docker-compose.yml

# File              : docker-compose.yml
# License           : AGPL-3.0-or-later
# Author            : Pierre 'McFly' Marty <pmarty@linagora.com>
# Date              : 16.01.2025
# Last Modified Date: 07.02.2025
# Last Modified By  : Pierre 'McFly' Marty <pmarty@linagora.com>

services:
  auth:
    image: yadd/lemonldap-ng-full
    volumes:
      - ./.compose/lemon/lmConf-1.json:/var/lib/lemonldap-ng/conf/lmConf-1.json
      - ./.compose/lemon/ssl.conf:/etc/nginx/sites-enabled/0000default.conf
      - ./.compose/lemon/root.conf:/etc/nginx/sites-enabled/root.conf
      - ./.compose/synapse/wellknownserver.conf:/var/www/matrix-server.json
      - ./.compose/synapse/wellknownclient.conf:/var/www/matrix-client.json
      - ./.compose/ssl:/etc/nginx/ssl
      - ./.compose/lemon/lemon.db:/db/lemon.db
    environment:
      - SSODOMAIN=docker.localhost
      - PORTAL=https://auth.docker.localhost
      - LOGLEVEL=debug
      - LOGGER=stderr
      - USERLOGGER=stderr
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      frontend:
        aliases:
          - auth

  synapse:
    image: matrixdotorg/synapse
    restart: unless-stopped
    env_file:
      - path: .compose/.env
        required: true
    volumes:
      - ./.compose/synapse:/data
      - ./.compose/ssl:/etc/ssl/certs
    depends_on:
      auth:
        condition: service_started
    networks:
      frontend:
        aliases:
          - synapse

  tom:
    build:
      context: .
    volumes:
      # - ./.compose/tom:/opt/twake/db/
      - ./.compose/lemon:/opt/lemon/db/
      - ./.compose/synapse:/opt/synapse/db/
    depends_on:
      synapse:
        condition: service_started
    # ports:
    #   - 3000:3000
    #   - 9229:9229
    networks:
      frontend:
        aliases:
          - tom.server
    environment:
      # - NODE_OPTIONS="--inspect=0.0.0.0:9229"
      - BASE_URL=https://tom.docker.localhost
      - DATABASE_ENGINE=sqlite
      # - DATABASE_HOST=/opt/twake/db/tom.db
      - DATABASE_HOST=file:tom?mode=memory&cache=shared
      - MATRIX_SERVER=matrix.docker.localhost
      - MATRIX_DATABASE_ENGINE=sqlite
      - MATRIX_DATABASE_HOST=/opt/synapse/db/homeserver.db
      - OIDC_ISSUER=https://auth.docker.localhost
      - SERVER_NAME=docker.localhost
      - USERDB_ENGINE=sqlite
      - USERDB_HOST=/opt/lemon/db/lemon.db
      - LOG_LEVEL=silly
      - LOG_TRANSPORTS=Console
      - TEMPLATE_DIR=/usr/src/app/packages/tom-server/templates
      - TRUSTED_PROXIES=uniquelocal
      - CRON_SERVICE=true
      - UPDATE_FEDERATED_IDENTITY_HASHES_CRON=0-59/2 * * * *
      - UPDATE_USERS_CRON=1-59/2 * * * *
      - ADDITIONAL_FEATURES=true
      - FEDERATED_IDENTITY_SERVICES=fed.docker.localhost
      - NODE_TLS_REJECT_UNAUTHORIZED=0
      - SMS_API_KEY=SOME_SECRET_KEY
      - SMS_API_LOGIN=login@domain.com
      - SMS_API_URL=https://api.octopush.com/v1/public

  fed:
    build:
      context: .
      dockerfile: ./packages/federated-identity-service/Dockerfile
    volumes:
      # - ./.compose/fed:/opt/twake/db/
      # - ./.compose/lemon:/opt/lemon/db/       ## Uncomment to enable local userDB
      - ./.compose/synapse:/opt/synapse/db/
    # ports:
    #   - 3001:3001
    #   - 9229:9229
    networks:
      frontend:
        aliases:
          - fed.server
    environment:
      # - NODE_OPTIONS="--inspect=0.0.0.0:9229"
      - BASE_URL=https://fed.docker.localhost
      - SERVER_NAME=docker.localhost
      - DATABASE_ENGINE=sqlite
      # - DATABASE_HOST=/opt/twake/db/fed.db
      - DATABASE_HOST=file:fed?mode=memory&cache=shared
      # - USERDB_ENGINE=sqlite                  ## Uncomment to enable local userDB
      # - USERDB_HOST=/opt/lemon/db/lemon.db    ## Uncomment to enable local userDB
      - LOG_LEVEL=silly
      - LOG_TRANSPORTS=Console
      - TRUSTED_PROXIES=uniquelocal
      - CRON_SERVICE=true
      # - UPDATE_FEDERATED_IDENTITY_HASHES_CRON=0-59/2 * * * *
      # - UPDATE_USERS_CRON=1-59/2 * * * *
      - ADDITIONAL_FEATURES=true
      - TRUSTED_SERVERS_ADDRESSES=172.18.0.1/16,172.31.0.6,172.31.0.5,172.31.0.1/16
      - NODE_TLS_REJECT_UNAUTHORIZED=0
      - SMS_API_KEY=SOME_SECRET_KEY
      - SMS_API_LOGIN=login@domain.com
      - SMS_API_URL=https://api.octopush.com/v1/public

  chat:
    image: linagora/twake-web
    volumes:
      - ./.compose/chat/config.json:/usr/share/nginx/html/web/config.json
      - ./.compose/chat/default.conf.template:/etc/nginx/templates/default.conf.template
      - ./.compose/ssl:/etc/nginx/ssl
    # ports:
    #   - 6868:6868
    environment:
      - TWAKECHAT_LISTEN_PORT=6868
    networks:
      - frontend

  haproxy:
    image: haproxy:2.6-bookworm
    ports:
      - 443:443
    volumes:
      - ./.compose/haproxy:/usr/local/etc/haproxy:ro
      - ./.compose/ssl/both.pem:/etc/ssl/certs/both.pem
    sysctls:
      - net.ipv4.ip_unprivileged_port_start=0
    depends_on:
      - auth
      - chat
      - synapse
      - tom
      - fed
    networks:
      frontend:
        aliases:
          - auth.docker.localhost
          - chat.docker.localhost
          - matrix.docker.localhost
          - tom.docker.localhost
          - fed.docker.localhost
          - docker.localhost

networks:
  frontend:
    name: frontend