cdoc2-shares-server/docker-compose.yml at develop · open-eid/cdoc2-shares-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
# May not be up to date, see
# https://github.com/open-eid/cdoc2-java-ref-impl/tree/master/test/config/shares-server
services:
  cdoc2-shares-postgres:
    container_name: cdoc2-shares-postgres
    image: postgres
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -d postgres -U postgres" ]
      interval: 5s
      timeout: 10s
      retries: 120
    restart: always
    ports:
      - "5432:5432"
    environment:
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}


  cdoc2-shares-server-liquibase:
    container_name: cdoc2-shares-server-liquibase
    image: ${DOCKER_REGISTRY}/${DOCKER_REPOSITORY}/cdoc2-shares-server-liquibase:latest
    depends_on:
      cdoc2-shares-postgres:
        condition: service_started
    environment:
      - POSTGRES_URL=${POSTGRES_URL}
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
    command: --url="jdbc:postgresql://${POSTGRES_URL}/${POSTGRES_DB}?user=${POSTGRES_USER}&password=${POSTGRES_PASSWORD}" --defaultsFile=liquibase.properties update

  shares-server:
    container_name: shares-server
    image: ${DOCKER_REGISTRY}/${DOCKER_REPOSITORY}/cdoc2-shares-server:latest
    ports:
      - "8443:8443"
      # monitoring
      - "18443:18443"
      # JVM debug
      #- "8000:8000"
    depends_on:
      cdoc2-shares-server-liquibase:
        condition: service_completed_successfully
    configs:
      - source: shares-server-props
        target: /config/application.properties
      - source: truststore
        target: /config/servertruststore.jks
      - source: keystore
        target: /config/cdoc2server.p12
      - source: trusted-issuers-truststore
        target: /config/trusted_issuers.jks
      - source: cdoc2-trusted-infra
        target: /config/cdoc2_infra_truststore.jks
    environment:
      - SPRING_CONFIG_ADDITIONAL_LOCATION=optional:file:/config/application.properties
      - POSTGRES_URL=${POSTGRES_URL}
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - management.endpoints.metrics.username=${CDOC2_ACTUATOR_USERNAME:-actuator}
      - management.endpoints.metrics.password=${CDOC2_ACTUATOR_PASSWORD:-change_it}
      #      - JAVA_OPTS=-Djavax.net.debug=ssl:handshake:verbose:keymanager:trustmanager -Djava.security.debug=access:stack
      # JVM debug
#      - BPL_DEBUG_ENABLED=true
#      - BPL_DEBUG_PORT=8000
#      - BPL_DEBUG_SUSPEND=false
    deploy:
      resources:
        limits:
          memory: 2g
          cpus: "2.0"
    extra_hosts:
      - "host.docker.internal:host-gateway"

  # second instance of shares-server, according to configured key-shares.properties in cdoc2-java-ref-impl repository
  shares-server-second:
    container_name: shares-server-second
    image: ${DOCKER_REGISTRY}/${DOCKER_REPOSITORY}/cdoc2-shares-server:latest
    ports:
      - "8442:8442"
      # monitoring
      - "18442:18442"
      # JVM debug
      #- "8100:8100"
    depends_on:
      cdoc2-shares-server-liquibase:
        condition: service_completed_successfully
    configs:
      - source: shares-server-props
        target: /config/application.properties
      - source: truststore
        target: /config/servertruststore.jks
      - source: keystore
        target: /config/cdoc2server.p12
      - source: trusted-issuers-truststore
        target: /config/trusted_issuers.jks
      - source: cdoc2-trusted-infra
        target: /config/cdoc2_infra_truststore.jks
    environment:
      - SPRING_CONFIG_ADDITIONAL_LOCATION=optional:file:/config/application.properties
      - POSTGRES_URL=${POSTGRES_URL}
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - management.endpoints.metrics.username=${CDOC2_ACTUATOR_USERNAME:-actuator}
      - management.endpoints.metrics.password=${CDOC2_ACTUATOR_PASSWORD:-change_it}
      - server.port=8442
      - management.server.port=18442
      # JVM debug
    #      - BPL_DEBUG_ENABLED=true
    #      - BPL_DEBUG_PORT=8100
    #      - BPL_DEBUG_SUSPEND=false
    deploy:
      resources:
        limits:
          memory: 2g
          cpus: "2.0"
    extra_hosts:
      - "host.docker.internal:host-gateway"


configs:
  shares-server-props:
    file: ./shares-server/config/application.properties.docker
  truststore:
    file: ./keys/servertruststore.jks
  keystore:
    file: ./keys/cdoc2server.p12
  trusted-issuers-truststore:
      file: ./keys/test_trusted_issuers.jks
  cdoc2-trusted-infra:
    file: ./keys/cdoc2_infra_truststore.jks