docker-compose.yml

# No service publishes a host port. The tests reach every service by its
# compose service name over the project's private network (the browser in the
# selenium container hits http://nginx:80, the creator container reaches
# http://selenium:4444/wd/hub, and so on), so nothing needs a host port. Not
# publishing means several test runs - in this repo or in sibling repos - can
# run at once without fighting over the same host ports (eg 80, 4444). The demo
# overlay (docker-compose.demo.yml) publishes the few ports the demo needs.

services:

  # The browser tests drive Firefox in the selenium container, which loads the
  # app through this nginx - the same image production runs, so the tests
  # exercise the real routing rather than a stub kept in step with it by hand.
  # The /creator/ rate limit is turned up for the test run: several pages load
  # in quick succession, each pulling html plus app.css and app.js through that
  # zone, which is sized for a human at a keyboard. Every other zone keeps its
  # production value, and nginx's own tests assert them.
  nginx:
    image: ${CYBER_DOJO_NGINX_IMAGE}:${CYBER_DOJO_NGINX_TAG}
    platform: linux/amd64
    user: root
    init: true
    environment:
      # Passed through only when the caller sets it, which the browser-test
      # run does (see bin/containers_up_healthy_and_clean.sh). Unset - as in
      # the demo - nginx uses the production value baked into its image, so
      # nothing here can silently disable a rate limit.
      - CYBER_DOJO_CREATOR_CHOOSE_RATE
    depends_on:
      - creator
    restart: "no"

  # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

  creator:
    build:
      args: [ COMMIT_SHA ]
      context: .
    image: ${CYBER_DOJO_CREATOR_IMAGE}:${CYBER_DOJO_CREATOR_TAG}
    platform: linux/amd64
    env_file: [ .env ]
    user: ${CYBER_DOJO_CREATOR_SERVER_USER}
    depends_on:
      - custom-start-points
      - exercises-start-points
      - languages-start-points
      - runner
      - saver
    read_only: true
    restart: "no"
    volumes:
      - "./source/server:/app/source/:ro"
      - "./test:/app/test/:ro"
      - type: tmpfs
        target: /tmp
        tmpfs:
          mode: 01777
          size: 10485760  # 10MB

  custom-start-points:
    image: ${CYBER_DOJO_CUSTOM_START_POINTS_IMAGE}:${CYBER_DOJO_CUSTOM_START_POINTS_TAG}
    platform: linux/amd64
    user: nobody
    env_file: [ .env ]
    read_only: true
    restart: "no"
    volumes:
      - type: tmpfs
        target: /tmp
        tmpfs:
          mode: 01777
          size: 10485760  # 10MB

  exercises-start-points:
    image: ${CYBER_DOJO_EXERCISES_START_POINTS_IMAGE}:${CYBER_DOJO_EXERCISES_START_POINTS_TAG}
    platform: linux/amd64
    user: nobody
    env_file: [ .env ]
    read_only: true
    restart: "no"
    volumes:
      - type: tmpfs
        target: /tmp
        tmpfs:
          mode: 01777
          size: 10485760  # 10MB

  languages-start-points:
    image: ${CYBER_DOJO_LANGUAGES_START_POINTS_IMAGE}:${CYBER_DOJO_LANGUAGES_START_POINTS_TAG}
    platform: linux/amd64
    user: nobody
    env_file: [ .env ]
    read_only: true
    restart: "no"
    volumes:
      - type: tmpfs
        target: /tmp
        tmpfs:
          mode: 01777
          size: 10485760  # 10MB

  runner:
    image: ${CYBER_DOJO_RUNNER_IMAGE}:${CYBER_DOJO_RUNNER_TAG}
    platform: linux/amd64
    user: root
    env_file: [ .env ]
    read_only: true
    restart: "no"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - type: tmpfs
        target: /tmp
        tmpfs:
          mode: 01777
          size: 10485760  # 10MB

  saver:
    image: ${CYBER_DOJO_SAVER_IMAGE}:${CYBER_DOJO_SAVER_TAG}
    platform: linux/amd64
    user: saver
    env_file: [ .env ]
    init: true
    read_only: true
    restart: "no"
    tmpfs:
      - /cyber-dojo:uid=19663,gid=65533
      - /tmp:uid=19663,gid=65533

  selenium:
    image: selenium/standalone-firefox
    platform: linux/amd64