116 lines
3.6 KiB
YAML
116 lines
3.6 KiB
YAML
version: "3.7"
|
|
|
|
services:
|
|
traefik:
|
|
container_name: bridgehead-traefik
|
|
image: traefik:latest
|
|
command:
|
|
- --entrypoints.web.address=:80
|
|
- --entrypoints.websecure.address=:443
|
|
- --providers.docker=true
|
|
- --providers.file.watch=true
|
|
- --providers.file.directory=/configuration/
|
|
- --api.dashboard=true
|
|
- --accesslog=true # print access-logs
|
|
- --entrypoints.web.http.redirections.entrypoint.to=websecure
|
|
- --entrypoints.web.http.redirections.entrypoint.scheme=https
|
|
labels:
|
|
- "traefik.http.routers.dashboard.rule=PathPrefix(`/api`) || PathPrefix(`/dashboard`)"
|
|
- "traefik.http.routers.dashboard.entrypoints=websecure"
|
|
- "traefik.http.routers.dashboard.service=api@internal"
|
|
- "traefik.http.routers.dashboard.tls=true"
|
|
- "traefik.http.routers.dashboard.middlewares=auth"
|
|
- "traefik.http.middlewares.auth.basicauth.users=${bc_auth_users}"
|
|
ports:
|
|
- 80:80
|
|
- 443:443
|
|
volumes:
|
|
- ../certs:/tools/certs
|
|
- ../lib/traefik-configuration/:/configuration
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
|
|
forward_proxy:
|
|
container_name: bridgehead-forward-proxy
|
|
image: samply/bridgehead-forward-proxy:develop
|
|
environment:
|
|
http_proxy: ${http_proxy}
|
|
https_proxy: ${https_proxy}
|
|
volumes:
|
|
- "bridgehead-proxy:/var/log/squid"
|
|
|
|
landing:
|
|
container_name: bridgehead-landingpage
|
|
image: samply/bridgehead-landingpage:master
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.landing.rule=PathPrefix(`/`)"
|
|
- "traefik.http.services.landing.loadbalancer.server.port=80"
|
|
- "traefik.http.routers.landing.tls=true"
|
|
environment:
|
|
HOST: ${HOST}
|
|
PROJECT: ${PROJECT}
|
|
SITE_NAME: ${SITE_NAME}
|
|
|
|
blaze:
|
|
image: "samply/blaze:0.17"
|
|
container_name: bridgehead-ccp-blaze
|
|
environment:
|
|
BASE_URL: "http://bridgehead-ccp-blaze:8080"
|
|
JAVA_TOOL_OPTIONS: "-Xmx4g"
|
|
LOG_LEVEL: "debug"
|
|
ENFORCE_REFERENTIAL_INTEGRITY: "false"
|
|
volumes:
|
|
- "blaze-data:/app/data"
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.middlewares.ccp-auth.basicauth.users=${bc_auth_users}"
|
|
- "traefik.http.routers.blaze_ccp.rule=PathPrefix(`/ccp-localdatamanagement`)"
|
|
- "traefik.http.middlewares.ccp_b_strip.stripprefix.prefixes=/ccp-localdatamanagement"
|
|
- "traefik.http.services.blaze_ccp.loadbalancer.server.port=8080"
|
|
- "traefik.http.routers.blaze_ccp.middlewares=ccp_b_strip,ccp-auth"
|
|
- "traefik.http.routers.blaze_ccp.tls=true"
|
|
|
|
spot:
|
|
image: "docker.verbis.dkfz.de/ccp-private/local-spot@sha256:dd57474f9dd0a37ddc45d29fda160eac0070446da974a76cedc78c184b47adda"
|
|
environment:
|
|
SECRET: ${SECRET}
|
|
APPID: ${APP_0_ID_SHORT}
|
|
PROXY_ID: ${PROXY_ID}
|
|
LDM_URL: ${LDM_URL}
|
|
BEAM_PROXY: http://beam-proxy:8081
|
|
depends_on:
|
|
- "beam-proxy"
|
|
- "blaze"
|
|
labels:
|
|
- "traefik.enable=false"
|
|
|
|
beam-proxy:
|
|
image: "samply/beam-proxy:develop"
|
|
container_name: bridgehead-beam-proxy
|
|
environment:
|
|
BROKER_URL: ${BROKER_URL}
|
|
PROXY_ID: ${PROXY_ID}
|
|
APP_0_ID: ${APP_0_ID_SHORT}
|
|
APP_0_KEY: ${APP_0_KEY}
|
|
APP_1_ID: ${APP_1_ID_SHORT}
|
|
APP_1_KEY: ${APP_1_KEY}
|
|
PRIVKEY_FILE: /run/secrets/proxy.pem
|
|
RUST_LOG: debug
|
|
http_proxy: ${http_proxy}
|
|
https_proxy: ${https_proxy}
|
|
secrets:
|
|
- proxy.pem
|
|
labels:
|
|
- "traefik.enable=false"
|
|
depends_on:
|
|
- "forward_proxy"
|
|
|
|
|
|
volumes:
|
|
blaze-data:
|
|
bridgehead-proxy:
|
|
|
|
secrets:
|
|
proxy.pem:
|
|
file: /etc/bridgehead/pki/${PROXY_ID_SHORT}.priv.pem
|