mirror of https://github.com/samply/bridgehead.git
39 lines
1.3 KiB
YAML
39 lines
1.3 KiB
YAML
version: "3.7"
|
|
|
|
services:
|
|
############################################ Keycloak
|
|
login-db:
|
|
image: docker.verbis.dkfz.de/cache/postgres:15.1-alpine
|
|
container_name: bridgehead-login-db
|
|
environment:
|
|
POSTGRES_USER: "keycloak"
|
|
POSTGRES_PASSWORD: "${KEYCLOAK_DB_PASSWORD}" # Set in teiler-setup.sh
|
|
POSTGRES_DB: "keycloak"
|
|
volumes:
|
|
- "bridgehead-login-db:/var/lib/postgresql/data"
|
|
|
|
login:
|
|
image: docker.verbis.dkfz.de/ccp/dktk-keycloak:latest
|
|
container_name: bridgehead-login
|
|
environment:
|
|
KEYCLOAK_ADMIN: "admin"
|
|
KEYCLOAK_ADMIN_PASSWORD: "${KEYCLOAK_ADMIN_PASSWORD}"
|
|
KC_DB_PASSWORD: "${KEYCLOAK_DB_PASSWORD}" # Set in teiler-setup.sh
|
|
KC_HOSTNAME_URL: "https://${HOST}/login"
|
|
KC_HOSTNAME_STRICT: "false"
|
|
KC_PROXY_ADDRESS_FORWARDING: "true"
|
|
TEILER_ROOT_CONFIG_EXTERN_URL: "https://${HOST}/ccp-teiler"
|
|
command:
|
|
- start-dev --import-realm --proxy edge --http-relative-path=/login
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.login.rule=PathPrefix(`/login`)"
|
|
- "traefik.http.services.login.loadbalancer.server.port=8080"
|
|
- "traefik.http.routers.login.tls=true"
|
|
depends_on:
|
|
- login-db
|
|
|
|
volumes:
|
|
bridgehead-login-db:
|
|
name: "bridgehead-login-db"
|