coding-box/docker-compose.yaml at develop · iqb-berlin/coding-box · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
x-env-postgres: &env-postgres
  POSTGRES_HOST: db
  POSTGRES_PORT: 5432
  POSTGRES_USER: ${POSTGRES_USER}
  POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
  POSTGRES_DB: ${POSTGRES_DB}

x-env-redis: &env-redis
  REDIS_HOST: redis
  REDIS_PORT: 6379
  REDIS_PREFIX: coding-box

x-env-keycloak: &env-keycloak
  KEYCLOAK_URL: ${KEYCLOAK_URL}
  KEYCLOAK_REALM: ${KEYCLOAK_REALM}
  KEYCLOAK_CLIENT_ID: ${KEYCLOAK_CLIENT_ID}
  KEYCLOAK_CLIENT_SECRET: ${KEYCLOAK_CLIENT_SECRET}
  OIDC_ISSUER: ${OIDC_ISSUER}
  OIDC_JWKS_URI: ${OIDC_JWKS_URI}

x-env-auth-policy: &env-auth-policy
  WORKSPACE_TOKEN_REPLAY_READ_MAX_DURATION_DAYS: ${WORKSPACE_TOKEN_REPLAY_READ_MAX_DURATION_DAYS:-90}
  ALLOW_LEGACY_WORKSPACE_REPLAY_TOKENS: ${ALLOW_LEGACY_WORKSPACE_REPLAY_TOKENS:-true}

services:
  redis:
    image: redis:alpine
    volumes:
      - "redis_data:/data"
    networks:
      - application-network
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 5s
      retries: 5

  db:
    environment:
      <<: *env-postgres
    volumes:
      - "db_vol:/var/lib/postgresql/data"
    networks:
      - application-network

  liquibase:
    depends_on:
      db:
        condition: service_healthy
    environment:
      <<: *env-postgres
    command: [
      "liquibase",
      "--url=jdbc:postgresql://db:5432/$POSTGRES_DB",
      "--username=$POSTGRES_USER",
      "--password=$POSTGRES_PASSWORD",
      "--classpath=changelog",
      "--changeLogFile=coding-box.changelog-root.xml",
      "update"
    ]
    networks:
      - application-network

  backend:
    depends_on:
      db:
        condition: service_healthy
      liquibase:
        condition: service_completed_successfully
      redis:
        condition: service_healthy
    environment:
      APP_ROLE: api
      API_HOST: backend
      JWT_SECRET: ${JWT_SECRET}
      NODE_OPTIONS: ${BACKEND_NODE_OPTIONS:-}
      GEOGEBRA_BUNDLE_DOWNLOAD_URL: ${GEOGEBRA_BUNDLE_DOWNLOAD_URL:-}
      EXPORT_CODING_LIST_BATCH_SIZE: ${EXPORT_CODING_LIST_BATCH_SIZE:-500}
      EXPORT_VERSIONED_BATCH_SIZE: ${EXPORT_VERSIONED_BATCH_SIZE:-250}
      POSTGRES_POOL_MAX: ${POSTGRES_POOL_MAX:-10}
      DISABLED_JOB_QUEUE_PROCESSORS: data-export
      <<: [ *env-redis, *env-postgres, *env-keycloak, *env-auth-policy ]
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "node -e \"const http=require('http');const req=http.get('http://backend:3333/api/health',res=>process.exit(res.statusCode===200?0:1));req.on('error',()=>process.exit(1));req.setTimeout(2000,()=>{req.destroy();process.exit(1);});\""
        ]
      interval: 5s
      timeout: 3s
      retries: 12
      start_period: 30s
    networks:
      - application-network

  backend-export-worker:
    depends_on:
      db:
        condition: service_healthy
      liquibase:
        condition: service_completed_successfully
      redis:
        condition: service_healthy
    environment:
      APP_ROLE: export-worker
      API_HOST: backend-export-worker
      JWT_SECRET: ${JWT_SECRET}
      GEOGEBRA_BUNDLE_DOWNLOAD_URL: ${GEOGEBRA_BUNDLE_DOWNLOAD_URL:-}
      EXPORT_CODING_LIST_BATCH_SIZE: ${EXPORT_CODING_LIST_BATCH_SIZE:-500}
      EXPORT_VERSIONED_BATCH_SIZE: ${EXPORT_VERSIONED_BATCH_SIZE:-250}
      POSTGRES_POOL_MAX: ${EXPORT_WORKER_POSTGRES_POOL_MAX:-4}
      JOB_QUEUE_PROCESSORS: data-export
      PGOPTIONS: ${EXPORT_WORKER_PGOPTIONS:--c jit=off}
      <<: [ *env-redis, *env-postgres, *env-keycloak, *env-auth-policy ]
    networks:
      - application-network

  frontend:
    depends_on:
      db:
        condition: service_healthy
      liquibase:
        condition: service_completed_successfully
      backend:
        condition: service_healthy
    networks:
      - application-network

volumes:
  db_vol:
  backend_vol:
  export_temp_vol:
  redis_data:

networks:
  application-network:
    name: app-net
    external: true