docker-compose.yml

version: "3.9"
services:
  cris:
    image: "ghcr.io/heg-incipit/incipit-cris:main"
    ports: # Comment this section when deployed on a production server
      - "8000:8000" # If you want to see the CRIS via the port
    environment:
      # Username of the admin account of the CRIS
      username: "admin"
      # Password of the admin account of the CRIS
      password: "pw"
      # Credentials for ARKetype API
      username_ark: ""
      password_ark: ""
      shoulder: ""
      # Credentials for ORCID API
      client_id: ""
      client_secret: ""
      url_auth: ""
      redirect_uri: "https://localhost/orcid/"
    volumes:
      - db:/var/lib/mysql
      - fuseki:/app/fuseki/run/databases
      - media:/app/INCIPIT_CRIS/media
    deploy:
      placement:
        constraints:
          - node.role==manager
    labels:
          - "traefik.enable=true"
          - "traefik.http.routers.cris.rule=Host(`localhost`)" # Change url here
          - "traefik.docker.network=reverse_network"
          - "traefik.http.routers.cris.entrypoints=websecure"
          - "traefik.http.routers.cris.tls=true"
          - "traefik.http.routers.cris.tls.certresolver=myresolver"
          - "traefik.http.services.cris.loadbalancer.server.port=8000"

  reverse_proxy:
    image: traefik:latest
    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.watch=true"
      - "--providers.docker.exposedbydefault=true"
      - "--providers.docker.defaultrule=Host(`localhost`)" # Change url here
      - "--entrypoints.ssh.address=:22"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
      - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
      - "--certificatesresolvers.myresolver=true"
      - "--certificatesresolvers.myresolver.acme.httpchallenge=true"
      - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
    ports:
        - 80:80
        - 443:443
        #- 8080:8080 # To show Dashboard or not
    volumes:
        - /var/run/docker.sock:/var/run/docker.sock:ro # Share the host docker to allow Traefik to recognize other container
    deploy:
      placement:
        constraints:
          - node.role==manager

volumes:
  db:
  fuseki: