🛢️ Database Hub advisors.ink

Administration UIs

Every UI is served over HTTPS (Let’s Encrypt, via Traefik) and has its own login. Credentials live in deployments/databases/.env.

How the stack is wired

• Each database runs on its own dedicated external network: postgres-net, redis-net, mongodb-net, rabbitmq-net.
• The GUIs join their database’s network and the shared proxy network used by Traefik, so they are published at https://<name>.advisors.ink.
• No database port is exposed on the host. Databases are only reachable from containers attached to their network.
• Data persists in named volumes (postgres_data, redis_data, mongodb_data, rabbitmq_data).

Connecting from your own containers

Attach your app’s service to the external network of the database you need, then use these internal endpoints:

Compose snippet for an app

services:
  myapp:
    image: myapp:latest
    networks:
      - postgres-net      # only what you need

networks:
  postgres-net:
    name: postgres-net
    external: true       # created by deployments/databases/scripts/networks.sh

Quick connection strings

# PostgreSQL
postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}

# Redis
redis://:${REDIS_PASSWORD}@redis:6379/0

# MongoDB
mongodb://${MONGO_ROOT_USERNAME}:${MONGO_ROOT_PASSWORD}@mongodb:27017/?authSource=admin

# RabbitMQ
amqp://${RABBITMQ_USER}:${RABBITMQ_PASSWORD}@rabbitmq:5672/

Backups

Run from deployments/databases. Credentials come from .env (source it first):

set -a; source .env; set +a

# PostgreSQL
docker compose exec -T postgres pg_dump -U "$POSTGRES_USER" "$POSTGRES_DB" \
  > backup-$(date +%F).sql

# Redis (creates a fresh RDB in the redis_data volume)
docker compose exec redis redis-cli -a "$REDIS_PASSWORD" --no-auth-warning BGSAVE

# MongoDB
docker compose exec -T mongodb mongodump --username "$MONGO_ROOT_USERNAME" \
  --password "$MONGO_ROOT_PASSWORD" --authenticationDatabase admin --archive \
  > backup-$(date +%F).archive

# RabbitMQ (definitions = vhosts/exchanges/queues/users)
docker compose exec rabbitmq rabbitmqadmin export /tmp/defs.json \
  -u "$RABBITMQ_USER" -p "$RABBITMQ_PASSWORD" -H rabbitmq
docker cp rabbitmq:/tmp/defs.json ./defs-$(date +%F).json

Credentials & security

• All passwords are generated and stored only in deployments/databases/.env (not committed).
• Rotate them by editing .env and running docker compose up -d.
• GUIs are protected by HTTPS + their own login. To restrict further, set a Traefik basicauth middleware on a router.
• Point db, pgadmin, redisinsight, mongo-express, rabbitmq subdomains at this host (or use a wildcard *.advisors.ink record); certificates are issued automatically on first request.

Raw documentation

A Markdown copy of this guide is served alongside the page: databases.md.