services-base.yml

version: '2.3'

services:
  base-sormas:
    restart: unless-stopped
    image: hzibraunschweig/sormas-application:${SORMAS_DOCKER_VERSION}
    environment:
      - DB_JDBC_IDLE_TIMEOUT=${DB_JDBC_IDLE_TIMEOUT}
      - SORMAS_POSTGRES_USER=${SORMAS_POSTGRES_USER}
      - SORMAS_POSTGRES_PASSWORD=${SORMAS_POSTGRES_PASSWORD}
      - SORMAS_SERVER_URL=${SORMAS_SERVER_URL}
      - DB_HOST=${DB_HOST}
      - DOMAIN_NAME=${DOMAIN_NAME}
      - DB_NAME=${DB_NAME}
      - MAIL_HOST=${MAIL_HOST}
      - SMTP_PORT=${SMTP_PORT}
      - SMTP_USER=${SMTP_USER}
      - SMTP_PASSWORD=${SMTP_PASSWORD}
      - SMTP_STARTTLS=${SMTP_STARTTLS}
      - SMTP_SSL=${SMTP_SSL}
      - SMTP_ASYNC_SENDING=${SMTP_ASYNC_SENDING}
      - SMTP_AUTH_ENABLED=${SMTP_AUTH_ENABLED}
      - EMAIL_NOTIFICATION_ENABLED=${EMAIL_NOTIFICATION_ENABLED}
      - LOG_SENDER_ADDRESS=${LOG_SENDER_ADDRESS}
      - LOG_RECIPIENT_ADDRESS=${LOG_RECIPIENT_ADDRESS}
      - LOG_SUBJECT=${LOG_SUBJECT}
      - MAIL_FROM=${MAIL_FROM}
      - SORMAS_VERSION=${SORMAS_VERSION}
      - LOCALE=${LOCALE}
      - COUNTRY_NAME=${COUNTRY_NAME}
      - EPIDPREFIX=${EPIDPREFIX}
      - SEPARATOR=${SEPARATOR}
      - EMAIL_SENDER_ADDRESS=${EMAIL_SENDER_ADDRESS}
      - EMAIL_SENDER_NAME=${EMAIL_SENDER_NAME}
      - LATITUDE=${LATITUDE}
      - LONGITUDE=${LONGITUDE}
      - MAP_ZOOM=${MAP_ZOOM}
      - TZ=${TZ}
      - JVM_MAX=${APPSERVER_JVM_MAX}
      - GEO_UUID=${GEO_UUID}
      - DEVMODE=${DEVMODE}
      - JSON_LOGGING=${JSON_LOGGING}
      - GEO_TEMPLATE=${GEO_TEMPLATE}
      - GEO_LONG_TEMPLATE=${GEO_LONG_TEMPLATE}
      - GEO_LAT_TEMPLATE=${GEO_LAT_TEMPLATE}
      - CREATE_DEFAULT_ENTITIES=${CREATE_DEFAULT_ENTITIES}
      - AS_ADMIN_NEWPASSWORD=${AS_ADMIN_NEWPASSWORD}
      - DC_EXCLUDE_ARCHIVED_PERSON_ENTRIES=${DC_EXCLUDE_ARCHIVED_PERSON_ENTRIES}
      - MAP_USECOUNTRYCENTER=${MAP_USECOUNTRYCENTER}
      - FEATURE_AUTOMATICCASECLASSIFICATION=${FEATURE_AUTOMATICCASECLASSIFICATION}      
      - GLOWROOT_ENABLED=${GLOWROOT_ENABLED}
      - PD_TOKENLIFETIME=${PD_TOKENLIFETIME}
      - MAP_TILES_URL=${MAP_TILES_URL}
      - MAP_TILES_ATTRIBUTION=${MAP_TILES_ATTRIBUTION}
      - ALLOWED_FILE_EXTENSIONS=${ALLOWED_FILE_EXTENSIONS}
    mem_limit: ${APPSERVER_MEM}
    mem_reservation: ${APPSERVER_MEM_RESERVED}
    ports:
      - "4000:4000"

  base-postgres:
    restart: unless-stopped
    labels:
      - autoheal=true
    command: -c 'config_file=/etc/postgresql/postgresql.conf'
    image: hzibraunschweig/sormas-postgres:${SORMAS_DOCKER_VERSION}
    environment:
      - POSTGRES_PASSWORD=${SORMAS_POSTGRES_PASSWORD}
      - DB_NAME=${DB_NAME}
      - SORMAS_POSTGRES_PASSWORD=${SORMAS_POSTGRES_PASSWORD}
      - SORMAS_POSTGRES_USER=${SORMAS_POSTGRES_USER}
      - TZ=${TZ}
    mem_limit: ${DB_MEM}
    mem_reservation: ${DB_MEM_RESERVED}
    healthcheck:
      test: ["CMD", "psql", "-U", "${SORMAS_POSTGRES_USER}", "-c", "SELECT 1;", "${DB_NAME}"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 30s

  base-keycloak-postgres:
    restart: unless-stopped
    labels:
      - autoheal=true
    command: -c 'config_file=/etc/postgresql/postgresql.conf'
    image: hzibraunschweig/keycloak-postgres:${SORMAS_DOCKER_VERSION}
    environment:
      - POSTGRES_PASSWORD=${KEYCLOAK_DB_PASSWORD}
      - POSTGRES_USER=${KEYCLOAK_DB_USER}
      - POSTGRES_DB=${KEYCLOAK_DB_NAME}
      - TZ=${TZ}
    cpus: ${KEYCLOAK_DB_CPUS}
    mem_limit: ${KEYCLOAK_DB_MEM}
    mem_reservation: ${KEYCLOAK_DB_MEM_RESERVED}
    healthcheck:
      test: [ "CMD", "psql", "-U", "${KEYCLOAK_DB_USER}", "-c", "SELECT 1;", "${KEYCLOAK_DB_NAME}" ]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 30s

  base-pg_dump:
    restart: unless-stopped
    image: hzibraunschweig/sormas-pg-dump:${SORMAS_DOCKER_VERSION}
    environment:
      - TZ=${TZ}
    cpus: ${DB_DUMP_CPUS}
    mem_limit: ${DB_DUMP_MEM}
    mem_reservation: ${DB_DUMP_MEM_RESERVED}

  base-apache2:
    restart: unless-stopped
    labels:
      - autoheal=true
    image: hzibraunschweig/sormas-apache2:${SORMAS_DOCKER_VERSION}
    environment:
      - SORMAS_SERVER_URL=${SORMAS_SERVER_URL}
      - TZ=${TZ}
    cpus: ${WEBSERVER_CPUS}
    mem_limit: ${WEBSERVER_MEM}
    mem_reservation: ${WEBSERVER_MEM_RESERVED}
    healthcheck:
      test: ["CMD", "curl", "-f", "-I", "-k", "--resolve", "${SORMAS_SERVER_URL}:443:127.0.0.1", "https://${SORMAS_SERVER_URL}/downloads/"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 30s

  base-autoheal:
    restart: unless-stopped
    image: willfarrell/autoheal:1.0.0
    environment:
        # watch all running containers.
      - AUTOHEAL_CONTAINER_LABEL=all
        # check every 10 seconds
      - AUTOHEAL_INTERVAL=10
        # Docker waits max 10 seconds (the Docker default) for a container to stop before killing
      - AUTOHEAL_DEFAULT_STOP_TIMEOUT=10
        # Unix socket for curl requests to Docker API
      - DOCKER_SOCK=/var/run/docker.sock
        # --max-time seconds for curl requests to Docker API
      - CURL_TIMEOUT=30

  base-letsencrypt:
    restart: unless-stopped
    image: hzibraunschweig/sormas-letsencrypt:${SORMAS_DOCKER_VERSION}
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=${TZ}
      - URL=${SORMAS_SERVER_URL}
      - EMAIL=${LETSENCRYPT_MAIL}
      - DISABLE_CERTBOT=${DISABLE_CERTBOT}
      - PROMETHEUS_SERVERS=${PROMETHEUS_SERVERS}
    volumes:
      - /var/lib/docker/letsencrypt-config:/config
      - ./letsencrypt/certs:/config/etc/letsencrypt/live
    ports:
      - 443:443
      - 80:80
    cpus: ${WEBSERVER_CPUS}
    mem_limit: ${WEBSERVER_MEM}
    mem_reservation: ${WEBSERVER_MEM_RESERVED}

  base-keycloak:
    restart: unless-stopped
    labels:
      - autoheal=true
    build:
      context: keycloak
      args:
        - SORMAS_URL=${SORMAS_URL}
        - SORMAS_VERSION=${SORMAS_VERSION}
    environment:
      - KC_HOSTNAME=${SORMAS_SERVER_URL}
      - KEYCLOAK_ADMIN=${KEYCLOAK_ADMIN_USER}
      - KEYCLOAK_ADMIN_PASSWORD=${KEYCLOAK_ADMIN_PASSWORD}
      - KC_DB_URL_HOST=${KEYCLOAK_DB_HOST}
      - KC_DB_USERNAME=${KEYCLOAK_DB_USER}
      - KC_DB_PASSWORD=${KEYCLOAK_DB_PASSWORD}
      - PROXY_ADDRESS_FORWARDING=true
      - SORMAS_SERVER_URL=${SORMAS_SERVER_URL}
      - KEYCLOAK_SORMAS_UI_SECRET=${KEYCLOAK_SORMAS_UI_SECRET}
      - KEYCLOAK_SORMAS_REST_SECRET=${KEYCLOAK_SORMAS_REST_SECRET}
      - KEYCLOAK_SORMAS_BACKEND_SECRET=${KEYCLOAK_SORMAS_BACKEND_SECRET}
    cpus: ${KEYCLOAK_CPUS}
    mem_limit: ${KEYCLOAK_MEM}
    mem_reservation: ${KEYCLOAK_MEM_RESERVED}
    healthcheck:
      test: ["CMD", "/opt/keycloak/bin/kcadm.sh", "config", "credentials", "--server", "http://localhost:8080/keycloak", "--realm", "master", "--user", "${KEYCLOAK_ADMIN_USER}", "--password", "${KEYCLOAK_ADMIN_PASSWORD}"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 300s