docker-compose.yml

version: '3.7'
services:
  postgres_keycloak:
    image: docker.graphaware.com/mirror/postgres:12.0
    volumes:
      - "hume_keycloak_data:/var/lib/postgresql/data"
    environment:
      POSTGRES_DB: keycloak
      POSTGRES_USER: keycloak
      POSTGRES_PASSWORD: password
    command: -p 5433
    expose:
      - "5433" # Publishes 5433 to other containers but NOT to host machine
  keycloak:
    image: quay.io/keycloak/keycloak:15.0.2
    environment:
      - DB_VENDOR=POSTGRES
      - DB_ADDR=postgres_keycloak
      - DB_PORT=5433
      - DB_DATABASE=keycloak
      - DB_USER=keycloak
      - DB_SCHEMA=public
      - DB_PASSWORD=password
      - KEYCLOAK_USER=admin
      - KEYCLOAK_PASSWORD=admin123
      - PROXY_ADDRESS_FORWARDING=true
      - KEYCLOAK_FRONTEND_URL=http://localhost:8180/auth
    ports:
      - "8180:8080"
    volumes:
      - ./resources/scripts:/tmp/scripts
  keycloak-config:
    image: adorsys/keycloak-config-cli:latest
    environment:
      - logging.level.root=DEBUG
      - KEYCLOAK_URL=http://keycloak:8080/auth
      - KEYCLOAK_USER=admin
      - KEYCLOAK_PASSWORD=admin123
      - KEYCLOAK_AVAILABILITYCHECK_ENABLED=true
      - KEYCLOAK_AVAILABILITYCHECK_TIMEOUT=10s
      - IMPORT_VARSUBSTITUTION=true
      - TESTUSER_PASSWORD=${KEYCLOAK_DEFAULT_PASSWORD:-default}
      - TESTUSER_NAME=${KEYCLOAK_DEFAULT_USER:-testuser}
      - IMPORT_PATH=/config
    volumes:
      - ./resources/keycloak-config:/config
  neo4j:
    image: docker.graphaware.com/mirror/neo4j:4.3.3-enterprise
    ports:
      - "${NEO4J_HTTP_PORT:-7474}:7474"
      - "${NEO4J_BOLT_PORT:-7687}:7687"
    environment:
      - NEO4J_ACCEPT_LICENSE_AGREEMENT=yes
      - NEO4J_AUTH=neo4j/${NEO4J_PASSWORD:-password}
      - NEO4J_dbms_memory_heap_maxSize=4G
      - NEO4J_dbms_connector_bolt_advertised__address=${HUME_ADVERTISED_ADDRESS:-localhost}:${NEO4J_PORT:-7687}
      - NEO4JLABS_PLUGINS=["apoc","graph-data-science"]
      - NEO4J_apoc_trigger_enabled=true
    volumes:
      - "hume_neo4j_data:/data"
      - "hume_neo4j_plugins:/plugins"
  orchestra:
    image: docker.graphaware.com/public/hume-orchestra:${HUME_VERSION}
    ports:
      - 8100:8100
      - 8666:8666
    volumes:
      - ${HUME_PUBLIC_DIR:-./public}:/data
  postgres:
    image: docker.graphaware.com/public/postgres:12.0
    environment:
      POSTGRES_PASSWORD: ${HUME_DB_PASSWORD:-pgsqls3cr3t}
      POSTGRES_USER: ${HUME_DB_USER:-hume}
    ports:
      - 5432:5432
    volumes:
      - "hume_postgres_data:/var/lib/postgresql/data"
  api:
    image: docker.graphaware.com/public/hume-api:${HUME_VERSION}
    ports:
      - "8080:8080"
      - "8001:8001"
    environment:
      # - logging.level.root=DEBUG
      - SPRING_DATASOURCE_URL=jdbc:postgresql://postgres:5432/${HUME_DB_USER:-hume}
      - SPRING_DATASOURCE_USERNAME=${HUME_DB_USER:-hume}
      - SPRING_DATASOURCE_PASSWORD=${HUME_DB_PASSWORD:-pgsqls3cr3t}
      - hume.orchestra.uri=http://orchestra:8100
      - hume.security.provider=keycloak
      - keycloak.auth-server-url=http://keycloak:8080/auth
      - keycloak.realm=hume
      - keycloak.resource=hume-api
      - keycloak.credentials.secret=my-special-client-secret
      - keycloak.principal-attribute=preferred_username
      - keycloak.use-resource-role-mappings=true
      - keycloak.enabled=true
      - com.hume.core.security.license.b64=AFswWTA4BgkqhkiG9w0BBQwwKwQUDNtx44EdMGqIJqqM5pCWdlj9mRUCAhAAAgEQMAwGCCqGSIb3DQIJBQAwHQYJYIZIAWUDBAECBBCdKhmiRO3zaIlaoc2RHpXhBs4ylJxyaqB28b2b78MATcTJgNt+y+Lx3fDsDC8zPYXzY+9GjUpmOA3OYXe/5wqDX9txq6Ey79YNgRKxM0Y20eIfXWFgpm6b1KZREV5utBaAlWTKXhJj9OfSazlymSkBiqXb+J7Jz2ovGyRLzppAavOSr7eurcnrIqRxm8DLjswfzqDRaYwZ3+yWn+5fXsiL4H9XarSEBSGmawFXXbJlgTnMehpqBYy4F/X90Ak23B1GR+x+1PTAqGyHN+G4IzaFRDE6bXD29CuSP/6u5FFoqDO8NAEe4zsERT6kEsM3dduOb14zKuUgly6+yBdylZ4ab71yj12UBd2TP2Ldnsp5PWGBux4/JPcS7hpk0VmFsPkQGIkq7mQF7lOY3LJ6SzW5
  web:
    image: docker.graphaware.com/public/hume-web:${HUME_VERSION}
    environment:
      - HUME_API_URL=http://localhost:8080
      - HUME_BASE_PATH=/
      - KEYCLOAK_ENABLED=true
      - KEYCLOAK_URL=http://localhost:8180/auth
      - KEYCLOAK_REALM=hume
      - KEYCLOAK_CLIENT=hume-web
      - BASE_PATH=/
      - HUME_CROSS_DOCUMENT_MSG_VALID_URL=*
      # not necessary for local deployment
      # - HUME_COOKIE_ATTRIBUTES=SameSite=None; Secure
    ports:
      - "${HUME_FRONT_PORT:-8081}:8081"
  example-react-app:
    image: docker.graphaware.com/public/hume-iframe-react-example:${REACT_APP_VERSION}
    ports:
      - '8905:80'
    environment:
      - KEYCLOAK_URL=http://localhost:8180/auth
      - KEYCLOAK_REALM=hume
      - KEYCLOAK_CLIENT=hume-web
      - HUME_URL=http://localhost:8081
volumes:
  hume_keycloak_data:
  hume_postgres_data:
  hume_neo4j_data:
  hume_neo4j_plugins: