{
  "compose": "# Candydati for Dokploy, generated from docker-compose.prod.yml: do not edit, run\n# `pnpm --filter @candydati/tools dokploy-template`. Guide: docs/deploy/dokploy.md.\nservices:\n  postgres:\n    image: postgres:17@sha256:2d2b8998d31037bf721cfdf764d76ba74171b4fab3431b7f72c27c56ddbdf9e3\n    restart: unless-stopped\n    environment:\n      POSTGRES_USER: ${POSTGRES_USER:-candydati}\n      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?imposta POSTGRES_PASSWORD}\n      POSTGRES_DB: ${POSTGRES_DB:-candydati}\n    volumes:\n      - pgdata:/var/lib/postgresql/data\n    networks:\n      - internal\n    healthcheck:\n      test:\n        - CMD-SHELL\n        - pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}\n      interval: 5s\n      timeout: 3s\n      retries: 10\n  minio:\n    image: cgr.dev/chainguard/minio:latest@sha256:2136d593beacf4461187035eca949fe49abd589d5079735025c711ca58fee0c8\n    restart: unless-stopped\n    command: server /data --console-address \":9001\"\n    environment:\n      MINIO_ROOT_USER: ${S3_ACCESS_KEY:?imposta S3_ACCESS_KEY}\n      MINIO_ROOT_PASSWORD: ${S3_SECRET_KEY:?imposta S3_SECRET_KEY}\n    volumes:\n      - miniodata:/data\n    networks:\n      - internal\n  api:\n    image: ghcr.io/fabrilallo/candydati-api:${CANDYDATI_VERSION:-0.1.9}\n    restart: unless-stopped\n    environment:\n      NODE_ENV: production\n      LOG_LEVEL: ${LOG_LEVEL:-info}\n      DATABASE_URL: postgres://${POSTGRES_USER:-candydati}:${POSTGRES_PASSWORD:?imposta POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-candydati}\n      S3_ENDPOINT: http://minio:9000\n      S3_REGION: ${S3_REGION:-us-east-1}\n      S3_BUCKET: ${S3_BUCKET:-candydati}\n      S3_ACCESS_KEY: ${S3_ACCESS_KEY:?imposta S3_ACCESS_KEY}\n      S3_SECRET_KEY: ${S3_SECRET_KEY:?imposta S3_SECRET_KEY}\n      S3_FORCE_PATH_STYLE: \"true\"\n      PLATFORM_NAME: ${PLATFORM_NAME:-Candydati}\n      PLATFORM_URL: ${PLATFORM_URL:?imposta PLATFORM_URL}\n      PLATFORM_SUPPORT_EMAIL: ${PLATFORM_SUPPORT_EMAIL:-support@example.com}\n      PLATFORM_DEFAULT_LOCALE: ${PLATFORM_DEFAULT_LOCALE:-it}\n      PLATFORM_TIME_ZONE: ${PLATFORM_TIME_ZONE:-Europe/Rome}\n      PLATFORM_AD_QUALITY_THRESHOLD: ${PLATFORM_AD_QUALITY_THRESHOLD:-6}\n      EMAIL_PROVIDER: ${EMAIL_PROVIDER:-}\n      SMTP_HOST: ${SMTP_HOST:-mailpit}\n      SMTP_PORT: ${SMTP_PORT:-1025}\n      SMTP_SECURE: ${SMTP_SECURE:-false}\n      SMTP_USER: ${SMTP_USER:-}\n      SMTP_PASSWORD: ${SMTP_PASSWORD:-}\n      RESEND_API_KEY: ${RESEND_API_KEY:-}\n      EMAIL_DOMAIN: ${EMAIL_DOMAIN:-localhost}\n      EMAIL_FROM_LOCAL: ${EMAIL_FROM_LOCAL:-noreply}\n      EMAIL_INBOUND_DOMAIN: ${EMAIL_INBOUND_DOMAIN:-}\n      WEBHOOKS_ALLOW_PRIVATE: \"false\"\n      AGENT_MODEL: ${AGENT_MODEL:-}\n      FAST_MODEL: ${FAST_MODEL:-}\n      OPENAI_API_KEY: ${OPENAI_API_KEY:-}\n      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}\n      GOOGLE_GENERATIVE_AI_API_KEY: ${GOOGLE_GENERATIVE_AI_API_KEY:-}\n      MISTRAL_API_KEY: ${MISTRAL_API_KEY:-}\n      GROQ_API_KEY: ${GROQ_API_KEY:-}\n      DEEPSEEK_API_KEY: ${DEEPSEEK_API_KEY:-}\n      XAI_API_KEY: ${XAI_API_KEY:-}\n      OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}\n      CV_MODEL_DAILY_BUDGET: ${CV_MODEL_DAILY_BUDGET:-1000}\n      IMPORT_STALE_DAYS: ${IMPORT_STALE_DAYS:-7}\n      DELIVERY_LOG_RETENTION_DAYS: ${DELIVERY_LOG_RETENTION_DAYS:-30}\n      METRICS_TOKEN: ${METRICS_TOKEN:-}\n      SENTRY_DSN: ${SENTRY_DSN:-}\n      SENTRY_ENVIRONMENT: ${SENTRY_ENVIRONMENT:-}\n      SENTRY_RELEASE: ${SENTRY_RELEASE:-${CANDYDATI_VERSION:-}}\n      RUN_MIGRATIONS: \"true\"\n      API_PORT: \"4000\"\n      API_HOST: 0.0.0.0\n      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET:?imposta BETTER_AUTH_SECRET (almeno 32 caratteri)}\n      BETTER_AUTH_URL: ${PLATFORM_URL}\n      WEB_ORIGIN: ${PLATFORM_URL}\n      TRUSTED_ORIGINS: ${TRUSTED_ORIGINS:-}\n      API_KEY_RATE_LIMIT: ${API_KEY_RATE_LIMIT:-}\n      TRUST_PROXY: ${TRUST_PROXY:-${CANDYDATI_WEB_IP:-172.31.77.10}}\n      APPLICATIONS_DAILY_MAX_PER_ORGANIZATION: ${APPLICATIONS_DAILY_MAX_PER_ORGANIZATION:-500}\n      APPLICATIONS_DAILY_MAX_PER_JOB: ${APPLICATIONS_DAILY_MAX_PER_JOB:-200}\n      RECEIPTS_DAILY_MAX_PER_ORGANIZATION: ${RECEIPTS_DAILY_MAX_PER_ORGANIZATION:-300}\n      TURNSTILE_SECRET_KEY: ${TURNSTILE_SECRET_KEY:-}\n      INBOUND_WEBHOOK_SECRET: ${INBOUND_WEBHOOK_SECRET:?imposta INBOUND_WEBHOOK_SECRET (almeno 32 caratteri)}\n      SIGNUP_MODE: ${SIGNUP_MODE:-invite_only}\n      BOOTSTRAP_TOKEN: ${BOOTSTRAP_TOKEN:-}\n      ORGANIZATION_CREATION: ${ORGANIZATION_CREATION:-}\n      INSTANCE_ADMIN_EMAILS: ${INSTANCE_ADMIN_EMAILS:-}\n      API_KEY_DEFAULT_TTL_DAYS: ${API_KEY_DEFAULT_TTL_DAYS:-90}\n      MCP_MODEL_DAILY_BUDGET_PER_KEY: ${MCP_MODEL_DAILY_BUDGET_PER_KEY:-200}\n      MCP_MODEL_DAILY_BUDGET_PER_ORGANIZATION: ${MCP_MODEL_DAILY_BUDGET_PER_ORGANIZATION:-1000}\n      MCP_MODEL_DAILY_BUDGET_PER_USER: ${MCP_MODEL_DAILY_BUDGET_PER_USER:-300}\n      ASSISTANT_DAILY_BUDGET_PER_USER: ${ASSISTANT_DAILY_BUDGET_PER_USER:-200}\n      ASSISTANT_DAILY_BUDGET_PER_ORGANIZATION: ${ASSISTANT_DAILY_BUDGET_PER_ORGANIZATION:-2000}\n    networks:\n      - internal\n    depends_on:\n      postgres:\n        condition: service_healthy\n      minio:\n        condition: service_started\n  worker:\n    image: ghcr.io/fabrilallo/candydati-worker:${CANDYDATI_VERSION:-0.1.9}\n    restart: unless-stopped\n    environment:\n      NODE_ENV: production\n      LOG_LEVEL: ${LOG_LEVEL:-info}\n      DATABASE_URL: postgres://${POSTGRES_USER:-candydati}:${POSTGRES_PASSWORD:?imposta POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-candydati}\n      S3_ENDPOINT: http://minio:9000\n      S3_REGION: ${S3_REGION:-us-east-1}\n      S3_BUCKET: ${S3_BUCKET:-candydati}\n      S3_ACCESS_KEY: ${S3_ACCESS_KEY:?imposta S3_ACCESS_KEY}\n      S3_SECRET_KEY: ${S3_SECRET_KEY:?imposta S3_SECRET_KEY}\n      S3_FORCE_PATH_STYLE: \"true\"\n      PLATFORM_NAME: ${PLATFORM_NAME:-Candydati}\n      PLATFORM_URL: ${PLATFORM_URL:?imposta PLATFORM_URL}\n      PLATFORM_SUPPORT_EMAIL: ${PLATFORM_SUPPORT_EMAIL:-support@example.com}\n      PLATFORM_DEFAULT_LOCALE: ${PLATFORM_DEFAULT_LOCALE:-it}\n      PLATFORM_TIME_ZONE: ${PLATFORM_TIME_ZONE:-Europe/Rome}\n      PLATFORM_AD_QUALITY_THRESHOLD: ${PLATFORM_AD_QUALITY_THRESHOLD:-6}\n      EMAIL_PROVIDER: ${EMAIL_PROVIDER:-}\n      SMTP_HOST: ${SMTP_HOST:-mailpit}\n      SMTP_PORT: ${SMTP_PORT:-1025}\n      SMTP_SECURE: ${SMTP_SECURE:-false}\n      SMTP_USER: ${SMTP_USER:-}\n      SMTP_PASSWORD: ${SMTP_PASSWORD:-}\n      RESEND_API_KEY: ${RESEND_API_KEY:-}\n      EMAIL_DOMAIN: ${EMAIL_DOMAIN:-localhost}\n      EMAIL_FROM_LOCAL: ${EMAIL_FROM_LOCAL:-noreply}\n      EMAIL_INBOUND_DOMAIN: ${EMAIL_INBOUND_DOMAIN:-}\n      WEBHOOKS_ALLOW_PRIVATE: \"false\"\n      AGENT_MODEL: ${AGENT_MODEL:-}\n      FAST_MODEL: ${FAST_MODEL:-}\n      OPENAI_API_KEY: ${OPENAI_API_KEY:-}\n      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}\n      GOOGLE_GENERATIVE_AI_API_KEY: ${GOOGLE_GENERATIVE_AI_API_KEY:-}\n      MISTRAL_API_KEY: ${MISTRAL_API_KEY:-}\n      GROQ_API_KEY: ${GROQ_API_KEY:-}\n      DEEPSEEK_API_KEY: ${DEEPSEEK_API_KEY:-}\n      XAI_API_KEY: ${XAI_API_KEY:-}\n      OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}\n      CV_MODEL_DAILY_BUDGET: ${CV_MODEL_DAILY_BUDGET:-1000}\n      IMPORT_STALE_DAYS: ${IMPORT_STALE_DAYS:-7}\n      DELIVERY_LOG_RETENTION_DAYS: ${DELIVERY_LOG_RETENTION_DAYS:-30}\n      METRICS_TOKEN: ${METRICS_TOKEN:-}\n      SENTRY_DSN: ${SENTRY_DSN:-}\n      SENTRY_ENVIRONMENT: ${SENTRY_ENVIRONMENT:-}\n      SENTRY_RELEASE: ${SENTRY_RELEASE:-${CANDYDATI_VERSION:-}}\n      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET:?imposta BETTER_AUTH_SECRET (almeno 32 caratteri)}\n      WORKER_PORT: ${WORKER_PORT:-4001}\n      WORKER_HOST: ${WORKER_HOST:-0.0.0.0}\n    networks:\n      - internal\n    healthcheck:\n      test:\n        - CMD\n        - node\n        - -e\n        - const p=process.env.WORKER_PORT||4001;if(p==='0')process.exit(0);fetch('http://127.0.0.1:'+p+'/health').then(r=>process.exit(r.ok?0:1),()=>process.exit(1))\n      interval: 15s\n      timeout: 5s\n      retries: 5\n      start_period: 40s\n    depends_on:\n      api:\n        condition: service_healthy\n  web:\n    image: ghcr.io/fabrilallo/candydati-web:${CANDYDATI_VERSION:-0.1.9}\n    restart: unless-stopped\n    environment:\n      NODE_ENV: production\n      NUXT_API_INTERNAL_URL: http://api:4000\n      NUXT_PUBLIC_PLATFORM_NAME: ${PLATFORM_NAME:-Candydati}\n      NUXT_PUBLIC_PLATFORM_ICON_URL: ${PLATFORM_ICON_URL:-}\n      NUXT_PUBLIC_PLATFORM_DEFAULT_LOCALE: ${PLATFORM_DEFAULT_LOCALE:-it}\n      NUXT_PUBLIC_SITE_URL: ${PLATFORM_URL}\n      NUXT_PUBLIC_TIME_ZONE: ${NUXT_PUBLIC_TIME_ZONE:-Europe/Rome}\n      NUXT_PUBLIC_SOURCE_URL: ${NUXT_PUBLIC_SOURCE_URL:-}\n      NUXT_API_MAX_BODY_BYTES: ${NUXT_API_MAX_BODY_BYTES:-213909504}\n      NUXT_API_TIMEOUT_MS: ${NUXT_API_TIMEOUT_MS:-300000}\n      NUXT_TRUST_CLOUDFLARE: ${NUXT_TRUST_CLOUDFLARE:-false}\n      NUXT_TRUSTED_PROXY: ${NUXT_TRUSTED_PROXY:-}\n      NUXT_PUBLIC_TURNSTILE_SITE_KEY: ${NUXT_PUBLIC_TURNSTILE_SITE_KEY:-}\n      NUXT_SENTRY_DSN: ${NUXT_SENTRY_DSN:-}\n    networks:\n      internal:\n        ipv4_address: ${CANDYDATI_WEB_IP:-172.31.77.10}\n    depends_on:\n      api:\n        condition: service_healthy\n  backup:\n    image: ghcr.io/fabrilallo/candydati-backup:${CANDYDATI_VERSION:-0.1.9}\n    restart: unless-stopped\n    command:\n      - backup.sh\n      - loop\n    environment:\n      PGHOST: postgres\n      PGUSER: ${POSTGRES_USER:-candydati}\n      PGPASSWORD: ${POSTGRES_PASSWORD:?imposta POSTGRES_PASSWORD}\n      PGDATABASE: ${POSTGRES_DB:-candydati}\n      BACKUP_AT: ${BACKUP_AT:-02:30}\n      BACKUP_RETENTION_DAYS: ${BACKUP_RETENTION_DAYS:-14}\n      BACKUP_ENCRYPTION_PASSPHRASE: ${BACKUP_ENCRYPTION_PASSPHRASE:-}\n      BACKUP_UPLOAD: ${BACKUP_UPLOAD:-true}\n      BACKUP_S3_ENDPOINT: ${BACKUP_S3_ENDPOINT:-http://minio:9000}\n      BACKUP_S3_REGION: ${BACKUP_S3_REGION:-${S3_REGION:-us-east-1}}\n      BACKUP_S3_BUCKET: ${BACKUP_S3_BUCKET:-${S3_BUCKET:-candydati}}\n      BACKUP_S3_ACCESS_KEY: ${BACKUP_S3_ACCESS_KEY:-${S3_ACCESS_KEY:-}}\n      BACKUP_S3_SECRET_KEY: ${BACKUP_S3_SECRET_KEY:-${S3_SECRET_KEY:-}}\n      BACKUP_S3_PREFIX: ${BACKUP_S3_PREFIX:-backups/}\n      BACKUP_S3_PATH_STYLE: ${BACKUP_S3_PATH_STYLE:-true}\n      BACKUP_S3_SSE: ${BACKUP_S3_SSE:-}\n    volumes:\n      - backups:/backups\n    networks:\n      - internal\n    healthcheck:\n      test:\n        - CMD-SHELL\n        - find /backups/last-success -mmin -1560 2>/dev/null | grep -q .\n      interval: 5m\n      timeout: 10s\n      retries: 1\n      start_period: 10m\n    depends_on:\n      api:\n        condition: service_healthy\nnetworks:\n  internal:\n    ipam:\n      config:\n        - subnet: ${CANDYDATI_SUBNET:-172.31.77.0/24}\nvolumes:\n  pgdata: null\n  miniodata: null\n  backups: null\n",
  "config": "[variables]\nmain_domain = \"${domain}\"\nbetter_auth_secret = \"${password:64}\"\ninbound_webhook_secret = \"${password:64}\"\npostgres_password = \"${password:32}\"\ns3_secret_key = \"${password:32}\"\n\n[config]\n[[config.domains]]\nserviceName = \"web\"\nport = 3000\nhost = \"${main_domain}\"\n\n[config.env]\nPLATFORM_URL = \"https://${main_domain}\"\nPLATFORM_NAME = \"Candydati\"\nPLATFORM_SUPPORT_EMAIL = \"\"\nBETTER_AUTH_SECRET = \"${better_auth_secret}\"\nINBOUND_WEBHOOK_SECRET = \"${inbound_webhook_secret}\"\nPOSTGRES_PASSWORD = \"${postgres_password}\"\nS3_ACCESS_KEY = \"candydati\"\nS3_SECRET_KEY = \"${s3_secret_key}\"\n"
}