deploy-pie/compose.yaml.jinja at 2122bac263c1de3744ab6ffbf8acedb2da1657f5 · opalmedapps/deploy-pie · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
services:
  traefik:
    image: traefik:v3.4.1
    ports:
      - "${HTTP_PORT}:80"
      - "${HTTPS_PORT}:443"
    restart: unless-stopped
    environment:
      - TZ=${TIMEZONE}
      - APP_HOST=${APP_HOST}
      - AUTH_LABS_USERNAME=${AUTH_LABS_USERNAME}
      - AUTH_LABS_PASSWORD=${AUTH_LABS_PASSWORD}
    volumes:
      - type: bind
        source: $PWD/config/traefik/traefik.yaml
        target: /etc/traefik/traefik.yaml
        read_only: true
      - type: bind
        source: $PWD/config/traefik/dynamic-config
        target: /config
        read_only: true
      - type: bind
        source: $PWD/artifacts/logs/traefik
        target: /logs
      {% if certificate_type == "letsencrypt" -%}
      - type: bind
        source: $PWD/config/traefik/certs
        target: /certs
      {% endif -%}
      {% if certificate_type == "file" -%}
      - type: bind
        source: $PWD/certs/server.crt
        target: /certs/server.crt
        read_only: true
      - type: bind
        source: $PWD/certs/server.key
        target: /certs/server.key
        read_only: true
      {% endif -%}
  {%- if db_host_type == "container" %}
  db:
    image: mariadb:10.11.15-jammy
    restart: unless-stopped
    environment:
      - MARIADB_ROOT_PASSWORD=${DB_ROOT_PASSWORD}
      - TZ=${TIMEZONE}
    volumes:
      - db-data:/var/lib/mysql
      - type: bind
        source: ./config/mariadb/scheduler.cnf
        target: /etc/mysql/conf.d/scheduler.cnf
        read_only: true
  {%- endif %}
  admin-legacy:
    image: ghcr.io/opalmedapps/opal-admin-legacy:main
    restart: unless-stopped
    {% if db_host_type == "container" -%}
    depends_on:
      - db
    {%- endif %}
    env_file:
      - $PWD/.envs/admin-legacy.env
    environment:
      - TZ=${TIMEZONE}
    volumes:
      - admin-legacy-logs:/var/www/html/publisher/logs
      - type: bind
        source: {{ clinical_notes_path }}
        target: ${CLINICAL_REPORTS_PATH}
      - type: bind
        source: $PWD/config/firebase/service-account.json
        target: /config/firebase-service-account.json
        read_only: true
      - type: bind
        source: $PWD/certs/apn.crt
        target: /var/www/html/publisher/php/certificates/apn.crt
        read_only: true
      - type: bind
        source: $PWD/certs/apn.key
        target: /var/www/html/publisher/php/certificates/apn.key
        read_only: true
      {% if use_custom_certs -%}
      - type: bind
        source: $PWD/certs/ca-certificates.crt
        target: /etc/ssl/certs/ca-certificates.crt
        read_only: true
      - type: bind
        source: $PWD/certs/db-certs.crt
        target: /certs/db-certs.crt
        read_only: true
      {%- endif %}
  admin:
    image: ghcr.io/opalmedapps/opal-admin:main
    restart: unless-stopped
    {% if db_host_type == "container" -%}
    depends_on:
      - db
    {%- endif %}
    env_file:
      $PWD/.envs/admin.env
    environment:
      - TZ=${TIMEZONE}
    volumes:
      - admin-media:/app/opal/media
      - admin-logs:/logs
      - type: bind
        source: {{ clinical_notes_path }}
        target: ${CLINICAL_REPORTS_PATH}
      {% if use_custom_certs -%}
      - type: bind
        source: $PWD/certs/ca-certificates.crt
        target: /etc/ssl/certs/ca-certificates.crt
        read_only: true
      - type: bind
        source: $PWD/certs/db-certs.crt
        target: /certs/db-certs.crt
        read_only: true
      {%- endif %}
  admin-media:
    image: joseluisq/static-web-server:2.37.0
    restart: unless-stopped
    depends_on:
      - admin
    volumes:
      - admin-media:/public/media:ro
  listener:
    image: ghcr.io/opalmedapps/opal-listener:main
    restart: unless-stopped
    {% if db_host_type == "container" -%}
    depends_on:
      - db
    {%- endif %}
    env_file:
      - $PWD/.envs/listener.env
    environment:
      - TZ=${TIMEZONE}
    volumes:
      - type: bind
        source: {{ clinical_notes_path }}
        target: ${CLINICAL_REPORTS_PATH}
        read_only: true
      - type: bind
        source: $PWD/config/firebase/service-account.json
        target: /config/firebase-service-account.json
        read_only: true
      {% if use_custom_certs -%}
      - type: bind
        source: $PWD/certs/ca-certificates.crt
        target: /etc/ssl/certs/ca-certificates.crt
        read_only: true
      - type: bind
        source: $PWD/certs/db-certs.crt
        target: /certs/db-certs.crt
        read_only: true
      {%- endif %}
  redis:
    image: redis:8.0.5-alpine3.21
    restart: unless-stopped
  db-management:
    image: ghcr.io/opalmedapps/opal-db-management:main
    {% if db_host_type == "container" -%}
    depends_on:
      - db
    {%- endif %}
    environment:
      - TZ=${TIMEZONE}
    env_file:
      - $PWD/.envs/db-management.env
    {% if use_custom_certs -%}
    volumes:
      - type: bind
        source: $PWD/certs/db-certs.crt
        target: /certs/db-certs.crt
        read_only: true
    {%- endif %}

volumes:
  db-data:
  admin-media:
  admin-logs:
  admin-legacy-logs:

networks:
  default:
    name: opal-${ENVIRONMENT}