From 43971283cdcd9cf0056a6ffe654225f87752fbc5 Mon Sep 17 00:00:00 2001
From: "David M. Klein" <4+leander19961@noreply.localhost>
Date: Wed, 26 Aug 2026 10:04:27 +0200
Subject: [PATCH] docker/docker-compose.yml aktualisiert

---
 docker/docker-compose.yml | 43 ++++++++++++++++++++++++++++-----------
 1 file changed, 31 insertions(+), 12 deletions(-)

diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index 122cb75..5cd1884 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -1,18 +1,37 @@
 services:
-  dnf-mirror:
-    build: .
-    container_name: dnf-mirror
+  syncer:
+    build:
+      context: .
+      dockerfile: docker/syncer/Dockerfile
+    image: rpm-mirror-syncer:latest
+    container_name: rpm-mirror-syncer
     restart: unless-stopped
+    env_file:
+      - .env
     volumes:
-      - repo-data:/data/repo
-    secrets:
-      - gpg_private_key
-    ports:
-      - "8081:80"
+      # sync-cache also holds the mirror's private GPG signing key and its
+      # revocation certificate (WORK_DIR/gnupg) - intentionally NOT mounted
+      # into the nginx container, only repo-data (public files) is.
+      - repo-data:/srv/repo
+      - sync-cache:/var/cache/rpm-mirror-sync
+      # Local sources.yaml, only used when SOURCES_GIT_REPO is empty (see
+      # .env). Remove/comment this out if you fetch the list from git.
+      #- ${LOCAL_SOURCES_YAML:-./sources.example.yaml}:/config/sources.yaml:ro
 
-secrets:
-  gpg_private_key:
-    file: ./secrets/company-signing-key.private.asc
+  nginx:
+    image: nginx:alpine
+    container_name: rpm-mirror-nginx
+    restart: unless-stopped
+    depends_on:
+      - syncer
+    env_file:
+      - .env
+    ports:
+      - "${NGINX_PORT:-8080}:80"
+    volumes:
+      - repo-data:/usr/share/nginx/html/repo:ro
+      - ./docker/nginx/nginx.conf:/etc/nginx/conf.d/default.conf:ro
 
 volumes:
-  repo-data:
\ No newline at end of file
+  repo-data:
+  sync-cache: