116 lines
4.1 KiB
YAML
116 lines
4.1 KiB
YAML
services:
|
|
|
|
idhub1:
|
|
init: true
|
|
image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/idhub:latest
|
|
environment:
|
|
- DOMAIN=idhub1-ereuse.demo.pangea.org
|
|
- CREATE_TEST_USERS=true
|
|
- ENABLE_EMAIL=false
|
|
- ENABLE_2FACTOR_AUTH=false
|
|
- LANGUAGE_CODE=ca
|
|
- INITIAL_ADMIN_EMAIL=${IDHUB_PILOT_TEST__ADMIN_EMAIL}
|
|
- INITIAL_ADMIN_PASSWORD=${IDHUB_PILOT_TEST__ADMIN_PASSWORD}
|
|
- SECRET_KEY=${IDHUB_SECRET_KEY:-publicsecretisnotsecureVtmKBfxpVV47PpBCF2Nzz2H6qnbd}
|
|
- STATIC_ROOT=${IDHUB_STATIC_ROOT:-/static/}
|
|
- MEDIA_ROOT=${IDHUB_MEDIA_ROOT:-/media/}
|
|
- PORT=${IDHUB_PORT:-9001}
|
|
- DEFAULT_FROM_EMAIL=${IDHUB_DEFAULT_FROM_EMAIL}
|
|
- EMAIL_HOST=${IDHUB_EMAIL_HOST}
|
|
- EMAIL_HOST_USER=${IDHUB_EMAIL_HOST_USER}
|
|
- EMAIL_HOST_PASSWORD=${IDHUB_EMAIL_HOST_PASSWORD}
|
|
- EMAIL_PORT=${IDHUB_EMAIL_PORT}
|
|
- EMAIL_USE_TLS=${IDHUB_EMAIL_USE_TLS}
|
|
- EMAIL_BACKEND=${IDHUB_EMAIL_BACKEND}
|
|
- SUPPORTED_CREDENTIALS=['MembershipCard']
|
|
- SYNC_ORG_DEV=${IDHUB_SYNC_ORG_DEV}
|
|
- OIDC_OIRGS=examples/organizations__pilot_ereuse.csv
|
|
- OIDC_REDIRECT=true
|
|
ports:
|
|
- 9101:9001
|
|
volumes:
|
|
- ./idhub1__pilot-ereuse:/opt/idhub
|
|
- sharedsecret:/sharedsecret:rw
|
|
|
|
idhub2:
|
|
init: true
|
|
image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/idhub:latest
|
|
environment:
|
|
- DOMAIN=idhub2-ereuse.demo.pangea.org
|
|
- ENABLE_EMAIL=false
|
|
- ENABLE_2FACTOR_AUTH=false
|
|
- LANGUAGE_CODE=ca
|
|
- INITIAL_ADMIN_EMAIL=${IDHUB_PILOT_TEST__ADMIN_EMAIL}
|
|
- INITIAL_ADMIN_PASSWORD=${IDHUB_PILOT_TEST__ADMIN_PASSWORD}
|
|
- SECRET_KEY=${IDHUB_SECRET_KEY:-publicsecretisnotsecureVtmKBfxpVV47PpBCF2Nzz2H6qnbd}
|
|
- STATIC_ROOT=${IDHUB_STATIC_ROOT:-/static/}
|
|
- MEDIA_ROOT=${IDHUB_MEDIA_ROOT:-/media/}
|
|
- PORT=${IDHUB_PORT:-9002}
|
|
- DEFAULT_FROM_EMAIL=${IDHUB_DEFAULT_FROM_EMAIL}
|
|
- EMAIL_HOST=${IDHUB_EMAIL_HOST}
|
|
- EMAIL_HOST_USER=${IDHUB_EMAIL_HOST_USER}
|
|
- EMAIL_HOST_PASSWORD=${IDHUB_EMAIL_HOST_PASSWORD}
|
|
- EMAIL_PORT=${IDHUB_EMAIL_PORT}
|
|
- EMAIL_USE_TLS=${IDHUB_EMAIL_USE_TLS}
|
|
- EMAIL_BACKEND=${IDHUB_EMAIL_BACKEND}
|
|
- SUPPORTED_CREDENTIALS=['EOperatorClaim']
|
|
- SYNC_ORG_DEV=${IDHUB_SYNC_ORG_DEV}
|
|
- OIDC_OIRGS=examples/organizations__pilot_ereuse.csv
|
|
- OIDC_REDIRECT=true
|
|
ports:
|
|
- 9102:9001
|
|
volumes:
|
|
- ./idhub2__pilot-ereuse:/opt/idhub
|
|
- sharedsecret:/sharedsecret:rw
|
|
|
|
devicehub:
|
|
init: true
|
|
image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/devicehub:latest
|
|
environment:
|
|
- HOST=devicehub.demo.pangea.org
|
|
- DEVICEHUB_HOST=https://devicehub.demo.pangea.org
|
|
- ID_FEDERATED=DH9
|
|
- DB_USER=${DEVICEHUB_DB_USER}
|
|
- DB_PASSWORD=${DEVICEHUB_DB_PASSWORD}
|
|
- DB_HOST=postgres-dh
|
|
- DB_DATABASE=${DEVICEHUB_DB_DATABASE}
|
|
- EMAIL_DEMO=${DEVICEHUB_SERVER_ID_EMAIL_DEMO}
|
|
- PASSWORD_DEMO=${DEVICEHUB_PASSWORD_DEMO}
|
|
- JWT_PASS=${DEVICEHUB_JWT_PASS}
|
|
- SECRET_KEY=${DEVICEHUB_SECRET_KEY}
|
|
- API_DLT=${DEVICEHUB_API_DLT}
|
|
- API_RESOLVER=${DEVICEHUB_API_RESOLVER}
|
|
- API_DLT_TOKEN=${DEVICEHUB_API_DLT_TOKEN}
|
|
- VERIFY_URL=${DEVICEHUB_VERIFY_URL}
|
|
- EREUSE_PILOT=y
|
|
- URL_MANUALS=${DEVICEHUB_URL_MANUALS}
|
|
- ID_SERVICE=${DEVICEHUB_SERVER_ID_SERVICE}
|
|
- AUTHORIZED_CLIENT_URL=${DEVICEHUB_CLIENT_ID_DEVICEHUB_HOST}
|
|
- DPP_MODULE=y
|
|
- CONFIG_OIDC=n
|
|
- IMPORT_SNAPSHOTS=n
|
|
ports:
|
|
- 5000:5000
|
|
volumes:
|
|
- devicehub:/opt/devicehub:rw
|
|
|
|
postgres-dh:
|
|
image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/postgres-dh:latest
|
|
# 4. To create the database.
|
|
# 5. Give permissions to the corresponding users in the database.
|
|
# extra src https://github.com/docker-library/docs/blob/master/postgres/README.md#environment-variables
|
|
environment:
|
|
- POSTGRES_PASSWORD=${DEVICEHUB_DB_PASSWORD}
|
|
- POSTGRES_USER=${DEVICEHUB_DB_USER}
|
|
- POSTGRES_DB=${DEVICEHUB_DB_DATABASE}
|
|
# DEBUG
|
|
#ports:
|
|
# - 5432:5432
|
|
# TODO persistence
|
|
#volumes:
|
|
# - pg_data:/var/lib/postgresql/data
|
|
|
|
volumes:
|
|
sharedsecret:
|
|
devicehub:
|