forked from egovernments/DIVOC
-
Notifications
You must be signed in to change notification settings - Fork 0
/
docker-compose.yml
330 lines (329 loc) · 11.6 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
version: "2.4"
services:
redis:
image: redis
ports:
- "6379:6379"
es:
image: docker.elastic.co/elasticsearch/elasticsearch:7.10.1
environment:
- discovery.type=single-node
- "ES_JAVA_OPTS=-Xms512m -Xmx512m"
ports:
- "9200:9200"
- "9300:9300"
healthcheck:
test: ["CMD", "curl", "-f", "localhost:9200/_cluster/health"]
interval: 30s
timeout: 10s
retries: 4
db:
image: postgres
ports:
- "5432:5432"
environment:
- POSTGRES_DB=registry
- POSTGRES_USER=postgres
- POSTGRES_PASSWORD=postgres
volumes:
- ./flagr_dump.sql:/docker-entrypoint-initdb.d/flagr_dump.sql
registry:
image: dockerhub/registry-es
environment:
- connectionInfo_uri=jdbc:postgresql://db:5432/registry
- connectionInfo_username=postgres
- connectionInfo_password=postgres
- elastic_search_connection_url=es:9200
- search_provider=io.opensaber.registry.service.ElasticSearchService
ports:
- "8081:8081"
depends_on:
es:
condition: service_healthy
db:
condition: service_started
keycloak:
image: dockerhub/keycloak
environment:
- DB_VENDOR=postgres
- DB_ADDR=db
- DB_PORT=5432
- DB_DATABASE=registry
- DB_USER=postgres
- DB_PASSWORD=postgres
- KEYCLOAK_USER=admin
- KEYCLOAK_PASSWORD=admin
# - ./keycloak-mobile-number-login-spi/themes:/opt/jboss/keycloak/themes/
healthcheck:
test:
["CMD-SHELL", "curl -f http://localhost:9990/ || exit 1"]
interval: 30s
timeout: 10s
retries: 5
ports:
- "8080:8080"
- "9990:9990"
depends_on:
db:
condition: service_started
flagr:
image: checkr/flagr
environment:
FLAGR_DB_DBDRIVER: postgres
FLAGR_DB_DBCONNECTIONSTR: postgres://postgres:postgres@db:5432/registry?sslmode=disable
HOST: 0.0.0.0
FLAGR_WEB_PREFIX: /config
ports:
- "18000:18000"
depends_on:
db:
condition: service_started
zookeeper:
image: confluentinc/cp-zookeeper:latest
ports:
- "2181:2181"
environment:
ZOOKEEPER_CLIENT_PORT: "2181"
ZOOKEEPER_TICK_TIME: "2000"
kafka:
image: confluentinc/cp-kafka:latest
depends_on:
zookeeper:
condition: service_started
ports:
- "9092:9092"
environment:
KAFKA_BROKER_ID: "1"
KAFKA_ZOOKEEPER_CONNECT: "zookeeper:2181"
KAFKA_ADVERTISED_LISTENERS: "INTERNAL://kafka:9092,OUTSIDE://localhost:9094"
KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: "INTERNAL:PLAINTEXT,OUTSIDE:PLAINTEXT"
KAFKA_INTER_BROKER_LISTENER_NAME: "INTERNAL"
KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: "1"
healthcheck:
test:
["CMD", "kafka-topics", "--list", "--zookeeper", "zookeeper:2181"]
interval: 30s
timeout: 10s
retries: 4
clickhouse-server:
image: yandex/clickhouse-server
ports:
- "8123:8123"
- "9000:9000"
vaccination_api:
image: dockerhub/vaccination_api
environment:
REGISTRY_URL: "http://registry:8081"
REGISTRY_WITH_ES_URL: "http://registry-es:8081"
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
KEYCLOAK_URL: "http://keycloak:8080/auth"
DB_HOST: db
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:8000"]
interval: 10s
timeout: 10s
retries: 10
ports:
- "8000:8000"
depends_on:
kafka:
condition: service_healthy
keycloak:
condition: service_healthy
portal_api:
image: dockerhub/portal_api
ports:
- "8001:8001"
environment:
REGISTRY_URL: "http://registry:8081"
REGISTRY_WITH_ES_URL: "http://registry-es:8081"
KEYCLOAK_URL: "http://keycloak:8080/auth"
CLICK_HOUSE_URL: tcp://clickhouse-server:9000?debug=true
ADMIN_API_CLIENT_SECRET: 20dc0bc2-1aa4-4ca3-9808-aabfc50b1d6c
DB_HOST: db
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
depends_on:
kafka:
condition: service_healthy
keycloak:
condition: service_healthy
registration_api:
image: dockerhub/registration_api
ports:
- "8002:8002"
environment:
REDIS_URL: redis://redis:6379
REGISTRY_URL: "http://registry:8081"
REGISTRY_WITH_ES_URL: "http://registry-es:8081"
KEYCLOAK_URL: "http://keycloak:8080/auth"
DB_HOST: db
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
# in min
CACHE_TTL: 60
AUTH_PRIVATE_KEY: |
-----BEGIN RSA PRIVATE KEY-----
MIIEpAIBAAKCAQEA1mIX9SFluySnfIfT6Jz5LdORWO+O0j3L7cF+BLaAdX7JuiN1
0MTISpyOA5z81YXMSgk0PPLUzHv5DTDPMR3rsb6ut/PweLn9sLmwsj9OGSAuH7DF
OHVV+Mct9TXBeZu1tzboDhtqKz1PMnBFdmgvd2+WnKYtdWfgo8kB82WkGolAT7++
efm/HnOkvRkoNbefbbpnELjtcM5uN32HdCpzTm87zshvOoEvkBUcBJdmKNjzLwBc
0E2SpthOuxQUw7zSSqnvOOW+sOub6dIgDgR557KyVGKL9NUvlbbp9jglcZERtpE6
pRhbjDwBlmzx8NufSap24VzWIUNjy+CiF0J6OQIDAQABAoIBAQDGeozZqvDngTj7
Bzm+m03rCnv/jdJ5fTMHTOOh82Ec5qRXC6tw/C6/PRAR8k72VGhdhwXxA5TWOFTM
zIqWW7AxoGtb7aGN9AwWiOQ5MnjYtD1fo6YD7kYJDEbVRc55CxsCo/fVz7XMkHd5
KA53YF/JwOr83rEpiGGm4VtH/6sd0JBLWZxIW1SEd7gPTOCNeRQku4xGXOARfNlC
l87FfqgZc4CeYh7c2OYwgjtShli2RMvcXKVQGI1BciTQQm2muLeoUU3P5Vn2NeGY
7WpbpjFQhN1nUIZq4cfN1QiNSTSIct0VXt6/qLZXLGOYLhkn9U/oDYOOYG1rY5xf
L0vumnrxAoGBAPJk0czb5gWbqd7AUEcfkVmRp3HZxHew6L+qmcfioiX+JTGHjW/f
OMgpipqXRJKmWZan+GT2MI5q36KIo7rcbwjXccA4DKw3JBukKHhS891iNqinwzX8
+ox2GH4bwYaHc35a9wIV4F8+IzcRRFiTgIW5bVs55ekgxqc7p2L3wb/dAoGBAOJq
w2HPddArOeI+S+YRYziKWoldJGwJFF9hILfsCWT2OCrVhiuBpRHvSJb3k1L6R0mn
gRGsss0HvpK6bUnWEAmNX9xEpll7g5kaWS1NSZMyvbOX6jTnoWE3jhdkXnQ1j8Uv
gxDB6zvtR60DTA9fCqPo09YeM4zcGLVySi+o/OwNAoGBAKUTNC4ns8ct88nXftRx
EzPElhxbCgnZWSjurjwKhBMLuZi5kAEYLDtkzxfo3LJix7BqRCe94eObtSGjnJ2t
cZC76KPXiAngo56PdWA8Xgfu0vqZBcDGwHrYEmYP0QQlSupKWN36uAsk7iaag8ku
6uAnH+p4y7Kwt5k8bwpfYHuhAoGAI3sTjxpRngOIGJomjrEe2VdlBK2h7YQmuyOf
WvMULcwf1SaM1fiFA6B5wZ6eaZxq23HyWfC0PEkAZkHsqmtvK/AJm5zubItcffuR
CfZYl0aWT7R4sT2zHmb0T1odKxzRoNbnNRMOZ9+xIb2oh6gfJLxxpdYpweMjxBta
4MkciWkCgYAOaBqc63WmPzFf0BDVlRPR4E5x2WjkNaNtMPNF0bj3rC7ZWVmXW6Ay
7tYqIxcu4KrP2MOFS0b2FL1KsBJlhUlvAfNEL5hn6IO73vl3OhhaJMNIBQ8NiJ/k
PbX9Cjh7u/BqNQmyROpFGHWbs4gjdQHeqY29CrmMaURZMo7U8g4b6w==
-----END RSA PRIVATE KEY-----
AUTH_PUBLIC_KEY: |
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mIX9SFluySnfIfT6Jz5
LdORWO+O0j3L7cF+BLaAdX7JuiN10MTISpyOA5z81YXMSgk0PPLUzHv5DTDPMR3r
sb6ut/PweLn9sLmwsj9OGSAuH7DFOHVV+Mct9TXBeZu1tzboDhtqKz1PMnBFdmgv
d2+WnKYtdWfgo8kB82WkGolAT7++efm/HnOkvRkoNbefbbpnELjtcM5uN32HdCpz
Tm87zshvOoEvkBUcBJdmKNjzLwBc0E2SpthOuxQUw7zSSqnvOOW+sOub6dIgDgR5
57KyVGKL9NUvlbbp9jglcZERtpE6pRhbjDwBlmzx8NufSap24VzWIUNjy+CiF0J6
OQIDAQAB
-----END PUBLIC KEY-----
depends_on:
kafka:
condition: service_healthy
keycloak:
condition: service_healthy
analytics_feed:
image: dockerhub/analytics_feed
environment:
CLICK_HOUSE_URL: tcp://clickhouse-server:9000?debug=true
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
depends_on:
clickhouse-server:
condition: service_started
certificate_processor:
image: dockerhub/certificate_processor
environment:
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
REGISTRY_URL: "http://registry:8081"
REGISTRY_WITH_ES_URL: "http://registry-es:8081"
KEYCLOAK_URL: "http://keycloak:8080/auth"
ADMIN_API_CLIENT_SECRET: 20dc0bc2-1aa4-4ca3-9808-aabfc50b1d6c
depends_on:
registry:
condition: service_started
certificate_signer:
image: dockerhub/certificate_signer
environment:
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
REGISTRY_URL: "http://registry:8081"
REGISTRY_WITH_ES_URL: "http://registry-es:8081"
REDIS_URL: redis://redis:6379
CERTIFICATE_NAMESPACE: "https://cowin.gov.in/credentials/vaccination/v1"
CERTIFICATE_CONTROLLER_ID: "https://cowin.gov.in/"
CERTIFICATE_PUBKEY_ID: "https://example.com/i/india"
CERTIFICATE_DID: "did:india"
CERTIFICATE_ISSUER: "https://cowin.gov.in/"
CERTIFICATE_BASE_URL: "https://cowin.gov.in/vaccine/"
CERTIFICATE_FEEDBACK_BASE_URL: "https://cowin.gov.in/?"
CERTIFICATE_INFO_BASE_URL: "https://cowin.gov.in/?"
depends_on:
kafka:
condition: service_healthy
test_certificate_signer:
image: dockerhub/test_certificate_signer
environment:
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
REGISTRY_URL: "http://registry:8081"
REGISTRY_WITH_ES_URL: "http://registry-es:8081"
REDIS_URL: redis://redis:6379
CERTIFICATE_NAMESPACE: "https://cowin.gov.in/credentials/testCertificate/v1"
CERTIFICATE_CONTROLLER_ID: "https://cowin.gov.in/"
CERTIFICATE_PUBKEY_ID: "https://example.com/i/india"
CERTIFICATE_DID: "did:india"
CERTIFICATE_ISSUER: "https://cowin.gov.in/"
CERTIFICATE_BASE_URL: "https://cowin.gov.in/test/"
CERTIFICATE_FEEDBACK_BASE_URL: "https://cowin.gov.in/?"
CERTIFICATE_INFO_BASE_URL: "https://cowin.gov.in/?"
depends_on:
kafka:
condition: service_healthy
nginx:
image: dockerhub/nginx
ports:
- "80:80"
depends_on:
vaccination_api:
condition: service_started
portal_api:
condition: service_started
registration_api:
condition: service_started
digilocker_support_api:
condition: service_started
notification-service:
image: dockerhub/notification-service
ports:
- "8765:8765"
environment:
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
SMS_AUTH_KEY: xxxx
SENDER_EMAIL: xxxx@mail.com
SENDER_PASSWORD: xxxx
depends_on:
kafka:
condition: service_healthy
digilocker_support_api:
image: dockerhub/digilocker_support_api
environment:
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
REGISTRY_URL: "http://registry:8081"
REGISTRY_WITH_ES_URL: "http://registry-es:8081"
DIGILOCKER_HMAC_AUTHKEY: "UPDATE_KEY_GIVEN_IN_DIGILOCKER"
KEYCLOAK_URL: "http://keycloak:8080/auth"
REGISTRATION_API_PUBLIC_KEY: |
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mIX9SFluySnfIfT6Jz5
LdORWO+O0j3L7cF+BLaAdX7JuiN10MTISpyOA5z81YXMSgk0PPLUzHv5DTDPMR3r
sb6ut/PweLn9sLmwsj9OGSAuH7DFOHVV+Mct9TXBeZu1tzboDhtqKz1PMnBFdmgv
d2+WnKYtdWfgo8kB82WkGolAT7++efm/HnOkvRkoNbefbbpnELjtcM5uN32HdCpz
Tm87zshvOoEvkBUcBJdmKNjzLwBc0E2SpthOuxQUw7zSSqnvOOW+sOub6dIgDgR5
57KyVGKL9NUvlbbp9jglcZERtpE6pRhbjDwBlmzx8NufSap24VzWIUNjy+CiF0J6
OQIDAQAB
-----END PUBLIC KEY-----
depends_on:
kafka:
condition: service_healthy
keycloak:
condition: service_healthy
certificate_api:
image: dockerhub/certificate_api
ports:
- "4321:4321"
environment:
KEYCLOAK_URL: "http://keycloak:8080/auth"
KAFKA_BOOTSTRAP_SERVERS: kafka:9092
REGISTRY_URL: "http://registry:8081"
AUTH_PUBLIC_KEY: |
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mIX9SFluySnfIfT6Jz5
LdORWO+O0j3L7cF+BLaAdX7JuiN10MTISpyOA5z81YXMSgk0PPLUzHv5DTDPMR3r
sb6ut/PweLn9sLmwsj9OGSAuH7DFOHVV+Mct9TXBeZu1tzboDhtqKz1PMnBFdmgv
d2+WnKYtdWfgo8kB82WkGolAT7++efm/HnOkvRkoNbefbbpnELjtcM5uN32HdCpz
Tm87zshvOoEvkBUcBJdmKNjzLwBc0E2SpthOuxQUw7zSSqnvOOW+sOub6dIgDgR5
57KyVGKL9NUvlbbp9jglcZERtpE6pRhbjDwBlmzx8NufSap24VzWIUNjy+CiF0J6
OQIDAQAB
-----END PUBLIC KEY-----
depends_on:
kafka:
condition: service_healthy