rdf-store/docker-compose.yml at main · ULB-Darmstadt/rdf-store · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
services:
  fuseki:
    image: stain/jena-fuseki:5.1.0
    restart: unless-stopped
    # ports:
    #   - 127.0.0.1:3030:3030
    volumes:
      - fusekidata:/fuseki
    environment:
      - ADMIN_PASSWORD=${FUSEKI_PASSWORD}
    healthcheck:
      test: ["CMD-SHELL", "[[ $(curl -s -u admin:$$ADMIN_PASSWORD -o /dev/null -w '%{http_code}' http://localhost:3030/$/stats) == 200 ]] || exit 1"]
      start_period: 15s
      interval: 10s
      timeout: 5s
      retries: 3

  solr:
    build:
      context: ./solr
    restart: unless-stopped
    command:
      - bash
      - "-c"
      - "solr start -f -q"
    # ports:
    #   - 127.0.0.1:8983:8983
    volumes:
      - solrdata:/var/solr
    healthcheck:
      test: ["CMD-SHELL", "curl -s -A 'healthcheck' http://localhost:8983/api/cluster | grep -q '\"status\":0' || exit 1"]
      start_period: 15s
      interval: 10s
      timeout: 5s
      retries: 3

  redis:
    image: redis:7-alpine
    command: ["redis-server", "--save", "60", "1", "--loglevel", "warning"]
    restart: unless-stopped
    profiles:
      - ${DISABLE_OAUTH:-}
    volumes:
      - redisdata:/data
    healthcheck:
      test: [ "CMD", "redis-cli", "ping" ]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 5s

  oauth2-proxy:
    image: quay.io/oauth2-proxy/oauth2-proxy:v7.13.0-alpine
    restart: unless-stopped
    profiles:
      - ${DISABLE_OAUTH:-}
    environment:
      OAUTH2_PROXY_HTTP_ADDRESS: 0.0.0.0:4180
      OAUTH2_PROXY_SKIP_PROVIDER_BUTTON: true
      OAUTH2_PROXY_REDIRECT_URL: ${APP_URL}${APP_PATH:-/}oauth2/callback
      OAUTH2_PROXY_REVERSE_PROXY: true
      OAUTH2_PROXY_PROVIDER: oidc
      OAUTH2_PROXY_OIDC_ISSUER_URL: ${OAUTH2_PROXY_OIDC_ISSUER_URL}
      OAUTH2_PROXY_CLIENT_ID: ${OAUTH2_PROXY_CLIENT_ID:-rdf-store}
      OAUTH2_PROXY_CLIENT_SECRET: ${OAUTH2_PROXY_CLIENT_SECRET:-''}
      OAUTH2_PROXY_CODE_CHALLENGE_METHOD: S256
      OAUTH2_PROXY_SESSION_STORE_TYPE: redis
      OAUTH2_PROXY_REDIS_CONNECTION_URL: redis://redis:6379/0
      OAUTH2_PROXY_EMAIL_DOMAINS: "*"
      OAUTH2_PROXY_COOKIE_SECRET: ${OAUTH2_PROXY_COOKIE_SECRET}
      OAUTH2_PROXY_SET_XAUTHREQUEST: true
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:4180/ping >/dev/null || exit 1"]
      start_period: 10s
      interval: 10s
      timeout: 5s
      retries: 5
    depends_on:
      redis:
        condition: service_healthy

  gateway:
    image: nginx:1-alpine
    restart: unless-stopped
    profiles:
      - ${DISABLE_OAUTH:-}
    ports:
      - 127.0.0.1:8089:80
    volumes:
      - ./nginx.conf:/etc/nginx/conf.d/default.conf
    depends_on:
      app:
        condition: service_healthy
      oauth2-proxy:
        condition: service_healthy

  validator:
    build:
      context: ./validator
    restart: unless-stopped
    # ports:
    #   - 127.0.0.1:8000:8000
    environment:
      - PROXY=http://app:3000/api/v1/rdfproxy?url=
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8000/healthz >/dev/null || exit 1"]
      start_period: 10s
      interval: 10s
      timeout: 5s
      retries: 5

  app:
    build:
      context: .
    restart: unless-stopped
    # ports:
    #   - 127.0.0.1:3000:3000
    volumes:
      - ./backend/local:/app/local
    environment:
      - GIN_MODE=release
      - BACKEND_URL=${APP_URL}${APP_PATH:-}
      - SOLR_ENDPOINT=http://solr:8983
      - SOLR_INDEX=${SOLR_INDEX:-rdf}
      - FUSEKI_ENDPOINT=http://fuseki:3030
      - FUSEKI_PASSWORD=${FUSEKI_PASSWORD}
      - VALIDATOR_ENDPOINT=http://validator:8000
      - LOCAL_PROFILES_ENABLED=${LOCAL_PROFILES_ENABLED:-false}
      - MPS_ENABLED=${MPS_ENABLED:-true}
      - MPS_QUERY=${MPS_QUERY:-}
      - LAYOUT=${LAYOUT:-default}
      - RDF_NAMESPACE=${RDF_NAMESPACE:-http://example.org/}
      - RDF_STANDARD_TAXONOMIES=${RDF_STANDARD_TAXONOMIES:-}
      - DISABLE_OAUTH=${DISABLE_OAUTH:-}
      - WRITE_ACCESS_GROUP=${WRITE_ACCESS_GROUP:-}
      - CONTACT_EMAIL=${CONTACT_EMAIL:-}
      - CRON=${CRON:-}
      - EXPOSE_FUSEKI_FRONTEND=${EXPOSE_FUSEKI_FRONTEND:-false}
      - LOG_LEVEL=${LOG_LEVEL}
    healthcheck:
        test: ["CMD-SHELL", "wget -qO- http://localhost:3000/api/v1/healthz >/dev/null || exit 1"]
        start_period: 10s
        interval: 10s
        timeout: 5s
        retries: 5
    depends_on:
      validator:
        condition: service_healthy
      solr:
        condition: service_healthy
      fuseki:
        condition: service_healthy

volumes:
  solrdata:
  fusekidata:
  redisdata: