docker-compose.yml

volumes:
  authup:
  mysql:
  backend-data:

services:
  mysql:
    image: ${MYSQL_IMAGE:-mysql}:latest
    pull_policy: ${PULL_POLICY:-always}
    restart: unless-stopped
    healthcheck:
      test: [ "CMD", "mysqladmin" ,"ping", "-h", "localhost" ]
      interval: 3s
      timeout: 5s
      retries: 5
    environment:
      MYSQL_ROOT_HOST: "%"
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-start123}
    volumes:
      - mysql:/var/lib/mysql
    networks:
      dnpm:

  authup:
    image: ${AUTHUP_IMAGE:-authup/authup}:latest
    pull_policy: ${PULL_POLICY:-always}
    restart: unless-stopped
    volumes:
      - authup:/usr/src/app/writable
    depends_on:
      mysql:
        condition: service_healthy
    command: server/core start
    environment:
      - PUBLIC_URL=${BASE_URL}/auth/
      - AUTHORIZE_REDIRECT_URL=${BASE_URL}
      - ROBOT_ADMIN_ENABLED=true
      - ROBOT_ADMIN_SECRET=${AUTHUP_SECRET:-start123}
      - ROBOT_ADMIN_SECRET_RESET=true
      - DB_TYPE=mysql
      - DB_HOST=mysql
      - DB_USERNAME=root
      - DB_PASSWORD=${MYSQL_ROOT_PASSWORD:-start123}
      - DB_DATABASE=auth
    networks:
      dnpm:

  portal:
    image: ${PORTAL_IMAGE:-ghcr.io/dnpm-dip/portal}:${PORTAL_IMAGE_TAG:-latest}
    pull_policy: ${PULL_POLICY:-always}
    restart: unless-stopped
    environment:
      - NUXT_API_URL=http://backend:9000/
      - NUXT_PUBLIC_API_URL=${BASE_URL}/api/
      - NUXT_AUTHUP_URL=http://authup:3000/
      - NUXT_PUBLIC_AUTHUP_URL=${BASE_URL}/auth/
    networks:
      dnpm:

  backend:
    image: ${BACKEND_IMAGE:-ghcr.io/dnpm-dip/backend}:${BACKEND_IMAGE_TAG:-latest}
    pull_policy: ${PULL_POLICY:-always}
    restart: unless-stopped
    environment:
      - LOCAL_SITE=${BACKEND_LOCAL_SITE}   # Format: {Site-ID}:{Site-name}, e.g. UKT:Tübingen
      - RD_RANDOM_DATA=${BACKEND_RD_RANDOM_DATA:--1}
      - MTB_RANDOM_DATA=${BACKEND_MTB_RANDOM_DATA:--1}
      - HATEOAS_HOST=${BASE_URL}
      - CONNECTOR_TYPE=${BACKEND_CONNECTOR_TYPE:-broker}
      - AUTHUP_URL=robot://system:${AUTHUP_SECRET:-start123}@http://authup:3000
    volumes:
      - './backend-config:/dnpm_config'
      - backend-data:/dnpm_data
    depends_on:
      authup:
        condition: service_healthy
    networks:
      dnpm:

  nginx:
    image: ${NGINX_IMAGE:-nginxproxy/nginx-proxy}:alpine
    ports:
      - ${HTTPS_PORT:-443}:443
      - ${HTTP_PORT:-80}:80
    volumes:
      - '/var/run/docker.sock:/tmp/docker.sock:ro'
      - './certs:/etc/ssl/certs'
      - './nginx/nginx.conf:/etc/nginx/nginx.conf'
      - './nginx/sites-enabled:/etc/nginx/sites-enabled'
    depends_on:
      authup:
        condition: service_healthy
      backend:
        condition: service_healthy
    networks:
      dnpm:

networks:
  dnpm:
    driver: bridge
    driver_opts:
      com.docker.network.bridge.name: ${NETWORK_NAME:-dnpm}
    ipam:
      driver: default
      config:
        - subnet: ${NETWORK_SUBNET:-172.50.1.0/24}