mirror of
https://github.com/samply/bridgehead.git
synced 2025-06-16 15:00:15 +02:00
721627a78f
* feat: migrate to new dnpm:dip node * hardcode dnpm connector type to broker * use `SITE_NAME` for dnpm `LOCAL_SITE` * host central targets in git * dnpm: add goettingen to central targets * dnpm: add uksh to central targets * dnpm: replace named volumes with fs volumes * chore: change dnpm images * chore: pin mysql * dnpm: Secure endpoints for ETL and p2p communications (#254) * fix authup redirect (#262) When a OIDC provider is configured, you'll get redirected to authup by Keycloak which redirects you to the DNPM:DIP. Currently the url looks like this: https://myserver/authup//someurl and produces an error. Manually removing the additional / fixes the issue. * Whitespace formatting --------- Co-authored-by: Niklas <niklas@ytvwld.de> Co-authored-by: Niklas Reimer <niklas@backbord.net> Co-authored-by: Martin Lablans <6804500+lablans@users.noreply.github.com>
60 lines
2.3 KiB
YAML
60 lines
2.3 KiB
YAML
version: "3.7"
|
|
|
|
services:
|
|
dnpm-beam-proxy:
|
|
image: docker.verbis.dkfz.de/cache/samply/beam-proxy:${BEAM_TAG}
|
|
container_name: bridgehead-dnpm-beam-proxy
|
|
environment:
|
|
BROKER_URL: ${DNPM_BROKER_URL}
|
|
PROXY_ID: ${DNPM_PROXY_ID}
|
|
APP_dnpm-connect_KEY: ${DNPM_BEAM_SECRET_SHORT}
|
|
PRIVKEY_FILE: /run/secrets/proxy.pem
|
|
ALL_PROXY: http://forward_proxy:3128
|
|
TLS_CA_CERTIFICATES_DIR: ./conf/trusted-ca-certs
|
|
ROOTCERT_FILE: ./conf/root.crt.pem
|
|
secrets:
|
|
- proxy.pem
|
|
depends_on:
|
|
- "forward_proxy"
|
|
volumes:
|
|
- /etc/bridgehead/trusted-ca-certs:/conf/trusted-ca-certs:ro
|
|
- /srv/docker/bridgehead/ccp/root.crt.pem:/conf/root.crt.pem:ro
|
|
|
|
dnpm-beam-connect:
|
|
depends_on: [ dnpm-beam-proxy ]
|
|
image: docker.verbis.dkfz.de/cache/samply/beam-connect:develop
|
|
container_name: bridgehead-dnpm-beam-connect
|
|
environment:
|
|
PROXY_URL: http://dnpm-beam-proxy:8081
|
|
PROXY_APIKEY: ${DNPM_BEAM_SECRET_SHORT}
|
|
APP_ID: dnpm-connect.${DNPM_PROXY_ID}
|
|
DISCOVERY_URL: "./conf/central_targets.json"
|
|
LOCAL_TARGETS_FILE: "/conf/connect_targets.json"
|
|
HTTP_PROXY: http://forward_proxy:3128
|
|
HTTPS_PROXY: http://forward_proxy:3128
|
|
NO_PROXY: dnpm-beam-proxy,dnpm-backend, host.docker.internal${DNPM_ADDITIONAL_NO_PROXY}
|
|
RUST_LOG: ${RUST_LOG:-info}
|
|
NO_AUTH: "true"
|
|
TLS_CA_CERTIFICATES_DIR: ./conf/trusted-ca-certs
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
volumes:
|
|
- /etc/bridgehead/trusted-ca-certs:/conf/trusted-ca-certs:ro
|
|
- /etc/bridgehead/dnpm/local_targets.json:/conf/connect_targets.json:ro
|
|
- /srv/docker/bridgehead/minimal/modules/dnpm-central-targets.json:/conf/central_targets.json:ro
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.dnpm-connect.rule=PathPrefix(`/dnpm-connect`)"
|
|
- "traefik.http.middlewares.dnpm-connect-strip.stripprefix.prefixes=/dnpm-connect"
|
|
- "traefik.http.routers.dnpm-connect.middlewares=dnpm-connect-strip"
|
|
- "traefik.http.services.dnpm-connect.loadbalancer.server.port=8062"
|
|
- "traefik.http.routers.dnpm-connect.tls=true"
|
|
|
|
dnpm-echo:
|
|
image: docker.verbis.dkfz.de/cache/samply/bridgehead-echo:latest
|
|
container_name: bridgehead-dnpm-echo
|
|
|
|
secrets:
|
|
proxy.pem:
|
|
file: /etc/bridgehead/pki/${SITE_ID}.priv.pem
|