bridgehead/ccp/modules/login-compose.yml

44 lines
1.7 KiB
YAML
Raw Normal View History

2023-03-22 14:41:07 +01:00
services:
############################################ Keycloak
login-db:
2023-08-02 14:38:25 +02:00
image: docker.verbis.dkfz.de/cache/postgres:15.1-alpine
2023-03-22 14:41:07 +01:00
container_name: bridgehead-login-db
environment:
POSTGRES_USER: "keycloak"
2023-08-10 21:43:44 +02:00
POSTGRES_PASSWORD: "${KEYCLOAK_DB_PASSWORD}" # Set in login-setup.sh
2023-03-22 14:41:07 +01:00
POSTGRES_DB: "keycloak"
2023-08-10 21:50:52 +02:00
# Please leave this volume commented. We are in an early stage of the development and we need to evaluate
# if the sites need to add local users or if some manual changes are required for any reason.
# volumes:
# - "bridgehead-login-db:/var/lib/postgresql/data"
2023-03-22 14:41:07 +01:00
login:
image: docker.verbis.dkfz.de/ccp/dktk-keycloak:latest
container_name: bridgehead-login
environment:
KEYCLOAK_ADMIN: "admin"
KEYCLOAK_ADMIN_PASSWORD: "${LDM_PASSWORD}"
2023-08-09 16:29:44 +02:00
TEILER_ADMIN: "${PROJECT}"
TEILER_ADMIN_PASSWORD: "${LDM_PASSWORD}"
TEILER_ADMIN_FIRST_NAME: "${OPERATOR_FIRST_NAME}"
TEILER_ADMIN_LAST_NAME: "${OPERATOR_LAST_NAME}"
TEILER_ADMIN_EMAIL: "${OPERATOR_EMAIL}"
2023-08-10 21:43:44 +02:00
KC_DB_PASSWORD: "${KEYCLOAK_DB_PASSWORD}" # Set in login-setup.sh
2023-03-22 14:41:07 +01:00
KC_HOSTNAME_URL: "https://${HOST}/login"
KC_HOSTNAME_STRICT: "false"
KC_PROXY_ADDRESS_FORWARDING: "true"
TEILER_ROOT_CONFIG_EXTERN_URL: "https://${HOST}/ccp-teiler"
command:
- start-dev --import-realm --proxy edge --http-relative-path=/login
labels:
- "traefik.enable=true"
- "traefik.http.routers.login.rule=PathPrefix(`/login`)"
- "traefik.http.services.login.loadbalancer.server.port=8080"
- "traefik.http.routers.login.tls=true"
depends_on:
- login-db
2023-08-10 21:50:52 +02:00
#volumes:
# bridgehead-login-db:
# name: "bridgehead-login-db"