56 lines
2.2 KiB
YAML
56 lines
2.2 KiB
YAML
services:
|
|
broker_db:
|
|
image: postgres:16-alpine
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_DB: ${BROKER_DB_NAME:-qortal_broker}
|
|
POSTGRES_USER: ${BROKER_DB_USER:-qortal_broker}
|
|
POSTGRES_PASSWORD: ${BROKER_DB_PASSWORD:-qortal_brokerpass}
|
|
volumes:
|
|
- broker_db_data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${BROKER_DB_USER:-qortal_broker} -d ${BROKER_DB_NAME:-qortal_broker}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
|
|
broker:
|
|
build:
|
|
context: ${BROKER_BUILD_CONTEXT:-./services/qortal-oidc-broker}
|
|
dockerfile: Dockerfile
|
|
restart: unless-stopped
|
|
depends_on:
|
|
broker_db:
|
|
condition: service_healthy
|
|
ports:
|
|
- "127.0.0.1:${BROKER_PORT:-3000}:3000"
|
|
environment:
|
|
PORT: 3000
|
|
NEXTCLOUD_BASE_URL: ${NEXTCLOUD_BASE_URL}
|
|
NEXTCLOUD_PUBLIC_URL: ${NEXTCLOUD_PUBLIC_URL}
|
|
NEXTCLOUD_SERVICE_USER: ${NEXTCLOUD_SERVICE_USER}
|
|
NEXTCLOUD_SERVICE_PASSWORD: ${NEXTCLOUD_SERVICE_PASSWORD}
|
|
BROKER_DATABASE_URL: ${BROKER_DATABASE_URL}
|
|
QORTAL_EXTERNAL_AUTH_BASE_URL: ${QORTAL_EXTERNAL_AUTH_BASE_URL}
|
|
QORTAL_EXTERNAL_AUTH_APP_ID: ${QORTAL_EXTERNAL_AUTH_APP_ID}
|
|
QORTAL_EXTERNAL_AUTH_APP_SECRET: ${QORTAL_EXTERNAL_AUTH_APP_SECRET}
|
|
BROKER_INTERNAL_API_TOKEN: ${BROKER_INTERNAL_API_TOKEN}
|
|
BROKER_CORS_ALLOWED_ORIGINS: ${BROKER_CORS_ALLOWED_ORIGINS}
|
|
OIDC_ISSUER: ${OIDC_ISSUER}
|
|
OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}
|
|
OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
|
|
OIDC_REDIRECT_URI_ALLOWLIST: ${OIDC_REDIRECT_URI_ALLOWLIST}
|
|
OIDC_POLICY_MODE: ${OIDC_POLICY_MODE}
|
|
OIDC_AUTO_PROVISION_GUARD: ${OIDC_AUTO_PROVISION_GUARD}
|
|
OIDC_INVITE_TTL_SECONDS: ${OIDC_INVITE_TTL_SECONDS}
|
|
OIDC_AUTH_REQUEST_TTL_SECONDS: ${OIDC_AUTH_REQUEST_TTL_SECONDS}
|
|
OIDC_AUTH_CODE_TTL_SECONDS: ${OIDC_AUTH_CODE_TTL_SECONDS}
|
|
OIDC_ACCESS_TOKEN_TTL_SECONDS: ${OIDC_ACCESS_TOKEN_TTL_SECONDS}
|
|
OIDC_ID_TOKEN_TTL_SECONDS: ${OIDC_ID_TOKEN_TTL_SECONDS}
|
|
OIDC_LOGIN_LOGO_URL: ${OIDC_LOGIN_LOGO_URL}
|
|
OIDC_PRIVATE_KEY_PEM: ${OIDC_PRIVATE_KEY_PEM}
|
|
OIDC_KEY_ID: ${OIDC_KEY_ID}
|
|
|
|
volumes:
|
|
broker_db_data:
|