docker-compose.yml.example

# vim: syntax=yaml:

version: '3.6'
services:

  'app':
    image: 'opertusmundi/bpm-worker:${VERSION}'
    build:
      context: .
    volumes:
    - type: 'bind'
      source: ./secrets/
      target: /secrets/
      read_only: true
    - type: 'bind'
      source: ./logs
      target: /app/logs
    ## note: override logging configuration
    #- type: 'bind'
    #  source: ./config/log4j2-syslog.xml
    #  target: /app/config/log4j2.xml
    #  read_only: true
    ## note: override container-wide keystore
    #- type: 'bind'
    #  source: ./config/application.keystore
    #  target: /app/config/application.keystore
    #  read_only: true
    - type: 'volume'
      source: files_assets
      target: /var/local/opertusmundi/files/assets
    - type: 'volume'
      source: files_contracts
      target: /var/local/opertusmundi/files/contracts
    - type: 'volume'
      source: files_drafts
      target: /var/local/opertusmundi/files/drafts
    - type: 'volume'
      source: files_invoices
      target: /var/local/opertusmundi/files/invoices
    - type: 'volume'
      source: files_orders
      target: /var/local/opertusmundi/files/orders
    - type: 'volume'
      source: files_users
      target: /var/local/opertusmundi/files/users
    - type: 'volume'
      source: files_temp
      target: /var/local/opertusmundi/files/temp
    - type: 'volume'
      source: ingest_input
      target: /var/local/opertusmundi/ingest/input
    - type: 'volume'
      source: profile_input
      target: /var/local/opertusmundi/profile/input
    environment:
      JAVA_OPTS: >-
        -server -Xmx512m -Xms128m -Djava.security.egd=file:///dev/urandom
      #  -Djavax.net.ssl.trustStore=/app/config/application.keystore -Djavax.net.ssl.trustStorePassword=secret 
      MARKETPLACE_URL: ${MARKETPLACE_URL}
      DATABASE_URL: ${DATABASE_URL}
      DATABASE_USERNAME: ${DATABASE_USERNAME}
      DATABASE_PASSWORD_FILE: /secrets/database-password
      BPM_REST_BASE_URL: ${BPM_REST_BASE_URL}
      BPM_REST_USERNAME: ${BPM_REST_USERNAME}
      BPM_REST_PASSWORD_FILE: /secrets/bpm-rest-password 
      JWT_SECRET_FILE: /secrets/jwt-secret
      MANGOPAY_BASE_URL: https://api.sandbox.mangopay.com
      MANGOPAY_CLIENT_ID: ${MANGOPAY_CLIENT_ID}
      MANGOPAY_CLIENT_PASSWORD_FILE: /secrets/mangopay-client-password 
      CATALOGUE_BASE_URL: ${CATALOGUE_BASE_URL}
      INGEST_BASE_URL: ${INGEST_BASE_URL}
      TRANSFORM_BASE_URL: ${TRANSFORM_BASE_URL}
      MAILER_BASE_URL: ${MAILER_BASE_URL}
      MESSENGER_BASE_URL: ${MESSENGER_BASE_URL}
      PROFILE_BASE_URL: ${PROFILE_BASE_URL}
      PID_BASE_URL: ${PID_BASE_URL}
      ELASTICSEARCH_BASE_URL: ${ELASTICSEARCH_BASE_URL}
      KEYCLOAK_URL: http://keycloak-opertusmundi:8080/auth
      #KEYCLOAK_URL: https://keycloak.opertusmundi.192-168-1-9.nip.io:38443/auth
      KEYCLOAK_REALM: master
      KEYCLOAK_SERVICES_REALM: Services
      KEYCLOAK_REFRESH_TOKEN_FILE: /secrets/keycloak-refresh-token
    ports:
    - '8005:8005'
    networks:
      opertusmundi_network:
        aliases:
        - 'bpm-worker'

volumes:
  files_assets:
    external: true
    name: opertusmundi_files_assets
  files_contracts:
    external: true
    name: opertusmundi_files_contracts
  files_drafts:
    external: true
    name: opertusmundi_files_drafts
  files_users:
    external: true
    name: opertusmundi_files_users
  files_invoices:
    external: true
    name: opertusmundi_files_invoices
  files_orders:
    external: true
    name: opertusmundi_files_orders
  files_temp: {}
  ingest_input:
    external: true
    name: opertusmundi_ingest_input
  profile_input:
    external: true
    name: opertusmundi_profile_input

networks:
  opertusmundi_network:
    external: true