From c8c3f26bbe4b76ca8b5d1c142cf5b0850ab47edd Mon Sep 17 00:00:00 2001
From: Tyler Gillispie <mrteye@gmail.com>
Date: Sun, 23 Aug 2026 10:26:22 -0700
Subject: [PATCH] feat(infra): track reference compose.yml and
 compose.spire.yml

---
 infra/compose.spire.yml | 39 +++++++++++++++++++++++++++++
 infra/compose.yml       | 55 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 94 insertions(+)
 create mode 100644 infra/compose.spire.yml
 create mode 100644 infra/compose.yml

diff --git a/infra/compose.spire.yml b/infra/compose.spire.yml
new file mode 100644
index 0000000..c3d221b
--- /dev/null
+++ b/infra/compose.spire.yml
@@ -0,0 +1,39 @@
+version: "3.8"
+
+services:
+  spire-server:
+    image: ${REG}/library/spire-server:latest
+    container_name: spire-server
+    hostname: spire-server
+    networks:
+      - auth-internal-net
+    volumes:
+      - spire-data:/opt/spire
+
+  spire-agent:
+    image: ${REG}/library/spire-agent:latest
+    container_name: spire-agent
+    hostname: spire-agent
+    pid: host
+    depends_on:
+      - spire-server
+    networks:
+      - auth-internal-net
+    volumes:
+      - spire-data:/opt/spire
+      - spire-socket:/var/run/spire
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+
+volumes:
+  spire-data:
+    driver: local
+    driver_opts:
+      type: none
+      device: ${SPIRE_DATA_PATH}
+      o: bind
+  spire-socket:
+    name: spire-socket
+
+networks:
+  auth-internal-net:
+    external: true
diff --git a/infra/compose.yml b/infra/compose.yml
new file mode 100644
index 0000000..222f48b
--- /dev/null
+++ b/infra/compose.yml
@@ -0,0 +1,55 @@
+version: "3.8"
+
+services:
+  auth-api:
+    image: ${REG}/library/auth-yes-api:latest
+    env_file: .env
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=traefik-net"
+      - "traefik.http.routers.auth-api.rule=Host(`${SYSTEM_DOMAIN}`)"
+      - "traefik.http.routers.auth-api.entrypoints=websecure"
+      - "traefik.http.routers.auth-api.tls=true"
+      - "traefik.http.services.auth-api.loadbalancer.server.port=8000"
+    expose:
+      - "8000"
+    depends_on:
+      - auth-db
+      - auth-valkey
+    networks:
+      - default
+      - traefik-net
+    volumes:
+      - spire-socket:/var/run/spire:ro
+
+  auth-db:
+    image: acr.atyg.org/library/postgres:18-alpine
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=${POSTGRES_DB}
+    volumes:
+      - auth-db-data:/var/lib/postgresql/data
+    networks:
+      - default
+
+  auth-valkey:
+    image: acr.atyg.org/valkey/valkey:8-alpine
+    networks:
+      - default
+
+volumes:
+  auth-db-data:
+    driver: local
+    driver_opts:
+      type: none
+      device: ${DB_DATA_PATH}
+      o: bind
+  spire-socket:
+    name: spire-socket
+
+networks:
+  default:
+    name: auth-internal-net
+  traefik-net:
+    external: true