docker-compose.test.yml

version: '3.7'

# Settings and configurations that are common for all minio containers
x-minio-common: &minio-common
  image: quay.io/minio/minio:RELEASE.2022-01-25T19-56-04Z
  command: server --console-address ":9001" http://minio{1...4}/data
  restart: unless-stopped
  environment:
    MINIO_ROOT_USER: minioadmin
    MINIO_ROOT_PASSWORD: minioadmin
  networks:
    - clowder2
  healthcheck:
    test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
    interval: 30s
    timeout: 20s
    retries: 3

services:

  reverse-proxy:
    image: traefik:v2.5
    restart: unless-stopped
    command:
      - --api.insecure=true
      - --providers.docker
#      - --entryPoints.web.address=:80
    ports:
      # The HTTP port
      - "80:80"
      # The Web UI (enabled by --api.insecure=true)
      - "8080:8080"
    networks:
      - clowder2
    volumes:
      # So that Traefik can listen to the Docker events
      - /var/run/docker.sock:/var/run/docker.sock

  backend:
    image: 'clowder/clowder2-backend:github-action'
    restart: unless-stopped
    build:
      context: ./backend
    networks:
      - clowder2
    environment:
      MONGODB_URL: mongodb://mongo:27017
      MINIO_SERVER_URL: minio-nginx:9000
      RABBITMQ_HOST: rabbitmq:15672
      elasticsearch_url: http://elasticsearch:9200
      auth_base: http://localhost
      auth_realm: clowder
      auth_client_id: clowder2-backend
      auth_redirect_uri: http://localhost:80/api/v2/auth
      auth_url: http://localhost/keycloak/realms/clowder/protocol/openid-connect/auth?client_id=clowder2-backend&response_type=code
      oauth2_scheme_auth_url: http://keycloak:8080/keycloak/realms/clowder/protocol/openid-connect/auth?client_id=clowder2-backend&response_type=code
      auth_register_url: http://localhost/keycloak/realms/clowder/protocol/openid-connect/registrations?client_id=clowder2-backend&response_type=code&redirect_uri=http://localhost:80/api/v2/auth&scope=openid%20email
      auth_token_url: http://keycloak:8080/keycloak/realms/clowder/protocol/openid-connect/token
      auth_server_url: http://keycloak:8080/keycloak/
      keycloak_base: http://localhost/api
      frontend_url: http://localhost
    depends_on:
      - mongo
      - minio-nginx
      - keycloak
      - elasticsearch
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.backend.rule=PathPrefix(`/api`)"
      - "traefik.http.services.backend.loadbalancer.server.port=80"
      - "traefik.http.routers.backend.priority=5"

  mongo:
    image: mongo:5.0
    restart: unless-stopped
    networks:
      - clowder2
    volumes:
      - mongo:/data/db

  minio1:
    <<: *minio-common
    hostname: minio1
    volumes:
      - data1:/data

  minio2:
    <<: *minio-common
    hostname: minio2
    volumes:
      - data2:/data

  minio3:
    <<: *minio-common
    hostname: minio3
    volumes:
      - data3:/data

  minio4:
    <<: *minio-common
    hostname: minio4
    volumes:
      - data4:/data

  minio-nginx:
    image: nginx:1.19.2-alpine
    restart: unless-stopped
    hostname: nginx
    networks:
      - clowder2
    volumes:
      - ./deployments/docker/minio-nginx.conf:/etc/nginx/nginx.conf:ro
    depends_on:
      - minio1
      - minio2
      - minio3
      - minio4

  postgres:
      image: postgres
      restart: unless-stopped
      networks:
        - clowder2
      volumes:
        - postgres_data:/var/lib/postgresql/data
      environment:
        POSTGRES_DB: keycloak_prod
        POSTGRES_USER: keycloak
        POSTGRES_PASSWORD: password

  keycloak:
      image: quay.io/keycloak/keycloak:19.0
      restart: unless-stopped
      networks:
        - clowder2
      volumes:
        - ./scripts/keycloak/clowder-realm-prod.json:/opt/keycloak/data/import/realm.json:ro
        - ./scripts/keycloak/clowder-theme/:/opt/keycloak/themes/clowder-theme/:ro
      command:
        - start-dev
        - --http-relative-path /keycloak
        - --import-realm
      environment:
        KEYCLOAK_ADMIN: admin
        KEYCLOAK_ADMIN_PASSWORD: admin
        KC_DB: postgres
        KC_DB_URL_HOST: postgres
        KC_DB_URL_DATABASE: keycloak_prod
        KC_DB_USERNAME: keycloak
        KC_DB_PASSWORD: password
      depends_on:
        - postgres
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.keycloak.rule=PathPrefix(`/keycloak`)"
        - "traefik.http.services.keycloak.loadbalancer.server.port=8080"
        - "traefik.http.routers.keycloak.priority=10"

  # message broker
  rabbitmq:
    image: rabbitmq:3-management-alpine
    environment:
      - RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS=-rabbitmq_management path_prefix "/rabbitmq"
      - RABBITMQ_DEFAULT_USER=${RABBITMQ_DEFAULT_USER:-guest}
      - RABBITMQ_DEFAULT_PASS=${RABBITMQ_DEFAULT_PASS:-guest}
    ports:
      - "5672:5672"
      - "15672:15672"
    networks:
      - clowder2
    volumes:
      - rabbitmq:/var/lib/rabbitmq

  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:8.3.3
    restart: unless-stopped
    networks:
      - clowder2
    environment:
      - "cluster.name=clowder2"
      - "discovery.type=single-node"
      - "xpack.security.enabled=false"
      - "xpack.security.http.ssl.enabled=false"
    volumes:
      - elasticsearch:/usr/share/elasticsearch/data

## By default this config uses default local driver,
## For custom volumes replace with volume driver configuration.
volumes:
  mongo:
  data1:
  data2:
  data3:
  data4:
  postgres_data:
  elasticsearch:
  rabbitmq:

networks:
  clowder2: