csaf_backend/docker-compose.test.yml at main · csaf-poc/csaf_backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
version: "3.8"
services:
    idp:
        image: jboss/keycloak:12.0.4
        container_name: csaf_idp
        restart: unless-stopped
        depends_on:
            - idp_db
        environment:
            DB_VENDOR: postgres
            DB_ADDR: csaf_idp_db
            DB_DATABASE: ${KEYCLOAK_DB:-csaf}
            DB_USER: ${KEYCLOAK_DB_USER}
            DB_PASSWORD: ${KEYCLOAK_DB_PASSWORD}
            KEYCLOAK_USER: ${KEYCLOAK_USER}
            KEYCLOAK_PASSWORD: ${KEYCLOAK_PASSWORD}
            KEYCLOAK_IMPORT: /tmp/csaf-realm.json
            OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
        ports:
            - ${KEYCLOAK_PORT:-8080}:8080
            - ${KEYCLOAK_PORT:-8443}:8443
        volumes:
            - ./idp/csaf-realm.json:/tmp/csaf-realm.tpl.json:ro
            - ./idp/startup.sh:/opt/jboss/startup-scripts/startup.sh:ro
        networks:
            - idp
            - idp_db
    idp_db:
        image: postgres:13.2-alpine
        container_name: csaf_idp_db
        restart: unless-stopped
        environment:
            POSTGRES_DB: ${KEYCLOAK_DB:-csaf}
            POSTGRES_USER: ${KEYCLOAK_DB_USER}
            POSTGRES_PASSWORD: ${KEYCLOAK_DB_PASSWORD}
        volumes:
            - idp_db_data:/var/lib/postgresql/data
        networks:
            - idp_db
    backend:
        build:
            context: .
            dockerfile: Dockerfile
        image: csaf_flask:0.0.1
        container_name: csaf_backend
        restart: unless-stopped
        depends_on:
            - idp
            - backend_db
        environment:
            APP_ENV: "prod"
            APP_DEBUG: "False"
            MONGODB_HOST: csaf_backend_db
            MONGODB_DB: ${MONGO_DB:-csaf_advisory_db}
            MONGODB_USERNAME: ${MONGO_USER}
            MONGODB_PASSWORD: ${MONGO_USER_PASSWORD}
            OIDC_ISSUER: ${OIDC_PROVIDER}/auth/realms/CSAF
            OIDC_AUTH_URI: ${OIDC_PROVIDER}/auth/realms/CSAF/protocol/openid-connect/auth
            OIDC_CLIENT_ID: ${OIDC_CLIENT_ID:-csaf-client}
            OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
            OIDC_REDIRECT_URIS: ${OIDC_REDIRECT_URIS:-*}
            OIDC_USERINFO_URI: ${OIDC_PROVIDER}/auth/realms/CSAF/protocol/openid-connect/userinfo
            OIDC_TOKEN_URI: ${OIDC_PROVIDER}/auth/realms/CSAF/protocol/openid-connect/token
            OIDC_TOKEN_INTROSPECTION_URI: ${OIDC_PROVIDER}/auth/realms/CSAF/protocol/openid-connect/token/introspect
        ports:
            - ${BACKEND_PORT:-5000}:5000
        volumes:
            - backend_data:/var/www
        networks:
            - idp
            - backend_db
    backend_db:
        image: mongo:4.4.2
        container_name: csaf_backend_db
        restart: unless-stopped
        command: mongod --auth
        environment:
            MONGO_INITDB_ROOT_USERNAME: ${MONGO_ROOT}
            MONGO_INITDB_ROOT_PASSWORD: ${MONGO_ROOT_PASSWORD}
            MONGO_INITDB_DATABASE: ${MONGO_DB:-csaf_advisory_db}
            MONGODB_USERNAME: ${MONGO_USER}
            MONGODB_PASSWORD: ${MONGO_USER_PASSWORD}
            MONGODB_DATA_DIR: /data/db
            MONGODB_LOG_DIR: /dev/null
        volumes:
            - ./db/startup.sh:/docker-entrypoint-initdb.d/startup.sh:ro
            - backend_db_data:/data/db
        networks:
            - backend_db
volumes:
    idp_db_data:
        driver: local
    backend_data:
        driver: local
    backend_db_data:
        driver: local
networks:
    idp:
        driver: bridge
    idp_db:
        driver: bridge
    backend_db:
        driver: bridge