docker-compose.tests.yml

# Test infrastructure for redb.Route integration tests.
#
# Service definitions mirror the canonical per-service compose files under
# C:\Work\yaml (container names, images, ports, credentials, volumes) so the
# same containers back both the standalone stacks and this bundle.
# Self-contained: services share the default compose network (no external network needed).
#
# Usage:
#   docker compose -f docker-compose.tests.yml up -d
#   dotnet test --filter "Category=Integration"
#   docker compose -f docker-compose.tests.yml down -v
#
# Deviations from C:\Work\yaml (documented inline):
#   - kafka EXTERNAL listener advertises localhost (host-run tests), not kafka-kN.
#   - msdb uses the stock mcr.microsoft.com/mssql/server image (the C:\Work\yaml\mssql
#     custom Dockerfile is not part of this repo).
#   - pgdb-data is a local (non-external) volume so this bundle is self-contained.

services:

  # ── RabbitMQ (AMQP 0-9-1) ──────────────────────────────────────────────────
  # Used by: redb.Route.Tests.RabbitMQ → localhost:5672, admin/admin
  rabbitmq:
    image: rabbitmq:4-management-alpine
    container_name: route-rabbitmq
    hostname: rabbitmq
    ports:
      - "5672:5672"     # AMQP 0-9-1
      - "15672:15672"   # Management UI
    environment:
      RABBITMQ_DEFAULT_USER: admin
      RABBITMQ_DEFAULT_PASS: admin
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  # ── ActiveMQ Artemis (AMQP 1.0 + MQTT + STOMP + OpenWire) ──────────────────
  # Used by: redb.Route.Tests.Amqp → localhost:5673 (AMQP), admin/admin
  activemq:
    image: apache/activemq-artemis:latest-alpine
    container_name: activemq
    user: root
    restart: unless-stopped
    environment:
      ARTEMIS_USER: admin
      ARTEMIS_PASSWORD: admin
      ARTEMIS_MIN_MEMORY: 512M
      ARTEMIS_MAX_MEMORY: 1024M
    # Publish only the low host ports the tests actually use. OpenWire (61616) and STOMP (61613)
    # fall inside the Windows dynamic/reserved TCP range (49152-65535) that WinNAT grabs on restart,
    # which makes Docker fail to bind them ("forbidden by access permissions") and the whole container
    # ends up publishing nothing. The Amqp tests need only 5673; console/MQTT are low ports and safe.
    ports:
      - "5673:5672"     # AMQP 1.0 (5672 taken by RabbitMQ) — the only port the Amqp tests use
      - "8161:8161"     # Web console (optional, low port)
      - "1883:1883"     # MQTT (optional, low port)
    volumes:
      - activemq-data:/var/lib/artemis-instance/data
      - activemq-tmp:/var/lib/artemis-instance/tmp

  # ── Kafka (KRaft, 3 brokers) ────────────────────────────────────────────────
  # Used by: redb.Route.Tests.Kafka → localhost:29092,29094,29096
  # EXTERNAL listener advertises localhost so host-run tests can reach brokers;
  # PLAINTEXT (inter-broker + redpanda-console) advertises kafka-kN inside the compose network.
  kafka-k1:
    image: apache/kafka:3.7.0
    container_name: kafka-k1
    ports:
      - "29092:29092"
      - "19093:9093"
    environment:
      - KAFKA_NODE_ID=1
      - KAFKA_PROCESS_ROLES=controller,broker
      - KAFKA_CONTROLLER_QUORUM_VOTERS=1@kafka-k1:9093,2@kafka-k2:9093,3@kafka-k3:9093
      - KAFKA_LISTENERS=PLAINTEXT://0.0.0.0:19092,CONTROLLER://0.0.0.0:9093,EXTERNAL://0.0.0.0:29092
      - KAFKA_ADVERTISED_LISTENERS=PLAINTEXT://kafka-k1:19092,EXTERNAL://localhost:29092
      - KAFKA_LISTENER_SECURITY_PROTOCOL_MAP=CONTROLLER:PLAINTEXT,PLAINTEXT:PLAINTEXT,EXTERNAL:PLAINTEXT
      - KAFKA_CONTROLLER_LISTENER_NAMES=CONTROLLER
      - KAFKA_INTER_BROKER_LISTENER_NAME=PLAINTEXT
      - KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR=3
      - KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR=3
      - KAFKA_TRANSACTION_STATE_LOG_MIN_ISR=2
      - KAFKA_AUTO_CREATE_TOPICS_ENABLE=true
      - KAFKA_DEFAULT_REPLICATION_FACTOR=3
      - KAFKA_NUM_PARTITIONS=3
      - KAFKA_MIN_INSYNC_REPLICAS=2
      - KAFKA_LOG_RETENTION_HOURS=168
      - KAFKA_CLUSTER_ID=4L6g3nShT-eMCtK--X86sw

  kafka-k2:
    image: apache/kafka:3.7.0
    container_name: kafka-k2
    ports:
      - "29094:29094"
      - "19095:9093"
    environment:
      - KAFKA_NODE_ID=2
      - KAFKA_PROCESS_ROLES=controller,broker
      - KAFKA_CONTROLLER_QUORUM_VOTERS=1@kafka-k1:9093,2@kafka-k2:9093,3@kafka-k3:9093
      - KAFKA_LISTENERS=PLAINTEXT://0.0.0.0:19094,CONTROLLER://0.0.0.0:9093,EXTERNAL://0.0.0.0:29094
      - KAFKA_ADVERTISED_LISTENERS=PLAINTEXT://kafka-k2:19094,EXTERNAL://localhost:29094
      - KAFKA_LISTENER_SECURITY_PROTOCOL_MAP=CONTROLLER:PLAINTEXT,PLAINTEXT:PLAINTEXT,EXTERNAL:PLAINTEXT
      - KAFKA_CONTROLLER_LISTENER_NAMES=CONTROLLER
      - KAFKA_INTER_BROKER_LISTENER_NAME=PLAINTEXT
      - KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR=3
      - KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR=3
      - KAFKA_TRANSACTION_STATE_LOG_MIN_ISR=2
      - KAFKA_AUTO_CREATE_TOPICS_ENABLE=true
      - KAFKA_DEFAULT_REPLICATION_FACTOR=3
      - KAFKA_NUM_PARTITIONS=3
      - KAFKA_MIN_INSYNC_REPLICAS=2
      - KAFKA_LOG_RETENTION_HOURS=168
      - KAFKA_CLUSTER_ID=4L6g3nShT-eMCtK--X86sw

  kafka-k3:
    image: apache/kafka:3.7.0
    container_name: kafka-k3
    ports:
      - "29096:29096"
      - "19097:9093"
    environment:
      - KAFKA_NODE_ID=3
      - KAFKA_PROCESS_ROLES=controller,broker
      - KAFKA_CONTROLLER_QUORUM_VOTERS=1@kafka-k1:9093,2@kafka-k2:9093,3@kafka-k3:9093
      - KAFKA_LISTENERS=PLAINTEXT://0.0.0.0:19096,CONTROLLER://0.0.0.0:9093,EXTERNAL://0.0.0.0:29096
      - KAFKA_ADVERTISED_LISTENERS=PLAINTEXT://kafka-k3:19096,EXTERNAL://localhost:29096
      - KAFKA_LISTENER_SECURITY_PROTOCOL_MAP=CONTROLLER:PLAINTEXT,PLAINTEXT:PLAINTEXT,EXTERNAL:PLAINTEXT
      - KAFKA_CONTROLLER_LISTENER_NAMES=CONTROLLER
      - KAFKA_INTER_BROKER_LISTENER_NAME=PLAINTEXT
      - KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR=3
      - KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR=3
      - KAFKA_TRANSACTION_STATE_LOG_MIN_ISR=2
      - KAFKA_AUTO_CREATE_TOPICS_ENABLE=true
      - KAFKA_DEFAULT_REPLICATION_FACTOR=3
      - KAFKA_NUM_PARTITIONS=3
      - KAFKA_MIN_INSYNC_REPLICAS=2
      - KAFKA_LOG_RETENTION_HOURS=168
      - KAFKA_CLUSTER_ID=4L6g3nShT-eMCtK--X86sw

  # Kafka web console (optional; not required by tests).
  redpanda-console:
    image: redpandadata/console:latest
    container_name: redpanda-console
    ports:
      - "8888:8080"
    environment:
      - KAFKA_BROKERS=kafka-k1:19092,kafka-k2:19094,kafka-k3:19096
    depends_on:
      - kafka-k1
      - kafka-k2
      - kafka-k3

  # ── Redis ───────────────────────────────────────────────────────────────────
  # Used by: redb.Route.Tests.Redis → localhost:6379
  redis:
    image: bitnami/redis:latest
    container_name: redis
    ports:
      - "6379:6379"
    environment:
      - ALLOW_EMPTY_PASSWORD=yes
    volumes:
      - redis_data:/bitnami/redis/data
    restart: unless-stopped

  # Redis web console (optional; not required by tests).
  redisinsight:
    image: redis/redisinsight:latest
    container_name: redisinsight
    ports:
      - "5540:5540"
    depends_on:
      - redis
    restart: unless-stopped

  # ── GreenMail (SMTP + IMAP + POP3) ─────────────────────────────────────────
  # Used by: redb.Route.Tests.Mail — user admin/admin pre-provisioned.
  #   SMTP → 3025, POP3 → 3110, IMAP → 3143, SMTPS → 3465, IMAPS → 3993, POP3S → 3995
  greenmail:
    image: greenmail/standalone:2.1.2
    container_name: route-greenmail
    restart: always
    ports:
      - "3025:3025"     # SMTP
      - "3110:3110"     # POP3
      - "3143:3143"     # IMAP
      - "3465:3465"     # SMTPS
      - "3993:3993"     # IMAPS
      - "3995:3995"     # POP3S
    environment:
      GREENMAIL_OPTS: "-Dgreenmail.setup.test.all -Dgreenmail.users=admin:admin@localhost"
    healthcheck:
      test: ["CMD-SHELL", "nc -z localhost 3025 && nc -z localhost 3143"]
      interval: 10s
      timeout: 5s
      retries: 5

  # ── SFTP (OpenSSH) ─────────────────────────────────────────────────────────
  # Used by: redb.Route.Tests.Sftp → localhost:2222, testuser/secret, dir upload/
  sftp:
    image: atmoz/sftp:latest
    container_name: route-sftp
    ports:
      - "2222:22"
    command: testuser:secret:::upload
    healthcheck:
      test: ["CMD-SHELL", "nc -z localhost 22"]
      interval: 10s
      timeout: 3s
      retries: 5

  # ── Mosquitto (MQTT 5.0) ────────────────────────────────────────────────────
  # Used by: redb.Route.Tests.MqttNet → localhost:11883 (anonymous)
  mosquitto:
    image: eclipse-mosquitto:2
    container_name: route-mosquitto
    ports:
      - "11883:1883"     # MQTT
    volumes:
      - mosquitto-data:/mosquitto/data
      - mosquitto-log:/mosquitto/log
    command: ["sh", "-c", "printf 'listener 1883\nallow_anonymous true\n' > /mosquitto/config/mosquitto.conf && /usr/sbin/mosquitto -c /mosquitto/config/mosquitto.conf"]
    healthcheck:
      test: ["CMD-SHELL", "mosquitto_sub -h localhost -t '$$SYS/broker/uptime' -C 1 -W 3"]
      interval: 10s
      timeout: 5s
      retries: 5

  # ── IBM MQ Developer Edition ────────────────────────────────────────────────
  # Used by: redb.Route.Tests.IbmMq → localhost:1414
  #   Queue Manager QM1, channel DEV.APP.SVRCONN (app/admin), admin/admin
  #   Web console: https://localhost:9443/ibmmq/console
  ibmmq:
    image: icr.io/ibm-messaging/mq:latest
    container_name: ibmmq
    hostname: ibmmq
    restart: unless-stopped
    ports:
      - "1414:1414"     # MQ listener
      - "9443:9443"     # Web console (HTTPS)
      - "9157:9157"     # Prometheus metrics (optional)
    environment:
      LICENSE: accept
      MQ_QMGR_NAME: QM1
      MQ_APP_PASSWORD: admin
      MQ_ADMIN_PASSWORD: admin
      MQ_DEV: "true"
    volumes:
      - ibmmq-data:/mnt/mqm
    healthcheck:
      test: ["CMD-SHELL", "chkmqhealthy"]
      interval: 15s
      timeout: 10s
      retries: 10
      start_period: 30s

  # ── LocalStack (AWS SQS + SNS emulator) ─────────────────────────────────────
  # Used by: redb.Route.Tests.Sqs → http://localhost:4566 (test/test, us-east-1)
  localstack:
    image: localstack/localstack:3        # community — SQS/SNS free, no auth token
    container_name: redb-localstack
    ports:
      - "4566:4566"            # single edge port for all AWS services
    environment:
      - ACTIVATE_PRO=0
      - SERVICES=sqs,sns
      - DEBUG=0
      - AWS_DEFAULT_REGION=us-east-1
      - EAGER_SERVICE_LOADING=1
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://localhost:4566/_localstack/health"]
      interval: 10s
      timeout: 5s
      retries: 6
      start_period: 15s

  # ── MinIO (S3-compatible) ────────────────────────────────────────────────────
  # Used by: redb.Route.Tests.S3 → localhost:9000 (minioadmin/minioadmin)
  # No C:\Work\yaml canonical — S3 test infra lives only here.
  minio:
    image: minio/minio:latest
    container_name: route-minio
    hostname: minio
    ports:
      - "9000:9000"     # S3 API
      - "9001:9001"     # Web console
    environment:
      MINIO_ROOT_USER: minioadmin
      MINIO_ROOT_PASSWORD: minioadmin
    command: server /data --console-address ":9001"
    healthcheck:
      test: ["CMD", "mc", "ready", "local"]
      interval: 10s
      timeout: 5s
      retries: 5
    volumes:
      - minio-data:/data

  # Creates the default test bucket after MinIO is healthy.
  minio-init:
    image: minio/mc:latest
    container_name: route-minio-init
    depends_on:
      minio:
        condition: service_healthy
    entrypoint: >
      /bin/sh -c "
      mc alias set local http://minio:9000 minioadmin minioadmin;
      mc mb --ignore-existing local/test-bucket;
      exit 0;
      "

  # ── FTP/FTPS ────────────────────────────────────────────────────────────────
  # Used by: redb.Route.Tests.Ftp → localhost:21, testuser/secret
  # No C:\Work\yaml canonical — FTP test infra lives only here.
  ftp:
    image: delfer/alpine-ftp-server:latest
    container_name: route-ftp
    ports:
      - "21:21"         # FTP control
      - "21000-21010:21000-21010"   # Passive data
    environment:
      USERS: "testuser|secret|/home/testuser|10000"
      ADDRESS: localhost
      MIN_PORT: 21000
      MAX_PORT: 21010
    volumes:
      - ./tests/docker/ftp/vsftpd.conf:/etc/vsftpd/vsftpd.conf:ro
    healthcheck:
      test: ["CMD-SHELL", "nc -z localhost 21"]
      interval: 10s
      timeout: 3s
      retries: 5

  # ── Elasticsearch ───────────────────────────────────────────────────────────
  # Used by: redb.Route.Tests.Elasticsearch → localhost:9200 (security disabled)
  # No C:\Work\yaml canonical — ES test infra lives only here.
  elasticsearch:
    image: elasticsearch:8.17.0
    container_name: route-elasticsearch
    ports:
      - "9200:9200"     # HTTP API
      - "9300:9300"     # Transport
    environment:
      discovery.type: single-node
      xpack.security.enabled: "false"
      ES_JAVA_OPTS: "-Xms512m -Xmx512m"
    volumes:
      - elastic-data:/usr/share/elasticsearch/data
    healthcheck:
      test: ["CMD-SHELL", "curl -sf http://localhost:9200/_cluster/health || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 30s

  # ── Azure Service Bus Emulator (+ Azurite + SQL Edge) ───────────────────────
  # Used by: redb.Route.Tests.AzureServiceBus → localhost:5300 (AMQP)
  # No C:\Work\yaml canonical — ASB test infra lives only here.
  azurite:
    image: mcr.microsoft.com/azure-storage/azurite:latest
    container_name: route-azurite
    ports:
      - "10000:10000"   # Blob
      - "10001:10001"   # Queue
      - "10002:10002"   # Table
    healthcheck:
      test: ["CMD-SHELL", "node -e \"require('http').get('http://localhost:10000', r => process.exit(r.statusCode === 400 ? 0 : 1)).on('error', () => process.exit(1))\""]
      interval: 10s
      timeout: 5s
      retries: 5

  sqledge:
    image: mcr.microsoft.com/azure-sql-edge:latest
    container_name: route-sqledge
    environment:
      ACCEPT_EULA: "Y"
      MSSQL_SA_PASSWORD: "StrongP@ss1"
    healthcheck:
      test: ["CMD-SHELL", "/opt/mssql-tools/bin/sqlcmd -S localhost -U sa -P 'StrongP@ss1' -Q 'SELECT 1' || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 20
      start_period: 30s

  servicebus:
    image: mcr.microsoft.com/azure-messaging/servicebus-emulator:latest
    container_name: route-servicebus
    depends_on:
      azurite:
        condition: service_healthy
      sqledge:
        condition: service_started
    ports:
      - "5300:5672"     # AMQP (remapped to avoid conflict with RabbitMQ on 5672)
    environment:
      SQL_SERVER: sqledge
      ACCEPT_EULA: "Y"
      MSSQL_SA_PASSWORD: "StrongP@ss1"
    healthcheck:
      test: ["CMD-SHELL", "nc -z localhost 5672"]
      interval: 15s
      timeout: 5s
      retries: 10
      start_period: 60s

  # ── OpenLDAP ─────────────────────────────────────────────────────────────────
  # Used by: redb.Route.Tests.Ldap → localhost:389
  #   Admin DN cn=admin,dc=redb,dc=test / admin, Base DN dc=redb,dc=test
  openldap:
    image: osixia/openldap:1.5.0
    container_name: route-openldap
    hostname: openldap
    restart: unless-stopped
    ports:
      - "389:389"       # LDAP
      - "636:636"       # LDAPS
    environment:
      LDAP_ORGANISATION: redb
      LDAP_DOMAIN: redb.test
      LDAP_ADMIN_PASSWORD: admin
      LDAP_READONLY_USER: "false"
      LDAP_TLS_VERIFY_CLIENT: never
    volumes:
      - openldap-data:/var/lib/ldap
      - openldap-config:/etc/ldap/slapd.d
      - ./tests/docker/ldap/seed.ldif:/container/service/slapd/assets/config/bootstrap/ldif/custom/seed.ldif:ro
    command: --copy-service
    healthcheck:
      test: ["CMD-SHELL", "ldapsearch -x -H ldap://localhost -D cn=admin,dc=redb,dc=test -w admin -b dc=redb,dc=test -s base '(objectClass=*)' dn | grep -q 'dn:'"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 15s

  # phpLDAPadmin web UI (optional; not required by tests). http://localhost:8389
  ldapadmin:
    image: osixia/phpldapadmin:latest
    container_name: route-ldapadmin
    restart: unless-stopped
    ports:
      - "8389:80"
    environment:
      PHPLDAPADMIN_LDAP_HOSTS: openldap
      PHPLDAPADMIN_LDAP_CLIENT_TLS: "false"
      PHPLDAPADMIN_HTTPS: "false"
    depends_on:
      openldap:
        condition: service_healthy

  # ── Firebase Emulators (Firestore + Auth) ───────────────────────────────────
  # Used by: redb.Route.Tests.Firebase.Integration
  #   Firestore localhost:8086, Auth localhost:9099, UI http://localhost:4000
  firebase-emulators:
    image: node:22-slim
    container_name: firebase-emulators
    hostname: firebase-emulators
    restart: unless-stopped
    dns:
      - 8.8.8.8
      - 1.1.1.1
    # Host blocks outbound UDP (VPN) but allows TCP — force DNS-over-TCP.
    dns_opt:
      - use-vc
    ports:
      - "8086:8086"     # Firestore
      - "9099:9099"     # Auth
      - "4000:4000"     # Emulator UI
    environment:
      FIRESTORE_EMULATOR_HOST: "0.0.0.0:8086"
      FIREBASE_AUTH_EMULATOR_HOST: "0.0.0.0:9099"
    entrypoint: >
      /bin/sh -c "
        apt-get update &&
        apt-get install -y --no-install-recommends ca-certificates wget &&
        rm -rf /var/lib/apt/lists/* &&
        wget -qO /tmp/jre.tar.gz 'https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.7%2B6/OpenJDK21U-jre_x64_linux_hotspot_21.0.7_6.tar.gz' &&
        mkdir -p /opt/java && tar xzf /tmp/jre.tar.gz -C /opt/java --strip-components=1 && rm /tmp/jre.tar.gz &&
        export JAVA_HOME=/opt/java && export PATH=/opt/java/bin:$$PATH &&
        npm install -g firebase-tools &&
        mkdir -p /app && cd /app &&
        echo '{\"emulators\":{\"firestore\":{\"host\":\"0.0.0.0\",\"port\":8086},\"auth\":{\"host\":\"0.0.0.0\",\"port\":9099},\"ui\":{\"enabled\":true,\"host\":\"0.0.0.0\",\"port\":4000}}}' > firebase.json &&
        firebase emulators:start --project demo-redb --only firestore,auth
      "
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8086/ || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 15
      start_period: 90s

  # ── Fake GCS Server (Firebase Storage) ──────────────────────────────────────
  # Used by: redb.Route.Tests.Firebase.Integration → http://localhost:4443
  fake-gcs:
    image: fsouza/fake-gcs-server:latest
    container_name: firebase-gcs
    hostname: firebase-gcs
    restart: unless-stopped
    ports:
      - "4443:4443"
    command:
      - "-scheme"
      - "http"
      - "-host"
      - "0.0.0.0"
      - "-port"
      - "4443"
      - "-backend"
      - "memory"
      - "-public-host"
      - "localhost:4443"
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:4443/storage/v1/b || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5

  # ── Mock OAuth2 Server (OIDC) ────────────────────────────────────────────────
  # Used by: redb.Identity federation tests → http://localhost:9199/default
  mock-oauth2:
    image: ghcr.io/navikt/mock-oauth2-server:2.1.10
    container_name: route-mock-oauth2
    hostname: mock-oauth2
    restart: unless-stopped
    ports:
      - "9199:8080"
    environment:
      SERVER_PORT: 8080
      JSON_CONFIG: >
        {
          "interactiveLogin": true,
          "httpServer": "NettyWrapper",
          "tokenCallbacks": []
        }
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8080/default/.well-known/openid-configuration || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s

  # ── PostgreSQL ───────────────────────────────────────────────────────────────
  # Used by: redb.Route.Tests.Core (redb.Postgres[.Pro]) → localhost:5432
  pgdb:
    image: postgres:18
    container_name: pgdb
    user: root
    restart: always
    ports:
      - "5432:5432"
    environment:
      POSTGRES_HOST_AUTH_METHOD: trust
      POSTGRES_PASSWORD: 1
    volumes:
      - pgdb-data:/var/lib/postgresql
    stop_grace_period: 30s

  # ── SQL Server ─────────────────────────────────────────────────────────────
  # Used by: redb.Route.Tests.Core (redb.MSSql[.Pro]) → localhost:1433, sa/!@rrQWER123
  # Stock image (C:\Work\yaml\mssql builds a custom Dockerfile not present here).
  msdb:
    image: mcr.microsoft.com/mssql/server:2022-latest
    container_name: msdb
    user: root
    restart: always
    ports:
      - "1433:1433"
    environment:
      MSSQL_SA_PASSWORD: "!@rrQWER123"
      ACCEPT_EULA: "Y"
    volumes:
      - mssql-data:/var/opt/mssql/data
      - mssql-log:/var/opt/mssql/log
      - mssql-secrets:/var/opt/mssql/secrets

volumes:
  activemq-data:
  activemq-tmp:
  redis_data:
  mosquitto-data:
  mosquitto-log:
  ibmmq-data:
  minio-data:
  elastic-data:
  openldap-data:
  openldap-config:
  pgdb-data:
  mssql-data:
  mssql-log:
  mssql-secrets: