docker-compose.e2e.yml

services:
  proxy:
    image: traefik:v2.5
    container_name: traefik
    ports:
      - 80:80
      - 443:443
      - 8080:8080
    command:
      - '--log.level=DEBUG'
      - '--api.insecure=true'
      - '--providers.docker=true'
      - '--providers.docker.exposedbydefault=false'
      - '--providers.file.directory=/etc/traefik/dynamic'
      - '--entrypoints.websecure.address=:443'
      - '--entrypoints.web.address=:80'
      - '--providers.docker.network=pdce2e_back'
      # - '--entrypoints.web.http.redirections.entryPoint.to=websecure'
      # - '--entrypoints.web.http.redirections.entryPoint.scheme=https'
      # - '--entrypoints.web.http.redirections.entryPoint.permanent=true'
    volumes:
      - ./docker/traefik/config.yml:/etc/traefik/dynamic/config.yml
      - ./docker/traefik/certs:/etc/certs
      - '/var/run/docker.sock:/var/run/docker.sock:ro'
    networks:
      back:
      front:
        aliases:
          - auth.covoiturage.test
          - api.covoiturage.test
          - app.covoiturage.test
          - mailer.covoiturage.test
          - s3.covoiturage.test
          - download.covoiturage.test
          - local-pdc-export.s3.covoiturage.test
  kc:
    image: keycloak/keycloak:24.0
    environment:
      KEYCLOAK_ADMIN: admin
      KEYCLOAK_ADMIN_PASSWORD: admin
      KC_DB: postgres
      KC_DB_USERNAME: postgres
      KC_DB_PASSWORD: postgres
      KC_DB_URL: "jdbc:postgresql://postgres:5432/test"
      KC_REALM_NAME: covoiturage
      PDC_URL: http://app.covoiturage.test
      PDC_ADMIN_USERNAME: admin
      PDC_ADMIN_PASSWORD: admin
      PDC_KC_ADMIN_CLIENT_SECRET: so_secret_000
      PDC_KC_BOT_CLIENT_SECRET: so_secret_000
      PDC_KC_CLIENT_SECRET: so_secret_000
    networks:
      - back
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.kc-http.rule=Host(`auth.covoiturage.test`)'
      - 'traefik.http.routers.kc-http.entrypoints=web'
      - 'traefik.http.routers.kc-https.rule=Host(`auth.covoiturage.test`)'
      - 'traefik.http.routers.kc-https.entrypoints=websecure'
      - 'traefik.http.routers.kc-https.tls=true'
      - 'traefik.http.services.kc.loadbalancer.server.port=8080'
    command: ["start-dev", "--import-realm"]
    volumes:
      - ./docker/keycloak/realm.json:/opt/keycloak/data/import/realm.json:ro
  mailer:
    image: mailhog/mailhog:v1.0.1
    environment:
      MH_CORS_ORIGIN: '*'
    ports:
      - 1025:1025
    networks:
      - back
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.mailer.rule=Host(`mailer.covoiturage.test`)'
      - 'traefik.http.routers.mailer.entrypoints=websecure'
      - 'traefik.http.routers.mailer.tls=true'
      - 'traefik.http.services.mailer.loadbalancer.server.port=8025'

  postgres:
    build: ./docker/postgres
    ports:
      - 5432:5432
    networks:
      - back
    environment:
      POSTGRES_USER: 'postgres'
      POSTGRES_PASSWORD: 'postgres'
      POSTGRES_DB: 'test'

  redis:
    build: './docker/redis'
    ports:
      - 6379:6379
    networks:
      - back

  wait:
    image: busybox:1.33
    environment:
      DOMAIN: api
      PORT: 8080
    networks:
      - back
    command: ['/bin/sh', '-c', 'until nc -zv $$DOMAIN $$PORT -w1; do echo "waiting for app"; sleep 1; done']

  dashboard:
    volumes:
      - ./docker/dashboard/ci.env.js:/usr/share/nginx/html/assets/env.js:ro
    build:
      dockerfile: ./docker/dashboard/prod/Dockerfile
      context: .
    networks:
      - back
    depends_on:
      - api
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.dashboard.rule=Host(`app.covoiturage.test`)'
      - 'traefik.http.routers.dashboard.entrypoints=websecure'
      - 'traefik.http.routers.dashboard.tls=true'
      - 'traefik.http.services.dashboard.loadbalancer.server.port=8080'

  api:
    build:
      dockerfile: ./docker/api/Dockerfile
      context: .
    environment:
      LOG_LEVEL: 'debug'
      APP_APP_URL: https://app.covoiturage.test
      APP_JWT_SECRET: thisIsASecret0000
      APP_SESSION_SECRET: thisIsAlsoASecret0000
      AWS_S3_PATH_STYLE: 'true'
      AWS_BUCKET_PREFIX: local-pdc
      AWS_ENDPOINT: http://minioadmin:minioadmin@s3:9000
      AWS_REGION: fr-par
      AWS_ACCESS_KEY_ID: minioadmin 
      AWS_SECRET_ACCESS_KEY: minioadmin
      APP_POSTGRES_URL: postgres://postgres:postgres@postgres:5432/test
      APP_REDIS_URL: redis://redis:6379/1
      APP_MAIL_SMTP_URL: smtp://mailer:1025
      APP_RATE_LIMIT_MAX_FACTOR: '0'
      APP_DATAGOUV_URL: http://data-gouv-url
      APP_DATAGOUV_KEY: thisIsASecret
      APP_CEE_PUBLIC_KEY_PATH: /app/certs/publicKey.pem
      APP_CEE_PRIVATE_KEY_PATH: /app/certs/privateKey.pem
      PORT: 8080
      NODE_ENV: local
      APP_ENV: local
      APP_INSEE_API_KEY: ${APP_INSEE_API_KEY}
      APP_USER_REGISTRATION_ENABLED: 'true'
    networks:
      - back
      - front
    depends_on:
      - redis
      - postgres
      - mailer
      - s3
      - worker
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.api.rule=Host(`api.covoiturage.test`)'
      - 'traefik.http.routers.api.entrypoints=websecure'
      - 'traefik.http.routers.api.tls=true'
      - 'traefik.http.services.api.loadbalancer.server.port=8080'
    volumes:
      - ./docker/api/certs:/app/certs:ro

  cms:
    build:
      dockerfile: ../docker/cms/prod/Dockerfile
      context: ./cms
    environment:
      DATABASE_HOST: postgres
      DATABASE_PORT: 5432
      DATABASE_NAME: test
      DATABASE_USERNAME: postgres
      DATABASE_PASSWORD: postgres
      APP_KEYS: REPLACE_ME
      API_TOKEN_SALT: REPLACE_ME
      JWT_SECRET: REPLACE_ME
      ADMIN_JWT_SECRET: REPLACE_ME
      TRANSFER_TOKEN_SALT: REPLACE_ME
      NODE_ENV: production
      EMAIL_SMTP_URL: smtp://mailer:1025
      EMAIL_ADDRESS_FROM: noreply@covoiturage.beta.gouv.fr
      EMAIL_ADDRESS_REPLY: technique@covoiturage.beta.gouv.fr
      S3_ACCESS_KEY_ID: minioadmin
      S3_ACCESS_SECRET: minioadmin
      S3_ENDPOINT: http://s3:9000
      S3_REGION: fr-par
      S3_BUCKET: cms
      S3_PUBLIC_URL: https://cms.s3.covoiturage.test
      TRUSTED_ROOT_DOMAIN: covoiturage.test
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.api.rule=Host(`cms.covoiturage.test`)'
      - 'traefik.http.routers.api.entrypoints=websecure'
      - 'traefik.http.routers.api.tls=true'
      - 'traefik.http.services.api.loadbalancer.server.port=1337'
    networks:
      - back
      - front
    depends_on:
      - redis
      - postgres
      - mailer
      - s3

  worker:
    build:
      dockerfile: ./docker/api/prod/Dockerfile
      context: .
    environment:
      DEBUG: '*'
      APP_WORKER: 'true'
      APP_APP_URL: https://app.covoiturage.test
      APP_JWT_SECRET: thisIsASecret0000
      APP_SESSION_SECRET: thisIsAlsoASecret0000
      AWS_S3_PATH_STYLE: 'true'
      AWS_BUCKET_PREFIX: local-pdc
      AWS_ENDPOINT: http://minioadmin:minioadmin@s3:9000
      AWS_REGION: fr-par
      AWS_ACCESS_KEY_ID: minioadmin 
      AWS_SECRET_ACCESS_KEY: minioadmin
      APP_POSTGRES_URL: postgres://postgres:postgres@postgres:5432/test
      APP_REDIS_URL: redis://redis:6379/1
      APP_MAIL_SMTP_URL: smtp://mailer:1025
      APP_MAIL_VERIFY_SMTP: 'true'
      APP_RATE_LIMIT_MAX_FACTOR: '0'
      APP_DATAGOUV_URL: http://data-gouv-url
      APP_DATAGOUV_KEY: thisIsASecret
      APP_INSEE_API_KEY: ${APP_INSEE_API_KEY}
      APP_USER_REGISTRATION_ENABLED: 'true'
      PORT: 8080
      NODE_ENV: local
      APP_ENV: local
    networks:
      - back
      - front
    depends_on:
      - redis
      - postgres
      - mailer
      - s3
    command: ['npm', 'run', 'start:queue']

  s3:
    image: minio/minio:edge
    networks:
      - back
    command: 'server /data'
    ports:
      - "9000:9000"
    environment:
      MINIO_DOMAIN: s3.covoiturage.test
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.s3.rule=Host(`s3.covoiturage.test`, `local-pdc-export.s3.covoiturage.test`, `download.covoiturage.test`, `cms.s3.covoiturage.test`)'
      - 'traefik.http.routers.s3.entrypoints=websecure'
      - 'traefik.http.routers.s3.tls=true'
      - 'traefik.http.services.s3.loadbalancer.server.port=9000'

  s3-init:
    image: minio/mc:edge
    networks:
      - back
    environment:
      MINIO_URL: http://s3:9000
      MINIO_ACCESS_KEY: minioadmin
      MINIO_SECRET_KEY: minioadmin
      MINIO_REGION_NAME: fr-par
    entrypoint:
      ['sh', '-c', 'mc alias set minio $$MINIO_URL $$MINIO_ACCESS_KEY $$MINIO_SECRET_KEY && mc mb minio/$$BUCKET']
    depends_on:
      - s3

networks:
  front:
  back: