docker-compose.yml

version: '3.1'

networks:
  idp-priv:
  pub:

services:
  beaconprod:
    restart: unless-stopped
    build:
      context: .
    container_name: ${BEACON_CONTAINER}
    ports:
      - "${BEACON_API_PORT}:5050"
    environment:
      database_host: "mongo"
      database_port: "27017"
      database_user: "${MONGO_ROOT_USERNAME}"
      database_password: "${MONGO_ROOT_PASSWORD}"
      database_name: "${MONGO_DATABASE}"
      database_auth_source: "${MONGO_AUTH_SOURCE}"
      database_certificate: ""
      database_cafile: ""
    volumes:
      - ${APP_LOG_DIR}/beacon.log:/beacon/logs/beacon.log
      - ${APP_ROOT}/beacon/conf/conf.py:/beacon/conf/conf.py
      - ${APP_ROOT}/beacon/connections/mongo/conf.py:/beacon/connections/mongo/conf.py
      - ${APP_ROOT}/beacon/permissions:/beacon/permissions
      - ${APP_ROOT}/beacon/conf/datasets:/beacon/conf/datasets
      - ${APP_ROOT}/beacon/auth/idp_providers:/beacon/auth/idp_providers
      - ${APP_ROOT}/beacon/models:/beacon/models
      - ${APP_ROOT}/beacon/conf/models:/beacon/conf/models
      - ${BIND_ROOT}/etc/certs/beacon_server.crt:/etc/beacon/certs/beacon_server.crt:ro
      - ${BIND_ROOT}/etc/certs/beacon_server.key:/etc/beacon/certs/beacon_server.key:ro
    networks:
      - pub

  admin-ui:
    restart: always
    build:
      context: ./adminui
    image: localhost/admin-ui:prod
    container_name: ${ADMIN_UI_CONTAINER}
    ports:
      - "${ADMIN_UI_PORT}:3001"
    entrypoint: ['bash','/home/app/web/start.sh']
    volumes:
      - ${APP_ROOT}/beacon:/home/app/web/beacon
      - ${APP_ROOT}/adminui:/home/app/web
      - ${BIND_ROOT}/runtime/admin-ui:/data
    environment:
      SECRET_KEY: "${SECRET_KEY}"
      SQL_DATABASE: "${SQL_DATABASE}"
    networks:
      - pub

  idp:
    image: ${KEYCLOAK_IMAGE}
    hostname: idp
    container_name: ${KEYCLOAK_CONTAINER}
    command:
      - start-dev
      - --import-realm
    environment:
      KEYCLOAK_ADMIN: "${KEYCLOAK_ADMIN}"
      KEYCLOAK_ADMIN_PASSWORD: "${KEYCLOAK_ADMIN_PASSWORD}"
      KC_DB: postgres
      KC_DB_URL: "jdbc:postgresql://idp-db:5432/${POSTGRES_DB}"
      KC_DB_USERNAME: "${POSTGRES_USER}"
      KC_DB_PASSWORD: "${POSTGRES_PASSWORD}"
      KC_HTTP_PORT: "8082"
      KC_HTTP_RELATIVE_PATH: "${KEYCLOAK_RELATIVE_PATH}"
      KC_PROXY: edge
      KC_HOSTNAME_URL: "${PUBLIC_SCHEME}://${PUBLIC_HOST}:${PUBLIC_PORT}${KEYCLOAK_RELATIVE_PATH}"
      KC_HOSTNAME_ADMIN_URL: "${PUBLIC_SCHEME}://${PUBLIC_HOST}:${PUBLIC_PORT}${KEYCLOAK_RELATIVE_PATH}"
    volumes:
      - ${APP_ROOT}/beacon/auth/realms/beacon-realm.json:/opt/keycloak/data/import/beacon-realm.json:ro
    ports:
      - "${KEYCLOAK_PORT}:8082"
      - "${KEYCLOAK_HTTPS_PORT}:8443"
    networks:
      - idp-priv
      - pub
    depends_on:
      - idp-db

  idp-db:
    image: ${POSTGRES_IMAGE}
    hostname: idp-db
    container_name: ${POSTGRES_CONTAINER}
    command: postgres -c logging_collector=on -c log_directory=/var/log/postgresql -c log_filename=postgresql.log
    environment:
      POSTGRES_DB: "${POSTGRES_DB}"
      POSTGRES_USER: "${POSTGRES_USER}"
      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"
    volumes:
      - ${BIND_ROOT}/runtime/postgres/data:/var/lib/postgresql/data
      - ${APP_LOG_DIR}/postgres:/var/log/postgresql
    networks:
      - idp-priv

  db:
    #image: docker.io/library/mongo:5.0.32
    #image: docker.io/library/mongo:6.0.27
    #image: docker.io/library/mongo:7.0.31
    #image: docker.io/library/mongo:8.0.10
    image: ${MONGO_IMAGE}
    user: "${MONGO_UID:-999}:${MONGO_GID:-999}"
    hostname: mongo
    container_name: ${MONGO_CONTAINER}
    ports:
      - "${MONGO_PORT}:27017"
    environment:
      MONGO_INITDB_ROOT_USERNAME: "${MONGO_ROOT_USERNAME}"
      MONGO_INITDB_ROOT_PASSWORD: "${MONGO_ROOT_PASSWORD}"
      MONGO_INITDB_DATABASE: "${MONGO_DATABASE}"
    volumes:
      - ${APP_ROOT}/beacon/connections/mongo/mongo-init/:/docker-entrypoint-initdb.d/:ro
      - ${APP_ROOT}/beacon/connections/mongo/data:/data:ro
      - ${BIND_ROOT}/runtime/mongo/db:/data/db
      - ${BIND_ROOT}/runtime/mongo/configdb:/data/configdb
      - ${BIND_ROOT}/runtime/mongo/caseLevelData:/data/caseLevelData
      - ${APP_ROOT}/beacon/connections/mongo/mongod.conf:/etc/mongod.conf:ro
      - ${APP_LOG_DIR}/mongod.log:/var/log/mongodb/mongod.log
      #- ./test-server1.pem:/test-server1.pem
      #- ./test-ca.pem:/test-ca.pem
      #- ./test-client.pem:/test-client.pem
    networks:
      - pub
    healthcheck:
      test: echo 'db.runCommand("ping").ok' | mongosh localhost:27017/test --quiet
      interval: 300s
      timeout: 10s
      retries: 3
      start_period: 30s

    command: ["--config", "/etc/mongod.conf"]

  mongo-express:
    image: ${MONGO_EXPRESS_IMAGE}
    container_name: ${MONGO_EXPRESS_CONTAINER}
    restart: always
    ports:
      - "${MONGO_EXPRESS_PORT}:8081"
    environment:
      ME_CONFIG_BASICAUTH_USERNAME: "${MONGO_EXPRESS_USERNAME}"
      ME_CONFIG_BASICAUTH_PASSWORD: "${MONGO_EXPRESS_PASSWORD}"
      ME_CONFIG_MONGODB_ADMINUSERNAME: "${MONGO_ROOT_USERNAME}"
      ME_CONFIG_MONGODB_ADMINPASSWORD: "${MONGO_ROOT_PASSWORD}"
      ME_CONFIG_MONGODB_URL: "mongodb://${MONGO_ROOT_USERNAME}:${MONGO_ROOT_PASSWORD}@mongo:27017/?authSource=${MONGO_AUTH_SOURCE}"
      ME_CONFIG_MONGODB_ENABLE_ADMIN: "true"
      ME_CONFIG_SITE_BASEURL: "/mongo-express/"
    depends_on:
      - db
    networks:
      - pub

  template-ui:
    image: ${TEMPLATE_UI_IMAGE}
    restart: always
    hostname: template-ui
    container_name: ${TEMPLATE_UI_CONTAINER}
    command: node /opt/yarn-v1.22.22/bin/yarn.js start
    ports:
      - "${TEMPLATE_UI_PORT}:3000"
    volumes:
      - ${APP_ROOT}/template-ui/src/config/config.json:/client/src/config/config.json:ro
      - ${APP_ROOT}/template-ui/.env:/client/.env:ro
    networks:
      - pub
    environment:
      - CHOKIDAR_USEPOLLING=true
      - WATCHPACK_POLLING=true

  apache-beacon:
    image: ${APACHE_IMAGE}
    container_name: ${APACHE_CONTAINER}
    restart: unless-stopped
    depends_on:
      - beaconprod
      - template-ui
      - idp
      - mongo-express
      - admin-ui
    ports:
      - "${PUBLIC_PORT}:8080"
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
      - ${APP_ROOT}/conf/beacon_apache_reverse_proxy.conf:/etc/httpd/conf.d/beacon.conf:ro
      - ${APACHE_LOG_DIR}:/var/log/httpd
    networks:
      - pub