-
Notifications
You must be signed in to change notification settings - Fork 10
/
docker-compose.test.yml
162 lines (146 loc) · 4.97 KB
/
docker-compose.test.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
version: '3.8'
x-app-common: &odc_app
build: .
environment:
APP_ENV: "dev"
APACHE_DOCUMENT_ROOT: "public/"
PHP_EXTENSION_XDEBUG: "1"
PHP_INI_MEMORY_LIMIT: "1G"
PHP_EXTENSION_LDAP: 1
PHP_EXTENSION_INTL: 1
MAILER_DSN: ${MAILER_DSN}
services:
traefik-odc:
image: "traefik:v2.5"
restart: unless-stopped
command:
#- "--log.level=DEBUG"
- "--api.insecure=true"
- "--providers.docker=true"
- "--api.dashboard=true"
- "--providers.docker.exposedbydefault=false"
- "--entrypoints.web.address=:80"
labels:
- "traefik.enable=true"
- "traefik.http.routers.traefik-odc.rule=Host(`traefik.${PUBLIC_URL}`)"
- "traefik.http.routers.traefik-odc.entrypoints=web"
- "traefik.http.routers.traefik-odc.service=api@internal"
- "traefik.http.routers.traefik-odc.middlewares=traefik-auth"
- "traefik.http.middlewares.traefik-auth.basicauth.users=test:$$apr1$$H6uskkkW$$IgXLP6ewTrSuBkTrqE8wj/" # test:test
ports:
- "80:80"
- "443:443"
volumes:
- "/var/run/docker.sock:/var/run/docker.sock:ro"
- ./data/letsencrypt:/letsencrypt
- ./tools/traefik/config.yml:/etc/traefik/dynamic_conf/conf.yml:ro
networks:
default:
aliases:
- keycloak.${PUBLIC_URL}
- ${PUBLIC_URL}
#Here is the ODC app
app-odc:
<<: *odc_app
depends_on:
db-odc:
condition: service_healthy
healthcheck:
test: [ "CMD", "curl", "-s", "-f", "-i", "http://localhost:80/health/check" ]
interval: 20s
timeout: 10s
start_period: 30s
retries: 10
restart: unless-stopped
environment:
APP_ENV: "dev"
APACHE_DOCUMENT_ROOT: "public/"
PHP_EXTENSION_XDEBUG: "1"
PHP_INI_MEMORY_LIMIT: "1G"
PHP_EXTENSION_LDAP: 1
PHP_EXTENSION_INTL: 1
DATABASE_URL: mysql://odc:${ODC_DB_PW}@${RANDOMTAG}db-odc:3306/odc
MAILER_TRANSPORT: smtp
OAUTH_KEYCLOAK_CLIENT_ID: opendatenschutzcenter
OAUTH_KEYCLOAK_CLIENT_SECRET: ${OAUTH_KEYCLOAK_CLIENT_SECRET}
OAUTH_KEYCLOAK_SERVER: ${HTTP_METHOD}://${PUBLIC_URL}/keycloak
OAUTH_KEYCLOAK_REALM: opendatenschutzcenter
MAILER_DSN: ${MAILER_DSN}
MAILER_HOST: ${MAILER_HOST}
MAILER_PORT: ${MAILER_PORT}
MAILER_PASSWORD: ${MAILER_PASSWORD}
MAILER_USERNAME: ${MAILER_USERNAME}
MAILER_ENCRYPTION: ${MAILER_ENC}
laF_version: ${GIT_VERSION}
registerEmailAdress: ${registerEmailAdress}
DEFAULT_EMAIL: ${registerEmailAdress}
laF_baseUrl: ${HTTP_METHOD}://${PUBLIC_URL}
VICH_BASE: ${HTTP_METHOD}://${PUBLIC_URL}
CRON_USER_1: root
CRON_SCHEDULE_1: "* * * * *"
CRON_COMMAND_1: "php /var/www/html/bin/console cron:run"
labels:
- "traefik.enable=true"
- "traefik.http.routers.app-odc.rule=Host(`${PUBLIC_URL}`)"
- "traefik.http.routers.app-odc.entrypoints=web"
- "traefik.http.services.app-odc.loadbalancer.server.port=80"
- "traefik.http.services.app-odc.loadbalancer.sticky=true"
- "traefik.http.services.app-odc.loadbalancer.sticky.cookie.name=odc"
volumes:
- datenschutzcenter_uploads:/var/www/html/public/uploads:rw
- datenschutzcenter_secret_storage:/var/www/html/secretStorage:rw
- datenschutzcenter_data:/var/www/html/public/data:rw
- $PWD/dockerupdate.sh:/etc/container/startup.sh
networks:
- default
db-odc:
image: mariadb:latest
hostname: ${RANDOMTAG}db-odc
restart: unless-stopped
healthcheck:
test: [ "CMD", "mariadb-admin" ,"ping", "-h", "localhost","-ptest" ]
timeout: 20s
retries: 10
environment:
MARIADB_ROOT_PASSWORD: test
volumes:
- mariadb:/var/lib/mysql
- ./docker-entrypoint-initdb.d:/docker-entrypoint-initdb.d
networks:
- default
keycloak-odc:
image: quay.io/keycloak/keycloak:22.0.3
restart: unless-stopped
depends_on:
app-odc:
condition: service_healthy
environment:
KEYCLOAK_ADMIN: admin
KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PW}
KC_DB: mariadb
KC_DB_PASSWORD: ${KEYCLOAK_PW}
KC_DB_URL: jdbc:mariadb://${RANDOMTAG}db-odc:3306/keycloak
KC_DB_USERNAME: keycloak
KC_HOSTNAME_URL: ${HTTP_METHOD}://${PUBLIC_URL}/keycloak
KC_HOSTNAME_PATH: ${HTTP_METHOD}://${PUBLIC_URL}/keycloak
KC_HOSTNAME_ADMIN_URL: ${HTTP_METHOD}://${PUBLIC_URL}/keycloak
KC_HTTP_RELATIVE_PATH: /keycloak
KC_PROXY: passthrough
command:
- start-dev
- --import-realm
labels:
- "traefik.enable=true"
- "traefik.http.routers.keycloak-odc.rule=Host(`${PUBLIC_URL}`) && PathPrefix(`/keycloak`)"
- "traefik.http.routers.keycloak-odc.entrypoints=web"
- "traefik.http.services.keycloak-odc.loadbalancer.server.port=8080"
volumes:
- ./keycloak/:/opt/keycloak/data/import
networks:
- default
volumes:
mariadb:
image_upload:
datenschutzcenter_uploads:
datenschutzcenter_data:
datenschutzcenter_secret_storage: