docker-compose.yml

# SPDX-FileCopyrightText: 2024 Magenta ApS <info@magenta.dk>
#
# SPDX-License-Identifier: MPL-2.0
services:

  suila-init:
    user: "75180:1000"  # Override in docker-compose.override.yml if your local user is different
    container_name: suila-init
    image: suila:latest
    build:
      context: .
      dockerfile: docker/Dockerfile
    env_file:
      - ./dev-environment/suila.env
    depends_on:
      - suila-db
    volumes:
      - ./suila/:/app
      - ./log/cron.log:/log/cron.log:rw
      - ./dev-environment/cert:/ssl:ro
      - ./dev-environment/crontab:/crontab:ro
    environment:
      - MAKE_MIGRATIONS=true
      - MIGRATE=true
      - LOAD_FIXTURES=true
      - MAKEMESSAGES=true
      - CREATE_API_GROUP=true
      - CREATE_API_USER=true
      - CREATE_USER_GROUPS=true
      - CREATE_DUMMY_ADMIN=true
      - CREATE_DUMMY_USERS=true
      - LOAD_CALCULATION_METHOD=true
      - LOAD_PRISME_ACCOUNT_ALIASES=true
      - TEST=false
      - HOME=/tmp/
    command: [ "true" ]
    networks:
      - default
      - database

  suila-web-public:
    user: "75180:1000"  # Override in docker-compose.override.yml if your local user is different
    container_name: suila-web-public
    image: suila:latest
    env_file:
      - ./dev-environment/suila.env
    depends_on:
      suila-init:
        condition: service_completed_successfully
    volumes:
      - ./suila/:/app
      - file-data:/upload:rw
      - ./log/suila.log:/log/suila.log:rw
      - ./dev-environment/cert:/ssl:ro
      - ./mypy.ini:/mypy.ini:ro
    environment:
      - PULL_IDP_METADATA=true
      - TEST=false
      - HOME=/tmp/
      - PUBLIC=true
    networks:
      - default
      - database
      - mail
    ports:
      - "8120:8000"
    command: gunicorn -b 0.0.0.0:8000 project.wsgi:application --timeout 120 --reload -w 1 --access-logfile - --error-logfile - --capture-output # reload on code changes

  suila-web-private:
    user: "75180:1000"  # Override in docker-compose.override.yml if your local user is different
    container_name: suila-web-private
    image: suila:latest
    env_file:
      - ./dev-environment/suila.env
    depends_on:
      suila-init:
        condition: service_completed_successfully
    volumes:
      - ./suila/:/app
      - file-data:/upload:rw
      - ./log/suila.log:/log/suila.log:rw
      - ./dev-environment/cert:/ssl:ro
      - ./mypy.ini:/mypy.ini:ro
    environment:
      - TEST=false
      - HOME=/tmp/
      - PUBLIC=false
    networks:
      - default
      - database
      - mail
    ports:
      - "8121:8000"
    command: gunicorn -b 0.0.0.0:8000 project.wsgi:application --timeout 120 --reload -w 1 --access-logfile - --error-logfile - --capture-output # reload on code changes

  suila-db:
    # Do not set `user` here
    container_name: suila-db
    image: postgres:16
    env_file:
      - ./dev-environment/suila.env
    volumes:
      - postgres-data:/var/lib/postgresql/data
    networks:
      - database

  suila-cron:
    user: "75180:1000"  # Override in docker-compose.override.yml if your local user is different
    container_name: suila-cron
    image: suila:latest
    env_file:
      - ./dev-environment/suila.env
    depends_on:
      suila-init:
        condition: service_completed_successfully
    volumes:
      - ./suila/:/app
      - file-data:/upload:ro
      - ./log/cron.log:/log/cron.log:rw
      - ./dev-environment/cert:/ssl:ro
      - ./dev-environment/crontab:/crontab:ro
    environment:
      - TEST=false
      - HOME=/tmp/
    command: [ "supercronic", "/crontab" ]
    networks:
      - default
      - database

  suila-idp:
    user: "1000:1000"  # Override in docker-compose.override.yml if your local user is different
    image: kenchan0130/simplesamlphp
    container_name: suila-idp
    environment:
      HTTP_PORT: 8126
      SIMPLESAMLPHP_SP_ENTITY_ID: http://suila-web:8120/mitid/saml/metadata/
      SIMPLESAMLPHP_SP_ASSERTION_CONSUMER_SERVICE: http://suila-web:8120/mitid/login/callback/
      SIMPLESAMLPHP_SP_SINGLE_LOGOUT_SERVICE: http://suila-web:8120/mitid/logout/callback/
      SIMPLESAMLPHP_IDP_CERTIFICATE: /var/www/simplesamlphp/cert/selfsigned.crt
      SIMPLESAMLPHP_IDP_PRIVATEKEY: /var/www/simplesamlphp/cert/selfsigned.key
    volumes:
      - ./dev-environment/cert/idp/selfsigned.crt:/var/www/simplesamlphp/cert/server.crt:ro
      - ./dev-environment/cert/idp/selfsigned.key:/var/www/simplesamlphp/cert/server.pem:ro
      - ./dev-environment/idp/authsources.php:/var/www/simplesamlphp/config/authsources.php:ro
      - ./dev-environment/idp/saml20-sp-remote.php:/var/www/simplesamlphp/metadata/saml20-sp-remote.php:ro
      - ./dev-environment/idp/ports.conf:/etc/apache2/ports.conf:ro
      - ./dev-environment/idp/site.conf:/etc/apache2/sites-available/simplesamlphp.conf:ro
    ports:
      - "8126:8126"
    networks:
      - default

  suila-sftp:
    image: atmoz/sftp
    container_name: "suila-sftp"
    volumes:
      - ./dev-environment/sftp_users.conf:/etc/sftp/users.conf
      - ./data/sftp_uploads/:/home/besk/test/:rw
      - ./data/sftp_downloads/posting_status:/home/besk/posting_status/:rw
      - ./data/sftp_downloads/b_tax:/home/besk/btax/:rw
    networks:
      - default
    ports:
      - "8122:22"

  suila-mailhog:
    container_name: suila-mailhog
    image: mailhog/mailhog
    logging:
      driver: 'none' # Disable saving logs
    networks:
      - mail
    ports:
      - "8123:8025"

  suila-traefik:
    image: traefik:2.2
    container_name: suila-traefik
    networks:
      - default
    ports:
      - "8124:80"
      - "8125:443"
    volumes:
      - ./dev-environment/traefik/traefik.yml:/etc/traefik/traefik.yml:ro
      - ./dev-environment/traefik/bf.yml:/etc/traefik/dynamic/bf.yml:ro
      - ./dev-environment/cert/traefik/:/etc/traefik/certs/:ro

  suila-hosts-updater:
    container_name: suila-hosts-updater
    image: bash
    volumes:
      - ./dev-environment/hosts.sh:/hosts.sh:ro
      - /etc/hosts:/hosts:rw
    command: [ "bash", "/hosts.sh" ]

volumes:
  postgres-data:
  file-data:

networks:
  default:
  database:
  mail: