scripts/docker-compose.yml at main · fossa-app/scripts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
services:
  fusionauth-db:
    image: postgres:16.0-bookworm
    environment:
      PGDATA: /var/lib/postgresql/data/pgdata
      POSTGRES_USER: fusionauth
      POSTGRES_PASSWORD: fusionauth
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - fusionauth_db_net
    restart: unless-stopped
    volumes:
      - fusionauth_db_data:/var/lib/postgresql/data

  fusionauth:
    image: fusionauth/fusionauth-app:latest
    depends_on:
      fusionauth-db:
        condition: service_healthy
    environment:
      DATABASE_URL: jdbc:postgresql://fusionauth-db:5432/fusionauth
      DATABASE_ROOT_USERNAME: fusionauth
      DATABASE_ROOT_PASSWORD: fusionauth
      DATABASE_USERNAME: fusionauth
      DATABASE_PASSWORD: fusionauth
      FUSIONAUTH_APP_MEMORY: 512M
      FUSIONAUTH_APP_RUNTIME_MODE: development
      FUSIONAUTH_APP_URL: http://fusionauth:9011
      SEARCH_TYPE: database
      FUSIONAUTH_APP_KICKSTART_FILE: /usr/local/fusionauth/kickstart/kickstart.json
    healthcheck:
      test: curl --silent --fail http://localhost:9011/api/status -o /dev/null -w "%{http_code}"
      interval: 5s
      timeout: 5s
      retries: 5
    ports:
      - 9011:9011
    networks:
      - fusionauth_db_net
      - idp_net
      - app_net
    volumes:
      - fusionauth_config:/usr/local/fusionauth/config
      - ./kickstart:/usr/local/fusionauth/kickstart
    restart: unless-stopped

  ergo:
    image: tiksn/ergo:latest
    depends_on:
      fusionauth:
        condition: service_healthy
    environment:
      FUSIONAUTH_API_KEY: 047a124c-2dbc-4b68-84cc-55f9a204f4ea
      FUSIONAUTH_BASE_URL: http://fusionauth:9011/
    networks:
      - idp_net

  drool:
    image: tiksn/drool:latest
    depends_on:
      fusionauth:
        condition: service_healthy
    environment:
      TF_IN_AUTOMATION: "true"
      TF_INPUT: "0"
      TF_VAR_fusionauth_api_key: "047a124c-2dbc-4b68-84cc-55f9a204f4ea"
      TF_VAR_fusionauth_base_url: "http://fusionauth:9011"
      TF_VAR_fusionauth_cors_enabled: "true"
      TF_VAR_fusionauth_cors_allowed_origins: '["*"]'
      TF_VAR_fusionauth_cors_allowed_methods: '["GET", "POST", "OPTIONS"]'
      TF_VAR_fusionauth_cors_allowed_headers: '["*"]'
      TF_VAR_fusionauth_cors_exposed_headers: "[]"
      TF_VAR_fusionauth_cors_allow_credentials: "false"
      TF_VAR_fusionauth_cors_preflight_max_age_in_seconds: "0"
      TF_CLI_ARGS_apply: "-auto-approve"
    networks:
      - idp_net

  otel-collector:
    image: otel/opentelemetry-collector-contrib:latest
    environment:
      DD_API_KEY: ${DD_API_KEY}
      HONEYCOMB_API_KEY: ${HONEYCOMB_API_KEY}
      HONEYCOMB_DATASET: ${HONEYCOMB_DATASET}
      SENTRY_KEY: ${SENTRY_KEY}
    volumes:
      - ./otel-collector-config.yaml:/etc/otelcol-contrib/config.yaml
    ports:
      - 1888:1888 # pprof extension
      - 8888:8888 # Prometheus metrics exposed by the Collector
      - 8889:8889 # Prometheus exporter metrics
      - 13133:13133 # health_check extension
      - 4317:4317 # OTLP gRPC receiver
      - 4318:4318 # OTLP http receiver
      - 55679:55679 # zpages extension
    networks:
      - app_net
    restart: unless-stopped

  api:
    image: tiksn/fossa-api:latest
    depends_on:
      fusionauth:
        condition: service_healthy
      ergo:
        condition: service_completed_successfully
    environment:
      ASPNETCORE_ENVIRONMENT: ${ASPNETCORE_ENVIRONMENT}
      DOTNET_ENVIRONMENT: ${DOTNET_ENVIRONMENT}
      Identity__RootAddress: http://fusionauth:9011
      Identity__ApiKey: 047a124c-2dbc-4b68-84cc-55f9a204f4ea
      ConnectionStrings__MongoDB: ${ConnectionStrings__MongoDB}
      GeneratorId: ${GeneratorId}
      OTEL_EXPORTER_OTLP_ENDPOINT: http://otel-collector:4317
      Messaging__Topic: ${Messaging__Topic}
      Messaging__Actor__BootstrapServers__Key: ${Messaging__Actor__BootstrapServers__Key}
      Messaging__Actor__BootstrapServers__PlainTextValue: ${Messaging__Actor__BootstrapServers__PlainTextValue}
      Messaging__Actor__SecurityProtocol__Key: ${Messaging__Actor__SecurityProtocol__Key}
      Messaging__Actor__SecurityProtocol__PlainTextValue: ${Messaging__Actor__SecurityProtocol__PlainTextValue}
      Messaging__Actor__CACertificate__Key: ${Messaging__Actor__CACertificate__Key}
      Messaging__Actor__CACertificate__Base64Value: ${Messaging__Actor__CACertificate__Base64Value}
      Messaging__Actor__ClientCertificate__Key: ${Messaging__Actor__ClientCertificate__Key}
      Messaging__Actor__ClientCertificate__Base64Value: ${Messaging__Actor__ClientCertificate__Base64Value}
      Messaging__Actor__ClientCertificateKey__Key: ${Messaging__Actor__ClientCertificateKey__Key}
      Messaging__Actor__ClientCertificateKey__Base64Value: ${Messaging__Actor__ClientCertificateKey__Base64Value}
    ports:
      - 5210:8080
    networks:
      - app_net
    restart: unless-stopped

  ui:
    image: tiksn/fossa-ui:latest
    depends_on:
      api:
        condition: service_healthy
    ports:
      - 4210:3000
    networks:
      - app_net
    restart: unless-stopped

networks:
  fusionauth_db_net:
    driver: bridge
  idp_net:
    driver: bridge
  app_net:
    driver: bridge

volumes:
  fusionauth_db_data:
  fusionauth_config: