From d985711f953108e55ee8cd46fc8959ff73a89126 Mon Sep 17 00:00:00 2001
From: Threated <jan2001.07@gmail.com>
Date: Wed, 22 Jul 2026 10:51:09 +0200
Subject: [PATCH] dkfz-module

---
 dhki/modules/dkfz-compose.yml | 76 +++++++++++++++++++++++++++++++++++
 dhki/modules/dkfz-setup.sh    |  9 +++++
 dhki/vars                     |  2 +
 3 files changed, 87 insertions(+)
 create mode 100644 dhki/modules/dkfz-compose.yml
 create mode 100644 dhki/modules/dkfz-setup.sh

diff --git a/dhki/modules/dkfz-compose.yml b/dhki/modules/dkfz-compose.yml
new file mode 100644
index 0000000..9442f8f
--- /dev/null
+++ b/dhki/modules/dkfz-compose.yml
@@ -0,0 +1,76 @@
+version: "3.7"
+
+configs:
+  dkfz-beam-connect-central-targets:
+    content: |
+      {
+        "sites": [
+          {
+            "id": "UMM-TRANSFAIR",
+            "name": "UMM TransFAIR",
+            "virtualhost": "umm-transfair",
+            "beamconnect": "transfair.umm.${BROKER_ID}"
+          },
+          {
+            "id": "UMM-BLAZE",
+            "name": "UMM MDAT Blaze",
+            "virtualhost": "umm-blaze",
+            "beamconnect": "blaze.umm.${BROKER_ID}"
+          }
+        ]
+      }
+  dkfz-beam-connect-local-targets:
+    content: |
+      []
+
+services:
+  dkfz-beam-connect:
+    image: docker.verbis.dkfz.de/cache/samply/beam-connect:${BEAM_TAG}
+    container_name: bridgehead-dkfz-beam-connect
+    environment:
+      PROXY_URL: http://beam-proxy:8081
+      APP_ID: transfair-connect.${PROXY_ID}
+      PROXY_APIKEY: ${DKFZ_TRANSFAIR_BEAM_SECRET}
+      DISCOVERY_URL: ./conf/central-targets.json
+      LOCAL_TARGETS_FILE: ./conf/local-targets.json
+      RUST_LOG: ${RUST_LOG:-info}
+      NO_PROXY: beam-proxy
+    configs:
+      - source: dkfz-beam-connect-central-targets
+        target: /conf/central-targets.json
+      - source: dkfz-beam-connect-local-targets
+        target: /conf/local-targets.json
+    depends_on:
+      - beam-proxy
+
+  dkfz-transfair:
+    image: docker.verbis.dkfz.de/cache/samply/transfair:${TRANSFAIR_TAG:-latest}
+    container_name: bridgehead-dkfz-transfair
+    command: ["dhki-dkfz"]
+    environment:
+      DATABASE_URL: sqlite:///transfair/dhki.db?mode=rwc
+      BEAM_CONNECT_URL: http://dkfz-beam-connect:8062
+      BEAM_CONNECT_APP_ID: transfair-connect.${PROXY_ID}
+      BEAM_CONNECT_API_KEY: ${DKFZ_TRANSFAIR_BEAM_SECRET}
+      DKFZ_ID_SYSTEM: ${DKFZ_ID_SYSTEM}
+      REMOTE_TRANSFAIR_URL: http://umm-transfair/
+      REMOTE_FHIR_SERVER_URL: http://umm-blaze/
+      REMOTE_EXCHANGE_ID_SYSTEM: ${DKFZ_REMOTE_EXCHANGE_ID_SYSTEM:-SESSION_ID}
+      DESTINATION_FHIR_SERVER_URL: http://blaze:8080
+      RUST_LOG: ${RUST_LOG:-info}
+    volumes:
+      - /var/cache/bridgehead/${PROJECT}/dkfz-transfair:/transfair
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.dkfz-transfair.rule=PathPrefix(`/transfair`)"
+      - "traefik.http.middlewares.dkfz-transfair-strip.stripprefix.prefixes=/transfair"
+      - "traefik.http.services.dkfz-transfair.loadbalancer.server.port=8080"
+      - "traefik.http.routers.dkfz-transfair.middlewares=dkfz-transfair-strip,auth"
+      - "traefik.http.routers.dkfz-transfair.tls=true"
+    depends_on:
+      - blaze
+      - dkfz-beam-connect
+
+  beam-proxy:
+    environment:
+      APP_transfair-connect_KEY: ${DKFZ_TRANSFAIR_BEAM_SECRET}
diff --git a/dhki/modules/dkfz-setup.sh b/dhki/modules/dkfz-setup.sh
new file mode 100644
index 0000000..77a7bcd
--- /dev/null
+++ b/dhki/modules/dkfz-setup.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+
+function dkfzSetup() {
+  if [ "${ENABLE_DKFZ:-}" == "true" ]; then
+    log INFO "DKFZ TransFAIR setup detected -- will start TransFAIR and Beam.Connect."
+    DKFZ_TRANSFAIR_BEAM_SECRET="$(cat /proc/sys/kernel/random/uuid | sed 's/[-]//g' | head -c 20)"
+    OVERRIDE+=" -f ./dhki/modules/dkfz-compose.yml"
+  fi
+}
diff --git a/dhki/vars b/dhki/vars
index 8801716..d2ab6df 100644
--- a/dhki/vars
+++ b/dhki/vars
@@ -1,5 +1,6 @@
 # This sets beam broker config depending on ENVIRONMENT
 source dhki/modules/dhki-setup.sh
+source dhki/modules/dkfz-setup.sh
 
 # BROKER_ID is exported by previous script
 BROKER_URL=https://${BROKER_ID}
@@ -28,5 +29,6 @@ do
 done
 
 transfairSetup
+dkfzSetup
 scoutSetup
 beamFileSetup