mkdir -p /opt/rtsurvey && cd /opt/rtsurvey

services:
  mysql:
    image: mysql:8.0
    container_name: rtsurvey-mysql
    restart: unless-stopped
    command: >
      --default-authentication-plugin=mysql_native_password
      --character-set-server=utf8
      --collation-server=utf8_unicode_ci
      --sql-mode=NO_ENGINE_SUBSTITUTION
    environment:
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
      MYSQL_DATABASE: ${MYSQL_DATABASE:-smartsurvey}
      MYSQL_USER: ${MYSQL_USER:-smartsurvey}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
      MYSQL_ROOT_HOST: '%'
    volumes:
      - mysql_data:/var/lib/mysql
    networks:
      - rtsurvey-net
    healthcheck:
      test: ["CMD-SHELL", "mysqladmin ping -h localhost -u root -p$$MYSQL_ROOT_PASSWORD"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
 
  rtsurvey:
    image: rtawebteam/rtcloud:survey-public
    container_name: rtsurvey-app
    restart: unless-stopped
    entrypoint: ["/bin/entrypoint-production.sh"]
    depends_on:
      mysql:
        condition: service_healthy
    ports:
      - "${APP_PORT:-8080}:80"
      - "${SHINY_PORT:-3838}:3838"
    env_file:
      - .env
    volumes:
      - app_uploads:/var/www/html/smartsurvey/uploads
      - app_audios:/var/www/html/smartsurvey/audios
      - app_downloads:/var/www/html/smartsurvey/downloads
      - app_gallery:/var/www/html/smartsurvey/gallery
      - app_tmp:/var/www/html/smartsurvey/tmp
      - app_cache:/var/www/html/smartsurvey/cache
      - app_runtime:/var/www/html/smartsurvey/protected/runtime
      - app_assets:/var/www/html/smartsurvey/assets
      - app_aggregate:/var/www/html/smartsurvey/aggregate
    networks:
      - rtsurvey-net
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 90s
 
  # Optional: Embedded Keycloak SSO
  # Start with: docker compose --profile embed-keycloak up -d
  keycloak:
    image: quay.io/keycloak/keycloak:latest
    container_name: rtsurvey-keycloak
    restart: unless-stopped
    profiles:
      - embed-keycloak
    command: start --import-realm
    environment:
      KEYCLOAK_ADMIN: ${KEYCLOAK_ADMIN_USER:-admin}
      KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
      KC_HTTP_ENABLED: "true"
      KC_HTTP_RELATIVE_PATH: /auth
      KC_PROXY_HEADERS: xforwarded
      KC_HOSTNAME: ${KC_HOSTNAME}
      KC_HOSTNAME_STRICT: "false"
      KC_DB: mysql
      KC_DB_URL_DATABASE: ${KEYCLOAK_DB:-keycloak}
      KC_DB_URL_HOST: mysql
      KC_DB_USERNAME: ${KEYCLOAK_DB_USER:-keycloak}
      KC_DB_PASSWORD: ${KEYCLOAK_DB_PASSWORD}
    volumes:
      - ./keycloak-import:/opt/keycloak/data/import
    ports:
      - "${KEYCLOAK_PORT:-8091}:8080"
    depends_on:
      mysql:
        condition: service_healthy
    networks:
      - rtsurvey-net
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://localhost:9000/health/ready || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 120s
 
volumes:
  mysql_data:
  app_uploads:
  app_audios:
  app_downloads:
  app_gallery:
  app_tmp:
  app_cache:
  app_runtime:
  app_assets:
  app_aggregate:
 
networks:
  rtsurvey-net:
    driver: bridge

# Project
PROJECT_ID=mysurvey
PROJECT_TYPE=rtsurvey
PROJECT_URL=your-server-ip-or-domain
HTTP_PROTOCOL=http
TZ=UTC
 
# Database
MYSQL_HOST=mysql
MYSQL_DATABASE=smartsurvey
MYSQL_USER=smartsurvey
MYSQL_ROOT_PASSWORD=change-this-root-password
MYSQL_PASSWORD=change-this-app-password
 
# Admin (set before first startup — cannot change via env after DB is created)
ADMIN_PASSWORD=change-this-admin-password
 
# Runtime
RUN_ENV=prod
RUN_MODE=admin
GII_ENABLED=false
CSRF_VALIDATION_ENABLED=true
 
# Ports (optional — defaults shown)
APP_PORT=8080
SHINY_PORT=3838

docker compose up -d

# Check all containers are running
docker compose ps
 
# Check application health
curl http://localhost:8080/health