Changed port mappings of penpot frontend

docker-stacks/app-server/docuseal.yml

@@ -1,13 +1,24 @@
 services:
   docuseal:
-    image: docuseal/docuseal:latest
+    image: docuseal/docuseal
     restart: always
     environment:
       - DATABASE_URL=${DATABASE_URL}
       - PORT=3000
       - HOST=${PUBLIC_URL}
       - SECRET_KEY_BASE=${SECRET_KEY_BASE}
+      - RAILS_ENV=production
+      - SKIP_MIGRATION_VALIDATION=true
+      - SMTP_USERNAME=${SMTP_USERNAME}
+      - SMTP_PASSWORD=${SMTP_PASSWORD}
+      - SMTP_ADDRESS=${SMTP_ADDRESS}      
+      - SMTP_FROM=${SMTP_FROM}
+      - AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
+      - AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
+      - AWS_REGION=${AWS_REGION}
+      - S3_ATTACHMENTS_BUCKET=${S3_ATTACHMENTS_BUCKET}
+
     ports:
-      - "3000:3000"
+      - "3001:3000"
     volumes:
       - ./docuseal_data:/data

docker-stacks/app-server/penpot.yml

@@ -1,21 +1,135 @@
+x-flags: &penpot-flags
+  # Merged disable-sandbox into the flags array to protect the headless engine
+  # PENPOT_FLAGS: disable-email-verification enable-smtp enable-prepl-server disable-secure-session-cookies enable-mcp disable-sandbox enable-login-with-password
+  PENPOT_FLAGS: disable-email-verification enable-smtp enable-prepl-server disable-secure-session-cookies disable-sandbox enable-login-with-password
+
+x-uri: &penpot-public-uri
+  PENPOT_PUBLIC_URI: ${PENPOT_PUBLIC_URI}
+
+x-body-size: &penpot-http-body-size
+  PENPOT_HTTP_SERVER_MAX_BODY_SIZE: 367001600
+  PENPOT_HTTP_SERVER_MAX_MULTIPART_BODY_SIZE: 367001600
+
+x-secret-key: &penpot-secret-key
+  PENPOT_SECRET_KEY: ${PENPOT_SECRET_KEY}
+
+networks:
+  penpot-net:
+    driver: bridge
+
+volumes:
+  penpot_assets:
+  penpot_postgres_v15:
+
 services:
-  penpot-backend:
-    image: penpotapp/backend:latest
+  penpot-frontend:
+    image: "penpotapp/frontend:${PENPOT_VERSION:-latest}"
     restart: always
+    ports:
+      - "8084:8080"
+    volumes:
+      - penpot_assets:/opt/data/assets
+    depends_on:
+      - penpot-backend
+      - penpot-exporter
+      - penpot-mcp
+    networks:
+      - penpot-net
     environment:
-      - PENPOT_DATABASE_URI=${PENPOT_DATABASE_URI}
-      - PENPOT_REDIS_URI=${PENPOT_REDIS_URI}
-      - PENPOT_SECRET_KEY=${PENPOT_SECRET_KEY}
-      - PENPOT_PUBLIC_URI=${PENPOT_PUBLIC_URI}
+      <<: [*penpot-flags, *penpot-http-body-size, *penpot-public-uri]
+
+  penpot-backend:
+    image: "penpotapp/backend:${PENPOT_VERSION:-latest}"
+    restart: always
+    volumes:
+      - penpot_assets:/opt/data/assets
+    networks:
+      - penpot-net
     ports:
       - "6060:6060"
-
-  penpot-frontend:
-    image: penpotapp/frontend:latest
-    restart: always
-    environment:
-      - PENPOT_FLAGS=enable-all-flags
-    ports:
-      - "8080:80"
     depends_on:
-      - penpot-backend
+      penpot-postgres:
+        condition: service_healthy # Wait for database stability
+      penpot-valkey:
+        condition: service_healthy # Wait for internal caching layer stability
+    environment:
+      << : [*penpot-flags, *penpot-public-uri, *penpot-http-body-size, *penpot-secret-key]
+      
+      # Security Handshake Key for internal Exporter validation routines
+      PENPOT_EXPORTER_SECRET_KEY: ${PENPOT_EXPORTER_SECRET_KEY}
+
+      ## Local Internal Database connection parameters
+      PENPOT_DATABASE_URI: postgresql://penpot-postgres/penpot
+      PENPOT_DATABASE_USERNAME: penpot
+      PENPOT_DATABASE_PASSWORD: penpot
+
+      ## Local Caching Layer connection parameter
+      PENPOT_REDIS_URI: redis://penpot-valkey/0
+
+      ## Storage Settings
+      PENPOT_OBJECTS_STORAGE_BACKEND: fs
+      PENPOT_OBJECTS_STORAGE_FS_DIRECTORY: /opt/data/assets
+
+      ## Telemetry & Optional settings
+      PENPOT_TELEMETRY_ENABLED: "false"
+
+  penpot-mcp:
+    image: "penpotapp/mcp:${PENPOT_VERSION:-latest}"
+    restart: always
+    networks:
+      - penpot-net
+
+  penpot-exporter:
+    image: "penpotapp/exporter:${PENPOT_VERSION:-latest}"
+    restart: always
+    shm_size: '2gb' # Protects Puppeteer rendering processes from memory crashes
+    depends_on:
+      penpot-valkey:
+        condition: service_healthy
+    networks:
+      - penpot-net
+    environment:
+      << : [*penpot-secret-key]
+      PENPOT_EXPORTER_SECRET_KEY: ${PENPOT_EXPORTER_SECRET_KEY}
+      PENPOT_PUBLIC_URI: http://penpot-frontend:8080
+
+      ## Local Caching Layer connections for the exporter sub-engine
+      PENPOT_REDIS_URI: redis://penpot-valkey/0
+      PENPOT_REDIS_URL: redis://penpot-valkey/0
+      PENPOT_FLAGS: disable-sandbox
+
+  # Integrated isolated Database Service
+  penpot-postgres:
+    image: "postgres:15"
+    restart: always
+    stop_signal: SIGINT
+    networks:
+      - penpot-net
+    volumes:
+      - penpot_postgres_v15:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_INITDB_ARGS=--data-checksums
+      - POSTGRES_DB=penpot
+      - POSTGRES_USER=penpot
+      - POSTGRES_PASSWORD=penpot
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U penpot"]
+      interval: 2s
+      timeout: 10s
+      retries: 5
+      start_period: 2s
+
+  # Integrated isolated Caching Engine (Valkey drop-in for Redis)
+  penpot-valkey:
+    image: valkey/valkey:8.1
+    restart: always
+    networks:
+      - penpot-net
+    environment:
+      - VALKEY_EXTRA_FLAGS=--maxmemory 128mb --maxmemory-policy volatile-lfu
+    healthcheck:
+      test: ["CMD-SHELL", "valkey-cli ping | grep PONG"]
+      interval: 1s
+      timeout: 3s
+      retries: 5
+      start_period: 3s

kubernetes-templates/droneci.yml

@@ -45,7 +45,7 @@ spec:
   storageClassName: nfs-storage
   resources:
     requests:
-      storage: 5Gi
+      storage: 10Gi
 ---
 apiVersion: v1
 kind: Secret