   = "${var.app_type}-${var.app_code}-${var.app_env}-${var.task_def_name}"
  container_definitions    = "[${module.web_container.json_map_encoded},${module.app_container.json_map_encoded}]"
  task_role_arn            = aws_iam_role.ecs_role.arn
  execution_role_arn       = aws_iam_role.ecs_role.arn
  requires_compatibilities = ["EC2"]
  tags = merge({
    Name = "${var.app_type}-${var.app_code}-${var.app_env}-${var.task_def_name}"
  }, var.app_tags)
}

docker run -i -t hashicorp/terraform:light plan [main.tf](http://main.tf)