local.yml

version: '3'

volumes:
  colander_local_postgres_data: { }
  colander_local_postgres_data_backups: { }
  colander_local_minio_data: { }
  colander_local_es_data: { }

services:
#  traefik:
#    image: traefik:v2.9.8
#    command:
#      - "--log.level=DEBUG"
#      - "--api.insecure=true"
#      - "--providers.docker=true"
#      - "--providers.docker.exposedbydefault=false"
#      - "--entrypoints.web.address=:80"
#    depends_on:
#      - django
#      - cyberchef
#      - keycloak
#    restart: unless-stopped
#    ports:
#      - "88:80"
#      - "8088:8080" # The Web UI (enabled by --api)
#    volumes:
#      - /var/run/docker.sock:/var/run/docker.sock

  django: &django
    build:
      context: .
      dockerfile: ./compose/local/django/Dockerfile
    image: colander_local_django
    container_name: colander_local_django
    # special case for docker build toolchain
    # platform: linux/x86_64
    depends_on:
      - postgres
      - minio
      - elasticsearch
      - redis
      - playwright
      - cyberchef
    volumes:
      - .:/app:z
    env_file:
      - ./.envs/.local/.django
      - ./.envs/.local/.postgres
    ports:
      - "8000:8000"
    command: /start

  worker:
    <<: *django
    build:
      context: .
      dockerfile: ./compose/local/django/Dockerfile
    image: colander_local_worker
    container_name: colander_local_worker
    # special case for docker build toolchain
    # platform: linux/x86_64
    depends_on:
      - postgres
      - minio
      - playwright
      - elasticsearch
      - redis
    volumes:
      - .:/app:z
    env_file:
      - ./.envs/.local/.django
      - ./.envs/.local/.postgres
    command: /start-worker
    ports: [ ]

  redis:
    image: redis:6

  postgres:
    build:
      context: .
      dockerfile: ./compose/production/postgres/Dockerfile
    image: colander_production_postgres
    container_name: colander_local_postgres
    volumes:
      - colander_local_postgres_data:/var/lib/postgresql/data:Z
      - colander_local_postgres_data_backups:/backups:z
    env_file:
      - ./.envs/.local/.postgres

  minio:
    image: quay.io/minio/minio:RELEASE.2022-09-22T18-57-27Z
    volumes:
      - colander_local_minio_data:/data
    env_file:
      - ./.envs/.local/.django
    command: server /data
    healthcheck:
      test: [ "CMD", "curl", "-f", "http://localhost:9000/minio/health/live" ]
      interval: 30s
      timeout: 20s
      retries: 3

  cyberchef:
    image: mpepping/cyberchef:latest
    container_name: colander_local_cyberchef
    ports:
      - 8001:8000
    restart: unless-stopped

  playwright:
    image: ghcr.io/piroguetoolsuite/playwright-rest-api:main
    container_name: colander_local_playwright
    restart: unless-stopped

  elasticsearch:
    image: elasticsearch:8.4.1
    ports:
      - 9200:9200
      - 9300:9300
    volumes:
      - colander_local_es_data:/usr/share/elasticsearch/data
    environment:
      - discovery.type='single-node'
      - xpack.security.enabled='false'
      - "ES_JAVA_OPTS=-Xms1024m -Xmx1024m"

#  keycloak-db:
#    build:
#      context: .
#      dockerfile: ./compose/production/postgres/Dockerfile
#    image: colander_production_postgres
#    container_name: colander_local_keycloak_db
#    environment:
#      - POSTGRES_DB=keycloakdb
#      - POSTGRES_USER=hhGArHWVrVQjuDcgBUNNlQqZNfqyNPfQ
#      - POSTGRES_PASSWORD=vW9WtXmFWpsq5tATgcYNAi62cC1tWar1BsSrksBodMrra2bv4NHVvRyIm9k29Ro9
#
#  keycloak:
##    https://hub.docker.com/r/bitnami/keycloak
#    image: bitnami/keycloak:20.0.5
#    env_file:
#      - ./.envs/.local/.keycloak
#    healthcheck:
#      test: ["CMD", "curl", "-f", "http://localhost:8080/"]
#      interval: 10s
#      timeout: 5s
#      retries: 3
#    depends_on:
#      - keycloak-db
#    ports:
#      - 8003:8080
#    labels:
#      - "traefik.enable=true"
#      - "traefik.http.routers.keycloak.rule=Host(`auth.radis`)"
#      - "traefik.http.routers.keycloak.service=keycloak"
#      - "traefik.http.routers.keycloak.entrypoints=web"
#      - "traefik.http.services.keycloak.loadbalancer.server.port=8080"
#      - "traefik.http.services.keycloak.loadbalancer.passhostheader=true"
#      - "traefik.http.routers.keycloak.middlewares=compresstraefik"
#      - "traefik.http.middlewares.compresstraefik.compress=true"
#    restart: unless-stopped

  kibana:
    image: kibana:8.4.1
    depends_on:
      - elasticsearch
    ports:
      - 5601:5601


#  traefik-forward-auth:
#    image: thomseddon/traefik-forward-auth:2
#    networks:
#      - web
#    depends_on:
#      - keycloak
#    environment:
#      - DEFAULT_PROVIDER=oidc
#      - PROVIDERS_OIDC_CLIENT_ID=colander
#      - PROVIDERS_OIDC_CLIENT_SECRET=aJnfi6xIsvaxm6SEDehKoP7GBt4FADyj
#      - SECRET=dfge45te34teyhga3eq4yt4y
#      - INSECURE_COOKIE=true # Example assumes no https, do not use in production
#      - COOKIE_DOMAIN=radis
#      - PROVIDERS_OIDC_ISSUER_URL=http://auth.radis:88/realms/Colander
#      - LOG_LEVEL=debug
#    labels:
#      - "traefik.enable=true"
#      - "traefik.docker.network=web"
#      - "traefik.http.middlewares.traefik-forward-auth.forwardauth.address=http://traefik-forward-auth:4181"
#      - "traefik.http.middlewares.traefik-forward-auth.forwardauth.authResponseHeaders=X-Forwarded-User"
#      - "traefik.http.services.traefik-forward-auth.loadbalancer.server.port=4181"

#  forwardauth:
#    image: mesosphere/traefik-forward-auth
#    networks:
#      - web
#    depends_on:
#      - keycloak
#    environment:
#      - SECRET=dfge45te34teyhga3eq4yt4y
#      - PROVIDER_URI=http://auth.radis:88/realms/Colander
#      - CLIENT_ID=colander
#      - CLIENT_SECRET=aJnfi6xIsvaxm6SEDehKoP7GBt4FADyj
#    labels:
#      - "traefik.enable=true"
#      - "traefik.docker.network=web"
#      - "traefik.http.services.forwardauth.loadbalancer.server.port=4181"
#      - "traefik.http.routers.forwardauth.entrypoints=web"
#      - "traefik.http.routers.forwardauth.rule=Path(`/_oauth`)"
#      - "traefik.http.routers.forwardauth.middlewares=traefik-forward-auth"
#      - "traefik.http.middlewares.traefik-forward-auth.forwardauth.address=http://forwardauth:4181"
#      - "traefik.http.middlewares.traefik-forward-auth.forwardauth.authResponseHeaders=X-Forwarded-User"
#      - "traefik.http.middlewares.traefik-forward-auth.forwardauth.trustForwardHeader=true"