feat(zammad): use x-shared section

An x-shared section was added to the stack.yml file, similar as in the original docker-compose yaml file to reuse environment settings etc. in several Zammad services.

Author: sthelemann

src/development/stack.yml

@@ -3,6 +3,9 @@
 # Vibetype
 # https://github.com/maevsi/vibetype/
 ---
+
+#version: "3.7"
+
 secrets:
   grafana_admin_email:
     # The observation dashboard's admin email.
@@ -100,6 +103,68 @@ secrets:
   vibetype_turnstile-key:
     # The captcha provider's application key.
     file: ./secrets/vibetype/turnstile-key.secret
+
+x-shared:
+  zammad-service: &zammad-service
+    environment: &zammad-environment
+      MEMCACHE_SERVERS: ${MEMCACHE_SERVERS:-zammad-memcached:11211}
+      POSTGRESQL_DB: zammad
+      POSTGRESQL_HOST: postgres
+      POSTGRESQL_USER: zammad
+      POSTGRESQL_PASS: zammad
+      POSTGRESQL_PORT: 5432
+      POSTGRESQL_OPTIONS: ${POSTGRESQL_OPTIONS:-?pool=50}
+      POSTGRESQL_DB_CREATE: "false"
+      REDIS_URL: ${REDIS_URL:-redis://zammad-redis:6379}
+      S3_URL:
+      # Backup settings
+      BACKUP_DIR: "${BACKUP_DIR:-/var/tmp/zammad}"
+      BACKUP_TIME: "${BACKUP_TIME:-03:00}"
+      HOLD_DAYS: "${HOLD_DAYS:-10}"
+      TZ: "${TZ:-Europe/Berlin}"
+      # Allow passing in these variables via .env:
+      AUTOWIZARD_JSON:
+      AUTOWIZARD_RELATIVE_PATH:
+      ELASTICSEARCH_ENABLED:
+      ELASTICSEARCH_SCHEMA:
+      ELASTICSEARCH_HOST:
+      ELASTICSEARCH_PORT:
+      ELASTICSEARCH_USER: ${ELASTICSEARCH_USER:-elastic}
+      ELASTICSEARCH_PASS: ${ELASTICSEARCH_PASS:-zammad}
+      ELASTICSEARCH_NAMESPACE:
+      ELASTICSEARCH_REINDEX:
+      NGINX_PORT: 8080
+      NGINX_CLIENT_MAX_BODY_SIZE:
+      NGINX_SERVER_NAME: zammad.${STACK_DOMAIN}
+      NGINX_SERVER_SCHEME: https
+      RAILS_TRUSTED_PROXIES:
+      ZAMMAD_HTTP_TYPE:
+      ZAMMAD_FQDN:
+      ZAMMAD_WEB_CONCURRENCY:
+      ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS:
+      ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS:
+      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS:
+      ZAMMAD_RAILSSERVER_HOST: zammad-railsserver
+      ZAMMAD_WEBSOCKET_HOST: zammad-websocket
+      # ZAMMAD_SESSION_JOBS_CONCURRENT is deprecated, please use ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS instead.
+      ZAMMAD_SESSION_JOBS_CONCURRENT:
+      # Variables used by ngingx-proxy container for reverse proxy creations
+      # for docs refer to https://github.com/nginx-proxy/nginx-proxy
+      VIRTUAL_HOST:
+      VIRTUAL_PORT:
+      # Variables used by acme-companion for retrieval of LetsEncrypt certificate
+      # for docs refer to https://github.com/nginx-proxy/acme-companion
+      LETSENCRYPT_HOST:
+      LETSENCRYPT_EMAIL:
+
+    image: ${IMAGE_REPO:-ghcr.io/zammad/zammad}:${VERSION:-6.5.0-89}
+    volumes:
+      - zammad-storage:/opt/zammad/storage
+    depends_on:
+      - zammad-memcached
+      - postgresql
+      - zammad-redis
+
 services:
   adminer:
     # You can access the database's frontend at [adminer.localhost](https://adminer.localhost/).
@@ -375,161 +440,6 @@ services:
     volumes:
       - ../../../reccoom/:/srv/app/
 
-  zammad-elasticsearch:
-    image: bitnami/elasticsearch:${ELASTICSEARCH_VERSION:-8.18.0}
-    restart: always
-    volumes:
-      - zammad_elasticsearch_data:/usr/share/elasticsearch/data
-    environment:
-      - discovery.type=single-node
-
-  zammad-init:
-    image: zammad/zammad-docker-compose:latest
-    restart: on-failure
-    depends_on:
-      - postgres
-      - zammad-elasticsearch
-    volumes:
-      - zammad_storage:/opt/zammad/storage
-    environment:
-      - POSTGRESQL_DB_CREATE=false
-      - POSTGRESQL_HOST=postgres
-      - POSTGRESQL_USER_FILE=/run/secrets/POSTGRESQL_USER
-      - POSTGRESQL_PASS_FILE=/run/secrets/POSTGRESQL_PASS
-      - POSTGRESQL_DB=zammad
-      - ELASTICSEARCH_HOST=zammad-elasticsearch
-      - ELASTICSEARCH_PORT=9200
-      - ZAMMAD_RAILSSERVER_HOST=zammad-railsserver
-      - ZAMMAD_WEBSOCKET_HOST=zammad-websocket
-      - NGINX_SERVER_NAME=zammad.${STACK_DOMAIN}
-      - REDIS_URL=redis://zammad-redis:6379
-    secrets:
-      - source: postgres_role_service_zammad_username
-        target: POSTGRESQL_USER
-      - source: postgres_role_service_zammad_password
-        target: POSTGRESQL_PASS
-    command: ["zammad-init"]
-
-  zammad-railsserver:
-    image: zammad/zammad-docker-compose:latest
-    restart: always
-    depends_on:
-      - zammad-init
-    environment:
-      - POSTGRESQL_HOST=postgres
-      - POSTGRESQL_USER_FILE=/run/secrets/POSTGRESQL_USER
-      - POSTGRESQL_PASS_FILE=/run/secrets/POSTGRESQL_PASS
-      - POSTGRESQL_DB=zammad
-      - ELASTICSEARCH_HOST=zammad-elasticsearch
-      - ELASTICSEARCH_PORT=9200
-      - ZAMMAD_RAILSSERVER_HOST=zammad-railsserver
-      - ZAMMAD_WEBSOCKET_HOST=zammad-websocket
-      - REDIS_URL=redis://zammad-redis:6379
-    secrets:
-      - source: postgres_role_service_zammad_username
-        target: POSTGRESQL_USER
-      - source: postgres_role_service_zammad_password
-        target: POSTGRESQL_PASS
-    volumes:
-      - zammad_storage:/opt/zammad/storage
-    deploy:
-      labels:
-        - traefik.enable=true
-        - traefik.http.routers.zammad-railsserver.entryPoints=web
-        - traefik.http.routers.zammad-railsserver.middlewares=redirectscheme
-        - traefik.http.routers.zammad-railsserver.rule=Host(`zammad.${STACK_DOMAIN}`) && PathPrefix(`/api`)
-        - traefik.http.routers.zammad-railsserver_secure.entryPoints=web-secure
-        - traefik.http.routers.zammad-railsserver_secure.rule=Host(`zammad.${STACK_DOMAIN}`) && PathPrefix(`/api`)
-        - traefik.http.routers.zammad-railsserver_secure.tls.options=mintls13@file
-        - traefik.http.services.zammad-railsserver.loadbalancer.server.port=3000
-    command: ["zammad-railsserver"]
-
-  zammad-scheduler:
-    image: zammad/zammad-docker-compose:latest
-    restart: always
-    depends_on:
-      - zammad-init
-    environment:
-      - POSTGRESQL_HOST=postgres
-      - POSTGRESQL_USER_FILE=/run/secrets/POSTGRESQL_USER
-      - POSTGRESQL_PASS_FILE=/run/secrets/POSTGRESQL_PASS
-      - POSTGRESQL_DB=zammad
-      - ELASTICSEARCH_HOST=zammad-elasticsearch
-      - ELASTICSEARCH_PORT=9200
-      - ZAMMAD_RAILSSERVER_HOST=zammad-railsserver
-      - ZAMMAD_WEBSOCKET_HOST=zammad-websocket
-      - REDIS_URL=redis://zammad-redis:6379
-
-    secrets:
-      - source: postgres_role_service_zammad_username
-        target: POSTGRESQL_USER
-      - source: postgres_role_service_zammad_password
-        target: POSTGRESQL_PASS
-    command: ["zammad-scheduler"]
-
-  zammad-redis:
-    image: redis:7-alpine
-    restart: always
-
-  zammad-websocket:
-    image: zammad/zammad-docker-compose:latest
-    restart: always
-    depends_on:
-      - zammad-init
-    environment:
-      - POSTGRESQL_HOST=postgres
-      - POSTGRESQL_USER_FILE=/run/secrets/POSTGRESQL_USER
-      - POSTGRESQL_PASS_FILE=/run/secrets/POSTGRESQL_PASS
-      - POSTGRESQL_DB=zammad
-      - ELASTICSEARCH_HOST=zammad-elasticsearch
-      - ELASTICSEARCH_PORT=9200
-      - ZAMMAD_RAILSSERVER_HOST=zammad-railsserver
-      - ZAMMAD_WEBSOCKET_HOST=zammad-websocket
-      - REDIS_URL=redis://zammad-redis:6379
-    secrets:
-      - source: postgres_role_service_zammad_username
-        target: POSTGRESQL_USER
-      - source: postgres_role_service_zammad_password
-        target: POSTGRESQL_PASS
-    command: ["zammad-websocket"]
-    deploy:
-      labels:
-        - traefik.enable=true
-        - traefik.http.routers.zammad-websocket.entryPoints=web
-        - traefik.http.routers.zammad-websocket.middlewares=redirectscheme
-        - traefik.http.routers.zammad-websocket.rule=Host(`zammad.${STACK_DOMAIN}`) && PathPrefix(`/ws`)
-        - traefik.http.routers.zammad-websocket_secure.entryPoints=web-secure
-        - traefik.http.routers.zammad-websocket_secure.rule=Host(`zammad.${STACK_DOMAIN}`) && PathPrefix(`/ws`)
-        - traefik.http.routers.zammad-websocket_secure.tls.options=mintls13@file
-        - traefik.http.services.zammad-websocket.loadbalancer.server.port=6042
-
-  zammad-nginx:
-    image: zammad/zammad-docker-compose:latest
-    restart: always
-    depends_on:
-      - zammad-init
-      - zammad-railsserver
-      - zammad-websocket
-    environment:
-      - NGINX_SERVER_NAME=zammad.${STACK_DOMAIN}
-      - REDIS_URL=redis://zammad-redis:6379
-    volumes:
-      - zammad_storage:/opt/zammad/storage
-
-    deploy:
-      labels:
-        - traefik.enable=true
-        - traefik.http.routers.zammad.rule=Host(`zammad.${STACK_DOMAIN}`)
-        - traefik.http.routers.zammad.entryPoints=web
-        - traefik.http.routers.zammad.middlewares=redirectscheme
-        - traefik.http.routers.zammad_secure.rule=Host(`zammad.${STACK_DOMAIN}`)
-        - traefik.http.routers.zammad_secure.entryPoints=web-secure
-        - traefik.http.routers.zammad_secure.tls=true
-        - traefik.http.routers.zammad_secure.tls.options=mintls13@file
-        - traefik.http.services.zammad.loadbalancer.server.port=80
-    command: ["zammad-nginx"]
-    command: ["sh", "-c", "sleep 60 && zammad-nginx"]
-
   redpanda:
     # You can access the event streaming platform's ui as described under `redpanda-console`.
     command:
@@ -709,8 +619,80 @@ services:
       - ${PNPM_STORE_DIR}:/srv/.pnpm-store/ #DARGSTACK-REMOVE
       - ./certificates/:/srv/certificates/ #DARGSTACK-REMOVE
       - ../../../vibetype/:/srv/app/ #DARGSTACK-REMOVE
-      - ./configurations/postgraphile/jwtRS256.key.pub:/run/environment-variables/NUXT_PUBLIC_VIO_AUTH_JWT_PUBLIC_KEY:ro
-version: "3.7"
+      - ./configurations/postgraphile/jwtRS256.key.pub:/run/environment-variables/NUXT_PUB1LIC_VIO_AUTH_JWT_PUBLIC_KEY:ro
+
+  zammad-backup:
+    # Zammad backup.
+    <<: *zammad-service
+    command: ["zammad-backup"]
+    volumes:
+      - zammad-backup:/var/tmp/zammad
+      - zammad-storage:/opt/zammad/storage:ro
+    user: 0:0
+
+  zammad-elasticsearch:
+    # Zammad Elastisearch.
+    image: bitnami/elasticsearch:${ELASTICSEARCH_VERSION:-8.18.0}
+    volumes:
+      - zammad-elasticsearch-data:/bitnami/elasticsearch/data
+    environment:
+      # Enable authorization without HTTPS. For external access with
+      #   SSL termination, use solutions like nginx-proxy-manager.
+      ELASTICSEARCH_ENABLE_SECURITY: 'true'
+      ELASTICSEARCH_SKIP_TRANSPORT_TLS: 'true'
+      ELASTICSEARCH_ENABLE_REST_TLS: 'false'
+      # ELASTICSEARCH_USER is hardcoded to 'elastic' in the container.
+      ELASTICSEARCH_PASSWORD: ${ELASTICSEARCH_PASS:-zammad}
+
+  zammad-init:
+    # Zammad initialization.
+    <<: *zammad-service
+    command: ["zammad-init"]
+    depends_on:
+      - postgresql
+    user: 0:0
+
+  zammad-memcached:
+    # Zammad memcached.
+    command: memcached -m 256M
+    image: memcached:${MEMCACHE_VERSION:-1.6.38-alpine}
+
+  zammad-nginx:
+    # You can access the Zammad frontend at [zammad.localhost](https://zammad.localhost/).
+    <<: *zammad-service
+    deploy:
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.zammad.entryPoints=web
+        - traefik.http.routers.zammad.middlewares=redirectscheme #DARGSTACK-REMOVE
+        - traefik.http.routers.zammad.rule=Host(`zammad.${STACK_DOMAIN}`)
+        - traefik.http.routers.zammad_secure.entryPoints=web-secure
+        - traefik.http.routers.zammad_secure.rule=Host(`zammad.${STACK_DOMAIN}`)
+        - traefik.http.routers.zammad_secure.tls.options=mintls13@file #DARGSTACK-REMOVE
+        - traefik.http.services.zammad.loadbalancer.server.port=8080
+    command: ["zammad-nginx"]
+
+  zammad-railsserver:
+    # Zammad railsserver.
+    <<: *zammad-service
+    command: ["zammad-railsserver"]
+
+  zammad-redis:
+    # Zammad redis.
+    image: redis:${REDIS_VERSION:-7.4.3-alpine}
+    volumes:
+      - zammad-redis-data:/data
+
+  zammad-scheduler:
+    # Zammad scheduler.
+    <<: *zammad-service
+    command: ["zammad-scheduler"]
+
+  zammad-websocket:
+    # Zammad websocket.
+    <<: *zammad-service
+    command: ["zammad-websocket"]
+
 volumes:
   debezium_kafka_configuration:
     # The change data capture's configuration.
@@ -739,5 +721,15 @@ volumes:
   redpanda_data:
     # The message queue's data.
     {}
-  zammad_elasticsearch_data: {}
-  zammad_storage: {}
+  zammad-elasticsearch-data:
+    # Zammad's elastisearch data
+    {}
+  zammad-redis-data:
+    # Zammad's redis data
+    {}
+  zammad-backup:
+    # Zammad's backup data
+    {}
+  zammad-storage:
+    # Zammad's storage data
+    {}