itcc: add blaze-validator to the omics ingest module

Adds the ITCC blaze data-model validator next to the uploader. It fetches
from the local Blaze over the compose network (BLAZE_URL), while the
resource links in its UI point at the browser-facing route
(PUBLIC_BLAZE_URL = Blaze's traefik /itcc-localdatamanagement mapping) —
the two URLs differ because everything external is relative to ${HOST}.
The UI is exposed like the uploader's: /itcc-validator with basic auth
(auth middleware) and strip-prefix.

itcc/modules/itcc-omics-ingest.yaml

@@ -33,6 +33,30 @@ services:
       - "traefik.http.middlewares.itcc-uploader-stripprefix.stripprefix.prefixes=/itcc-uploader"
       - "traefik.http.routers.itcc-uploader.middlewares=auth,itcc-uploader-stripprefix"
 
+  # Validates the local Blaze store against the ITCC core data model and shows
+  # the findings under https://${HOST}/itcc-validator. It fetches from Blaze
+  # over the compose network, while the resource links in its UI must point at
+  # the route the *browser* can reach: Blaze's Traefik route below maps
+  # /itcc-localdatamanagement onto the same store (strip-prefix + basic auth),
+  # so the two URLs differ and are configured separately.
+  blaze-validator:
+    image: docker.verbis.dkfz.de/cache/samply/itcc-blaze-validator:develop
+    environment:
+      # Bare base URL — the validator appends /fhir itself.
+      BLAZE_URL: http://bridgehead-itcc-blaze:8080
+      PUBLIC_BLAZE_URL: https://${HOST}/itcc-localdatamanagement
+      VALIDATOR_PORT: "8091"
+    depends_on:
+      - "blaze"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.itcc-validator.rule=Host(`${HOST}`) && PathPrefix(`/itcc-validator`)"
+      - "traefik.http.routers.itcc-validator.service=itcc-validator"
+      - "traefik.http.routers.itcc-validator.tls=true"
+      - "traefik.http.services.itcc-validator.loadbalancer.server.port=8091"
+      - "traefik.http.middlewares.itcc-validator-stripprefix.stripprefix.prefixes=/itcc-validator"
+      - "traefik.http.routers.itcc-validator.middlewares=auth,itcc-validator-stripprefix"
+
   patientlist-db:
     image: postgres:${POSTGRES_TAG}
     container_name: bridgehead-patientlist-db