docker-compose.yml

services:
  aptabase_db:
    container_name: aptabase_db
    image: postgres:15-alpine
    restart: always
    volumes:
      - db-data:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: aptabase
      POSTGRES_PASSWORD: sTr0NGp4ssw0rd

  aptabase_events_db:
    container_name: aptabase_events_db
    image: clickhouse/clickhouse-server:26.8.36.3-alpine # 26.8.36.3 fixes CVE-2026-116366; do not downgrade to 23.x
    restart: always
    volumes:
      - events-db-data:/var/lib/clickhouse
    environment:
      CLICKHOUSE_USER: aptabase
      CLICKHOUSE_PASSWORD: sTr0NGp4ssw0rd
    ulimits:
      nofile:
        soft: 262144
        hard: 262144

  aptabase:
    container_name: aptabase_app
    image: ghcr.io/aptabase/aptabase:main
    restart: always
    depends_on:
      - aptabase_events_db
      - aptabase_db
    ports:
      - 8000:8080
    environment:
      BASE_URL: http://localhost:8000 # replace with your ip or domain, including port if needed
      # Required. Generate your own with: openssl rand -base64 32
      # Never reuse a value you found in a tutorial: anyone who knows it can sign in as any user.
      AUTH_SECRET: ${AUTH_SECRET:?Set AUTH_SECRET in a .env file next to this compose file. Generate one with: openssl rand -base64 32}
      DATABASE_URL: Server=aptabase_db;Port=5432;User Id=aptabase;Password=sTr0NGp4ssw0rd;Database=aptabase
      CLICKHOUSE_URL: Host=aptabase_events_db;Port=8123;Username=aptabase;Password=sTr0NGp4ssw0rd

volumes:
  db-data:
    driver: local
  events-db-data:
    driver: local