Automation Workflows.

docker-compose.yml — App + Postgres + Redis + Nginx + Certbot + Prometheus + Grafana

Full production compose stack with health checks, named volumes, isolated network, TLS via Let's Encrypt, and Prometheus + Grafana monitoring. Copy and customise for your project.

version: '3.9'

services:
  app:
    build: .
    restart: unless-stopped
    environment:
      DATABASE_URL: postgresql://app:secret@postgres:5432/appdb
      REDIS_URL: redis://redis:6379
    depends_on:
      postgres: { condition: service_healthy }
      redis:    { condition: service_started }
    networks: [backend]
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.app.rule=Host(`example.com`)"
      - "traefik.http.routers.app.tls.certresolver=letsencrypt"

  postgres:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: app
      POSTGRES_PASSWORD: secret
      POSTGRES_DB: appdb
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U app -d appdb"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks: [backend]

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
    volumes:
      - redis_data:/data
    networks: [backend]

  nginx:
    image: nginx:alpine
    restart: unless-stopped
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - certbot_certs:/etc/letsencrypt:ro
    ports: ["80:80", "443:443"]
    depends_on: [app]
    networks: [backend]

  certbot:
    image: certbot/certbot
    volumes:
      - certbot_certs:/etc/letsencrypt
    entrypoint: >
      /bin/sh -c "trap exit TERM;
      while :; do certbot renew --webroot -w /var/www/certbot;
      sleep 12h & wait $!; done"

  prometheus:
    image: prom/prometheus:latest
    restart: unless-stopped
    volumes:
      - ./prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - prometheus_data:/prometheus
    ports: ["9090:9090"]
    networks: [backend]

  grafana:
    image: grafana/grafana:latest
    restart: unless-stopped
    environment:
      GF_SECURITY_ADMIN_PASSWORD: admin
    volumes:
      - grafana_data:/var/lib/grafana
    ports: ["3001:3000"]
    depends_on: [prometheus]
    networks: [backend]

volumes:
  postgres_data:
  redis_data:
  certbot_certs:
  prometheus_data:
  grafana_data:

networks:
  backend:

Taskfile.yml — Complete TypeScript project task runner

Task (taskfile.dev) is a modern, cross-platform alternative to Make. YAML syntax, built-in dependency tracking, and works natively on Linux, macOS, and Windows.

version: '3'

vars:
  APP_NAME: my-app
  DOCKER_IMAGE: "{{.APP_NAME}}:latest"

tasks:
  default:
    desc: List all tasks
    cmds: [task --list]
    silent: true

  dev:
    desc: Start development server with hot reload
    cmds: [npm run dev]

  build:
    desc: Production build
    cmds: [npm run build]

  test:
    desc: Run all tests
    cmds: [npm run test -- --run]

  test:watch:
    desc: Run tests in watch mode
    cmds: [npm run test]

  lint:
    desc: Lint and auto-fix
    cmds: [npm run lint -- --fix]

  typecheck:
    desc: TypeScript type checking (no emit)
    cmds: [npm run typecheck]

  db:migrate:
    desc: Run pending database migrations
    cmds: [npx drizzle-kit migrate]

  db:seed:
    desc: Seed the database with test data
    cmds: [npx tsx src/lib/db/seed.ts]

  db:studio:
    desc: Open Drizzle Studio database GUI
    cmds: [npx drizzle-kit studio]

  docker:up:
    desc: Start all Docker Compose services
    cmds: [docker compose up -d]

  docker:down:
    desc: Stop all Docker Compose services
    cmds: [docker compose down]

  docker:logs:
    desc: Tail logs for all services
    cmds: [docker compose logs -f]

  deploy:
    desc: Deploy to production (Railway)
    deps: [typecheck, test]
    cmds:
      - echo "Deploying {{.APP_NAME}}..."
      - railway up --environment production
      - echo "Deploy complete"

Makefile — Phony targets for TypeScript + Docker + Deploy

Classic Makefile with .PHONY declarations for a TypeScript project. Includes dev, build, test, lint, typecheck, database operations, Docker management, and deployment.

.PHONY: all dev build test lint typecheck clean deploy

# Default target
all: typecheck lint test build

dev:
	npm run dev

build:
	npm run build

test:
	npm run test -- --run

test-watch:
	npm run test

lint:
	npm run lint

typecheck:
	npm run typecheck

clean:
	rm -rf dist .next node_modules/.cache

install:
	npm ci

# DB operations
db-migrate:
	npx drizzle-kit migrate

db-seed:
	npx tsx src/lib/db/seed.ts

# Docker
docker-up:
	docker compose up -d

docker-down:
	docker compose down

docker-rebuild:
	docker compose up -d --build

# Deploy (requires RAILWAY_TOKEN)
deploy: typecheck test
	railway up --environment production
	@echo "Deployed successfully"