docker-compose.yml

x-common-variables: &common-variables
  KONG_DATABASE: postgres
  KONG_PG_DATABASE: kong
  KONG_PG_HOST: kong-db
  KONG_PG_USER: konguser
  KONG_PG_PASSWORD: konguser

secrets:
  npm_token:
    environment: "NPM_TOKEN"

services:
  keycloak:
    image: keycloak-quarkus:e2e
    container_name: keycloak
    build:
      context: local/keycloak
      dockerfile: Dockerfile
      args:
        - KC_VERSION=${KC_VERSION:-26.5.3}
    depends_on:
      kong-db:
        condition: service_healthy
    environment:
      KC_BOOTSTRAP_ADMIN_USERNAME: admin
      KC_BOOTSTRAP_ADMIN_PASSWORD: local
    # Keycloak 26 Hostname v2: --hostname accepts full URL (host + port + path).
    command:
      [
        "start",
        "--optimized",
        "--hostname",
        "http://keycloak.localtest.me:9081/auth",
        "--db-url",
        "jdbc:postgresql://kong-db/${KEYCLOAK_DB_NAME:-keycloak}",
        "--db-username",
        "keycloakuser",
        "--db-password",
        "keycloakuser",
        "--http-enabled",
        "true",
        "--http-port",
        "9081",
        "--import-realm",
      ]
    volumes:
      - ./local/keycloak/master-realm.json:/opt/keycloak/data/import/master-realm.json
    ports:
      - 9081:9081
      - 9000:9000
    networks:
      aps-net:
        aliases:
          - keycloak.localtest.me
    healthcheck:
      test: timeout 10s bash -c ':> /dev/tcp/localhost/9081'
      interval: 5s
      timeout: 5s
      retries: 5
  oauth2-proxy:
    image: quay.io/oauth2-proxy/oauth2-proxy:v7.8.1
    container_name: oauth2-proxy
    command: --alpha-config /oauth2-proxy.yaml --config /oauth2-proxy.cfg
    depends_on:
      - keycloak
    ports:
      - 4180:4180/tcp
    volumes:
      - ./local/oauth2-proxy/oauth2-proxy-local.yaml:/oauth2-proxy.yaml
      - ./local/oauth2-proxy/oauth2-proxy-local.cfg:/oauth2-proxy.cfg
    restart: unless-stopped
    networks:
      aps-net:
        aliases:
          - oauth2proxy.localtest.me
  apsportal:
    container_name: apsportal
    image: apsportal:${APSPORTAL_TAG:-latest}
    depends_on:
      - keycloak
    build:
      context: .
      dockerfile: ./local/portal/Dockerfile.E2E
      secrets:
        - npm_token
    env_file:
      - .env.local
    ports:
      - 3000:3000
    networks:
      aps-net:
        aliases:
          - apsportal.localtest.me
  feeder:
    container_name: feeder
    image: feeder:latest
    depends_on:
      - oauth2-proxy
    build:
      context: ./feeds
      dockerfile: Dockerfile
      secrets:
        - npm_token
    env_file:
      - ./local/feeds/.env.local
    restart: on-failure
    ports:
      - 6000:6000
    networks:
      aps-net:
        aliases:
          - feeder.localtest.me
  feeder-seeding:
    container_name: feeder-seeding
    image: feeder:latest
    command: ''
    entrypoint: sh -c "chmod +x /tmp/init.sh && sh /tmp/init.sh"
    restart: on-failure
    depends_on:
      - feeder
    volumes:
      - ./local/feeder-init:/tmp
    networks:
      - aps-net
  kong-db:
    image: postgres:14
    container_name: kong-db
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    restart: on-failure
    tty: true
    ports:
      - 5432:5432
    volumes:
      - ./local/db/database-init.sql:/docker-entrypoint-initdb.d/1-init.sql
      - ./local/db/keystone-init.sql:/docker-entrypoint-initdb.d/2-init.sql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 5s
      timeout: 5s
      retries: 10
    networks:
      - aps-net
  kong-migrations:
    image: kong:kong-local
    command: kong migrations bootstrap
    depends_on:
      kong-db:
        condition: service_healthy
    environment:
      <<: *common-variables
      KONG_DNS_ORDER: 'LAST,A'
    networks:
      - aps-net
    restart: on-failure
    build:
      context: local/kong
      dockerfile: Dockerfile
  kong-migrations-up:
    image: kong:kong-local
    command: kong migrations up && kong migrations finish
    depends_on:
      kong-db:
        condition: service_healthy
      kong-migrations:
        condition: service_completed_successfully
    environment:
      <<: *common-variables
      KONG_DNS_ORDER: 'LAST,A'
    networks:
      - aps-net
    restart: on-failure
  kong:
    image: kong:kong-local
    container_name: kong
    depends_on:
      - kong-migrations
      - kong-migrations-up
    environment:
      <<: *common-variables
      KONG_DEBUG_LEVEL: debug
      KONG_ADMIN_ACCESS_LOG: /dev/stdout
      KONG_ADMIN_ERROR_LOG: /dev/stderr
      KONG_CASSANDRA_CONTACT_POINTS: kong-db
      KONG_NGINX_WORKER_PROCESSES: '1'
      KONG_PROXY_ACCESS_LOG: /dev/stdout
      KONG_PROXY_ERROR_LOG: /dev/stderr
      KONG_ADMIN_LISTEN: 0.0.0.0:8001
      KONG_DNS_ORDER: 'LAST,A'
      KONG_TRUSTED_IPS: '0.0.0.0/0,::/0'
      KONG_REAL_IP_HEADER: X-Forwarded-For
    ports:
      - 8000:8000
      - 8001:8001
    networks:
      aps-net:
        aliases:
          - kong.localtest.me
    restart: on-failure:5
  redis:
    image: bitnami/redis:latest
    container_name: redis-master
    environment:
      - REDIS_PASSWORD=s3cr3t
    restart: on-failure
    ports:
      - 6379:6379
    networks:
      aps-net:
        aliases:
          - redis-master
  gwa-api:
    image: gwa-api:${GWA_API_TAG:-e2e}
    container_name: gwa-api
    entrypoint: sh -c "chmod +x /tmp/gwa/entrypoint.sh && sh /tmp/gwa/entrypoint.sh"
    ports:
      - 2000:2000
    env_file:
      - ./local/gwa-api/.env.local
    restart: on-failure:5
    volumes:
      - ./local/gwa-api:/tmp/gwa
    networks:
      aps-net:
        aliases:
          - gwa-api.localtest.me
  cypress-jwks-url:
    build:
      context: ./local/cypress-jwks-url
      dockerfile: Dockerfile
      secrets:
        - npm_token
    volumes:
      - ./local/cypress-jwks-url:/src
    command: npm start
    ports:
      - '3500:3500'
    networks:
      aps-net:
        aliases:
          - cypress-jwks-url.localtest.me
  cypress:
    image: aps-cypress-e2e:latest
    container_name: cypress-e2e
    entrypoint: sh -c "chmod +x /tmp/entrypoint.sh && /tmp/entrypoint.sh"
    environment:
      - BROWSER=edge
      - CYPRESS_RECORD_KEY=${CY_RECORD_KEY:-}
      - CYPRESS_PROJECT_ID=${CY_PROJECT_ID:-}
      - RUN_ENV=${CY_EXECUTION_ENV:-}
      - COMMIT_INFO_BRANCH=${CY_COMMIT_BRANCH:-}
      - COMMIT_INFO_SHA=${CY_COMMIT_SHA:-}
      - COMMIT_INFO_AUTHOR=${CY_COMMIT_AUTHOR:-}
      - COMMIT_INFO_MESSAGE=${CY_COMMIT_MESSAGE:-}
      - COMMIT_INFO_REMOTE=${CY_REPO_URL:-}
      - COMMIT_INFO_EMAIL=${CY_COMMIT_AUTHOR_EMAIL:-}
    depends_on:
      - feeder-seeding
    build:
      context: .
      dockerfile: e2e/Dockerfile
      secrets:
        - npm_token
    volumes:
      - ./e2e/coverage:/e2e/coverage
      - ./e2e/results:/e2e/results
    networks:
      - aps-net
    profiles:
      - testsuite

  astra-mongo:
    image: mongo:4
    container_name: astra-mongo
    ports:
      - '27017:27017'
    networks:
      aps-net:
        aliases:
          - mongo.localtest.me
    profiles:
      - testsuite

  astra-gui:
    build:
      context: local/astra
    container_name: astra-gui
    restart: always
    environment:
      MONGO_PORT_27017_TCP_ADDR: astra-mongo
    networks:
      aps-net:
        aliases:
          - astra.localtest.me
    depends_on:
      - astra-mongo
    links:
      - astra-mongo:mongo
    ports:
      - '8094:8094'
    profiles:
      - testsuite

  mailpit:
    image: axllent/mailpit:latest
    container_name: mailpit
    restart: unless-stopped
    ports:
      - '1025:1025'  # SMTP port for receiving emails
      - '8025:8025'  # Web UI for viewing emails
    networks:
      aps-net:
        aliases:
          - mailpit.localtest.me

networks:
  aps-net: {}