docker-compose.yml

version: '3.7'

networks:
  external:
  internal:
  vault:

services:
  inbox:
    hostname: inbox
    depends_on:
      - mq
    container_name: inbox
    networks:
      - external
      - internal
    environment:
      CEGA_ENDPOINT: ${CEGA_ENDPOINT:-http://cega:8080}
      CEGA_ENDPOINT_CREDS: ${CEGA_ENDPOINT_CREDS:?set CEGA_ENDPOINT_CREDS in deploy/docker/.env}
      MQ_CONNECTION: amqp://${MQ_USER:?set MQ_USER in deploy/docker/.env}:${MQ_PASSWORD:?set MQ_PASSWORD in deploy/docker/.env}@mq:5672/%2F
      MQ_EXCHANGE: ${MQ_EXCHANGE:-cega}
      MQ_ROUTING_KEY: ${MQ_ROUTING_KEY:-files.inbox}
      MQ_VERIFY_PEER: ${MQ_VERIFY_PEER:-no}
      MQ_VERIFY_HOSTNAME: ${MQ_VERIFY_HOSTNAME:-no}
      AUTH_VERIFY_PEER: ${AUTH_VERIFY_PEER:-no}
      AUTH_VERIFY_HOSTNAME: ${AUTH_VERIFY_HOSTNAME:-no}
      EGA_SSH_BANNER: ${EGA_SSH_BANNER:-Affiliated EGA ciber-isciii}
    ports:
      - "${INBOX_PORT:-8086}:9000"
    image: crg/fega-inbox:latest
    build: ../../src/inbox
    volumes:
      - ${LOCALEGA_DATA_BASE:-/impact_data/lega_data/lega}/inbox:/ega/inbox
      - ${LOCALEGA_LOG_DIR:-/var/log/local/localega/app}/inbox:/var/log/local/localega/app
      - ./inbox-entrypoint.sh:/usr/local/bin/entrypoint.sh:ro

  mq:
    hostname: mq
    environment:
      AFFILIATE_NAME: ${AFFILIATE_NAME:-isciii-ciber}
      MQ_USER: ${MQ_USER:?set MQ_USER in deploy/docker/.env}
      MQ_PASSWORD_HASH: ${MQ_PASSWORD_HASH:?set MQ_PASSWORD_HASH in deploy/docker/.env}
      CEGA_CONNECTION: ${CEGA_CONNECTION:?set CEGA_CONNECTION in deploy/docker/.env}
    ports:
      - "${MQ_MANAGEMENT_PORT:-15672}:15672"
    image: rabbitmq:3.11.10-management-alpine
    container_name: mq
    networks:
      - internal
    volumes:
      - ../../src/mq/entrypoint.sh:/usr/local/bin/ega-entrypoint.sh:ro
      - ${LOCALEGA_LOG_DIR:-/var/log/local/localega/app}/mq:/var/log/local/localega/app
    entrypoint: ['/usr/local/bin/ega-entrypoint.sh']
    command: 'rabbitmq-server'

  handler:
    depends_on:
      - mq
    hostname: handler
    image: fega/handler:latest
    build:
      context: ../../src/handler
      args:
        LEGA_UID: ${LEGA_UID:-1000}
        LEGA_GID: ${LEGA_GID:-1000}
    container_name: handler
    group_add:
      - "${INBOX_GID:-1000}"
    env_file:
      - .env
    environment:
      LEGA_LOG: ${LEGA_LOG:-debug}
      LEGA_MQ_CONNECTION: amqp://${MQ_USER:?set MQ_USER in deploy/docker/.env}:${MQ_PASSWORD:?set MQ_PASSWORD in deploy/docker/.env}@mq:5672/%2F
      LEGA_DB_CONNECTION: postgres://lega:${LEGA_DB_PASSWORD:?set LEGA_DB_PASSWORD in deploy/docker/.env}@vault-db:5432/ega?application_name=LocalEGA
    volumes:
      - ./lega.ini:/etc/ega/lega.ini:ro
      - ./service.key:/etc/ega/service.seckey:ro
      - ./master.key.pub:/etc/ega/master.pubkey:ro
      - ${LOCALEGA_DATA_BASE:-/impact_data/lega_data/lega}/inbox:/ega/inbox
      - ${LOCALEGA_DATA_BASE:-/impact_data/lega_data/lega}/staging:/ega/staging
      - ${LOCALEGA_DATA_BASE:-/impact_data/lega_data/lega}/vault:/ega/vault
      - ${LOCALEGA_LOG_DIR:-/var/log/local/localega/app}/handler:/var/log/local/localega/app
    networks:
      - internal
      - vault
    command: "/etc/ega/lega.ini"

  inbox-cleaner:
    depends_on:
      - vault-db
    hostname: inbox-cleaner
    image: fega/handler:latest
    container_name: inbox-cleaner
    group_add:
      - "${INBOX_GID:-1000}"
    env_file:
      - .env
    environment:
      LEGA_LOG: ${LEGA_LOG:-debug}
      LEGA_DB_CONNECTION: postgres://lega:${LEGA_DB_PASSWORD:?set LEGA_DB_PASSWORD in deploy/docker/.env}@vault-db:5432/ega?application_name=LocalEGAInboxCleaner
      INBOX_RETENTION_DAYS: ${INBOX_RETENTION_DAYS:-90}
      INBOX_CLEANUP_DRY_RUN: ${INBOX_CLEANUP_DRY_RUN:-true}
      INBOX_CLEANUP_INTERVAL_HOURS: ${INBOX_CLEANUP_INTERVAL_HOURS:-24}
      INBOX_CLEANUP_BATCH_SIZE: ${INBOX_CLEANUP_BATCH_SIZE:-1000}
      INBOX_CLEANUP_LOG_FILE: /var/log/local/localega/app/cleanup.log
    volumes:
      - ./lega.ini:/etc/ega/lega.ini:ro
      - ${LOCALEGA_DATA_BASE:-/impact_data/lega_data/lega}/inbox:/ega/inbox
      - ${LOCALEGA_DATA_BASE:-/impact_data/lega_data/lega}/vault:/ega/vault:ro
      - ${LOCALEGA_LOG_DIR:-/var/log/local/localega/app}/inbox-cleaner:/var/log/local/localega/app
    networks:
      - vault
    entrypoint: ["python", "-m", "code.cleanup"]
    command: ["/etc/ega/lega.ini"]
    restart: unless-stopped

  vault-db:
    hostname: vault
    image: localega/vault-db:latest
    build: ../../src/vault
    container_name: vault-db
    environment:
      PGDATA: /ega/data
    volumes:
      - ${LOCALEGA_DATA_BASE:-/impact_data/lega_data/lega}/vault-db:/ega/data
      - ./pg.conf:/etc/ega/pg.conf:ro
      - ./pg_hba.conf:/etc/ega/pg_hba.conf:ro
      - ${LOCALEGA_BIND_BASE:-/srv/containers/bind/localega}/etc/nss:/etc/ega/nss
      - ${LOCALEGA_BIND_BASE:-/srv/containers/bind/localega}/etc/authorized_keys:/etc/ega/authorized_keys
      - ${LOCALEGA_BIND_BASE:-/srv/containers/bind/localega}/sqlite-boxes:/sqlite-boxes
      - ${LOCALEGA_LOG_DIR:-/var/log/local/localega/app}/vault-db:/var/log/local/localega/app
    networks:
      - vault
    user: postgres
    ports:
      - "${VAULT_DB_PORT:-5432}:5432"
    entrypoint: ['postgres', '-c', 'config_file=/etc/ega/pg.conf']

  cega-mq:
    hostname: cega-mq
    ports:
      - "${CEGA_MQ_MANAGEMENT_PORT:-15670}:15672"
    image: rabbitmq:3.11.10-management-alpine
    container_name: cega-mq
    networks:
      - internal
    volumes:
      - ./cega/mq/definitions.json:/etc/rabbitmq/definitions.json:ro
      - ./cega/mq/rabbitmq.conf:/etc/rabbitmq/rabbitmq.conf:ro
      - ${LOCALEGA_LOG_DIR:-/var/log/local/localega/app}/cega-mq:/var/log/local/localega/app

  cega:
    depends_on:
      - cega-mq
    hostname: cega
    ports:
      - "${CEGA_PORT:-8080}:8080"
    image: cega
    build: ./cega
    container_name: cega
    networks:
      - internal
    environment:
      EGAF_COUNTER_START: ${EGAF_COUNTER_START:-0}
    volumes:
      - ./cega/users/users.json:/ega/users.json:ro
      - ${LOCALEGA_LOG_DIR:-/var/log/local/localega/app}/cega:/var/log/local/localega/app
    entrypoint: ['python', '-m', 'server']
    command: '-d -f 1 amqp://${CEGA_MQ_USER:?set CEGA_MQ_USER in deploy/docker/.env}:${CEGA_MQ_PASSWORD:?set CEGA_MQ_PASSWORD in deploy/docker/.env}@cega-mq:5672/%2F'