services:

  idhub1:
    init: true
    image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/idhub:latest
    environment:
      - DOMAIN=idhub1-ereuse.demo.pangea.org
      - CREATE_TEST_USERS=true
      - ENABLE_EMAIL=false
      - ENABLE_2FACTOR_AUTH=false
      - LANGUAGE_CODE=en
      - INITIAL_ADMIN_EMAIL=${IDHUB_PILOT_TEST__ADMIN_EMAIL}
      - INITIAL_ADMIN_PASSWORD=${IDHUB_PILOT_TEST__ADMIN_PASSWORD}
      - SECRET_KEY=${IDHUB_SECRET_KEY:-publicsecretisnotsecureVtmKBfxpVV47PpBCF2Nzz2H6qnbd}
      - STATIC_ROOT=${IDHUB_STATIC_ROOT:-/static/}
      - MEDIA_ROOT=${IDHUB_MEDIA_ROOT:-/media/}
      - DEFAULT_FROM_EMAIL=${IDHUB_DEFAULT_FROM_EMAIL}
      - EMAIL_HOST=${IDHUB_EMAIL_HOST}
      - EMAIL_HOST_USER=${IDHUB_EMAIL_HOST_USER}
      - EMAIL_HOST_PASSWORD=${IDHUB_EMAIL_HOST_PASSWORD}
      - EMAIL_PORT=${IDHUB_EMAIL_PORT}
      - EMAIL_USE_TLS=${IDHUB_EMAIL_USE_TLS}
      - EMAIL_BACKEND=${IDHUB_EMAIL_BACKEND}
      - SUPPORTED_CREDENTIALS=['MembershipCard']
      - SYNC_ORG_DEV=${IDHUB_SYNC_ORG_DEV}
      - OIDC_ORGS=examples/organizations__pilot_ereuse.csv
      - OIDC_REDIRECT=true
    ports:
      - 9101:8000
    volumes:
      - ./idhub1__pilot-ereuse:/opt/idhub
      - sharedsecret:/sharedsecret:rw

  idhub2:
    init: true
    image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/idhub:latest
    environment:
      - DOMAIN=idhub2-ereuse.demo.pangea.org
      - ENABLE_EMAIL=false
      - ENABLE_2FACTOR_AUTH=false
      - LANGUAGE_CODE=en
      - INITIAL_ADMIN_EMAIL=${IDHUB_PILOT_TEST__ADMIN_EMAIL}
      - INITIAL_ADMIN_PASSWORD=${IDHUB_PILOT_TEST__ADMIN_PASSWORD}
      - SECRET_KEY=${IDHUB_SECRET_KEY:-publicsecretisnotsecureVtmKBfxpVV47PpBCF2Nzz2H6qnbd}
      - STATIC_ROOT=${IDHUB_STATIC_ROOT:-/static/}
      - MEDIA_ROOT=${IDHUB_MEDIA_ROOT:-/media/}
      - DEFAULT_FROM_EMAIL=${IDHUB_DEFAULT_FROM_EMAIL}
      - EMAIL_HOST=${IDHUB_EMAIL_HOST}
      - EMAIL_HOST_USER=${IDHUB_EMAIL_HOST_USER}
      - EMAIL_HOST_PASSWORD=${IDHUB_EMAIL_HOST_PASSWORD}
      - EMAIL_PORT=${IDHUB_EMAIL_PORT}
      - EMAIL_USE_TLS=${IDHUB_EMAIL_USE_TLS}
      - EMAIL_BACKEND=${IDHUB_EMAIL_BACKEND}
      - SUPPORTED_CREDENTIALS=['EOperatorClaim']
      - SYNC_ORG_DEV=${IDHUB_SYNC_ORG_DEV}
      - OIDC_ORGS=examples/organizations__pilot_ereuse.csv
      - OIDC_REDIRECT=true
    ports:
      - 9102:8000
    volumes:
      - ./idhub2__pilot-ereuse:/opt/idhub
      - sharedsecret:/sharedsecret:rw

  devicehub:
    init: true
    image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/devicehub:latest
    environment:
      - HOST=devicehub.demo.pangea.org
      - DEVICEHUB_HOST=https://devicehub.demo.pangea.org
      - ID_FEDERATED=DH9
      - DEPLOYMENT=PROD
      - DB_USER=${DEVICEHUB_DB_USER}
      - DB_PASSWORD=${DEVICEHUB_DB_PASSWORD}
      - DB_HOST=postgres-dh
      - DB_DATABASE=${DEVICEHUB_DB_DATABASE}
      - EMAIL_DEMO=${DEVICEHUB_SERVER_ID_EMAIL_DEMO}
      - PASSWORD_DEMO=${DEVICEHUB_PASSWORD_DEMO}
      - JWT_PASS=${DEVICEHUB_JWT_PASS}
      - SECRET_KEY=${DEVICEHUB_SECRET_KEY}
      - API_DLT=${DEVICEHUB_API_DLT}
      - API_RESOLVER=${DEVICEHUB_API_RESOLVER}
      - API_DLT_TOKEN=${DEVICEHUB_API_DLT_TOKEN}
      - VERIFY_URL=${DEVICEHUB_VERIFY_URL}
      - EREUSE_PILOT=y
      - URL_MANUALS=${DEVICEHUB_URL_MANUALS}
      - ID_SERVICE=${DEVICEHUB_SERVER_ID_SERVICE}
      - AUTHORIZED_CLIENT_URL=${DEVICEHUB_CLIENT_ID_DEVICEHUB_HOST}
      - DPP_MODULE=y
      - CONFIG_OIDC=n
      - IMPORT_SNAPSHOTS=n
    ports:
      - 5500:5000
    volumes:
      - devicehub:/opt/devicehub:rw

  postgres-dh:
    image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/postgres-dh:latest
    # 4. To create the database.
    # 5. Give permissions to the corresponding users in the database.
    #   extra src https://github.com/docker-library/docs/blob/master/postgres/README.md#environment-variables
    environment:
      - POSTGRES_PASSWORD=${DEVICEHUB_DB_PASSWORD}
      - POSTGRES_USER=${DEVICEHUB_DB_USER}
      - POSTGRES_DB=${DEVICEHUB_DB_DATABASE}
    volumes:
      - pg_data:/var/lib/postgresql/data
    # DEBUG
    #ports:
    #  - 5432:5432
    # TODO persistence

volumes:
  sharedsecret:
  devicehub:
  pg_data: