docker-compose.yml

# use v2.3 API to allow `mem_limit` option
version: "2.3"

services:
  consul:
    image: consul
    command: agent -server -bootstrap -ui
    hostname: consul-1
    environment:
      - CONSUL_BIND_INTERFACE=eth0
      - CONSUL_CLIENT_INTERFACE=eth0
    container_name: consul
    restart: unless-stopped
    volumes:
      - ./volumes/consul:/consul/data
    labels:
      - "SERVICE_IGNORE=yes"
    restart: unless-stopped

  registrator:
    image: gliderlabs/registrator
    command: -internal -cleanup -resync 30 -retry-attempts 5 -retry-interval 10 consul://consul:8500
    container_name: registrator
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock
    restart: unless-stopped
    depends_on:
      - consul

  nginx:
    image: gluufederation/nginx:3.1.2_dev
    environment:
      - GLUU_KV_HOST=consul
    ports:
      - "80:80"
      - "443:443"
    container_name: nginx
    depends_on:
      - oxauth
      - oxtrust
      - oxshibboleth
      - oxpassport
    restart: unless-stopped
    labels:
      - "SERVICE_IGNORE=yes"

  ldap:
    image: gluufederation/opendj:3.1.2_dev
    environment:
      - GLUU_KV_HOST=consul
      - GLUU_LDAP_INIT=true
      - GLUU_LDAP_INIT_HOST=ldap
      - GLUU_LDAP_INIT_PORT=1636
      - GLUU_LDAP_ADDR_INTERFACE=eth0
      - GLUU_OXTRUST_CONFIG_GENERATION=true
    container_name: ldap
    volumes:
      - ./volumes/opendj/config:/opt/opendj/config
      - ./volumes/opendj/ldif:/opt/opendj/ldif
      - ./volumes/opendj/logs:/opt/opendj/logs
      - ./volumes/opendj/db:/opt/opendj/db
      - ./volumes/opendj/flag:/flag
    restart: unless-stopped
    labels:
      - "SERVICE_IGNORE=yes"

  oxauth:
    image: gluufederation/oxauth:3.1.2_dev
    environment:
      - GLUU_KV_HOST=consul
      - GLUU_LDAP_URL=ldap:1636
    container_name: oxauth
    volumes:
      - ./volumes/oxauth/custom/pages:/opt/gluu/jetty/oxauth/custom/pages
      - ./volumes/oxauth/custom/static:/opt/gluu/jetty/oxauth/custom/static
      - ./volumes/oxauth/lib/ext:/opt/gluu/jetty/oxauth/lib/ext
      - ./volumes/oxauth/logs:/opt/gluu/jetty/oxauth/logs
    mem_limit: 1536M
    restart: unless-stopped
    labels:
      - "SERVICE_NAME=oxauth"
      - "SERVICE_8080_CHECK_HTTP=/oxauth/.well-known/openid-configuration"
      - "SERVICE_8080_CHECK_INTERVAL=15s"
      - "SERVICE_8080_CHECK_TIMEOUT=5s"

  oxtrust:
    image: gluufederation/oxtrust:3.1.2_dev
    environment:
      - GLUU_KV_HOST=consul
      - GLUU_LDAP_URL=ldap:1636
      - GLUU_OXAUTH_BACKEND=oxauth:8080
    extra_hosts:
      - "${DOMAIN}:${HOST_IP}"
    container_name: oxtrust
    volumes:
      - ./volumes/oxtrust/custom/pages:/opt/gluu/jetty/identity/custom/pages
      - ./volumes/oxtrust/custom/static:/opt/gluu/jetty/identity/custom/static
      - ./volumes/oxtrust/lib/ext:/opt/gluu/jetty/identity/lib/ext
      - ./volumes/oxtrust/logs:/opt/gluu/jetty/identity/logs
      - ./volumes/shared-shibboleth-idp:/opt/shared-shibboleth-idp
    mem_limit: 1536M
    restart: unless-stopped
    labels:
      - "SERVICE_NAME=oxtrust"
      - "SERVICE_8080_CHECK_HTTP=/identity/restv1/scim-configuration"
      - "SERVICE_8080_CHECK_INTERVAL=15s"
      - "SERVICE_8080_CHECK_TIMEOUT=5s"

  oxshibboleth:
    image: gluufederation/oxshibboleth:3.1.2_dev
    environment:
      - GLUU_KV_HOST=consul
      - GLUU_LDAP_URL=ldap:1636
    container_name: oxshibboleth
    volumes:
      - ./volumes/shared-shibboleth-idp:/opt/shared-shibboleth-idp
    mem_limit: 1024M
    restart: unless-stopped
    labels:
      - "SERVICE_NAME=oxshibboleth"
      - "SERVICE_8086_CHECK_HTTP=/idp"
      - "SERVICE_8086_CHECK_INTERVAL=15s"
      - "SERVICE_8086_CHECK_TIMEOUT=5s"

  oxpassport:
    image: gluufederation/oxpassport:3.1.2_dev
    environment:
      - GLUU_KV_HOST=consul
      - GLUU_LDAP_URL=ldap:1636
      # required by wait-for-it script
      - GLUU_OXAUTH_BACKEND=oxauth:8080
      - GLUU_OXTRUST_BACKEND=oxtrust:8080
    extra_hosts:
      - "${DOMAIN}:${HOST_IP}"
    container_name: oxpassport
    restart: unless-stopped
    labels:
      - "SERVICE_NAME=oxpassport"
      - "SERVICE_8090_CHECK_HTTP=/passport"
      - "SERVICE_8090_CHECK_INTERVAL=15s"
      - "SERVICE_8090_CHECK_TIMEOUT=5s"