docker-compose.yml

# docker-compose --env-file=.env.local up

version: "3.9"
services:
  al-nginx:
    image: nginx:latest
    volumes:
      - ./al-nginx/nginx.conf:/etc/nginx/nginx.conf
      - ./al-nginx/error.html:/usr/share/nginx/html/error.html
    ports:
      - ${PORT:-1234}:80
    restart: always
    depends_on:
      - al-mission-control
      - al-termit
      - al-ontographer
      - al-db-server
      - al-auth-server
      - al-sgov-server
      - al-termit-server
      - al-checkit-ui
      - al-checkit-server
  al-mission-control:
    image: ghcr.io/datagov-cz/mission-control/al-mission-control:latest
    environment:
      CONTEXT:
      ID: al-mission-control
      URL: ${URL}
      COMPONENTS:
    restart: always
  al-ontographer:
    image: ghcr.io/datagov-cz/ontographer/al-ontographer:latest
    environment:
      CONTEXT:
      ID: al-ontographer
      URL: ${URL}/v-nástroji/ontographer
      COMPONENTS:
    restart: always
  al-termit:
    image: ghcr.io/datagov-cz/termit-ui/al-termit:latest
    environment:
      CONTEXT:
      ID: al-termit
      URL: ${URL}/v-nástroji/termit
      COMPONENTS:
    restart: always
  al-db-server:
    build:
      context: al-db-server
      args:
        GRAPHDB_ZIP: ${GRAPHDB_ZIP:-graphdb-free-9.6.0-dist.zip}
    environment:
      CONTEXT:
      ID: al-db-server
      URL: ${URL}/sluzby/db-server/repositories/${REPOSITORY}
      COMPONENTS: # TODO REPOSITORY_USERNAME and REPOSITORY_PASSWORD
      GDB_JAVA_OPTS: >-
        -Dgraphdb.workbench.external-url=${URL}/sluzby/db-server
        -Dgraphdb.external-url=${URL}/sluzby/db-server
        -Dgraphdb.workbench.cors.enable=true
        -Dgraphdb.connector.maxHttpHeaderSize=65536
      GRAPHDB_WORKBENCH_EXTERNAL_URL: ${URL}/sluzby/db-server
      GRAPHDB_EXTERNAL_URL: ${URL}/sluzby/db-server
    restart: always
    volumes:
      - al-db-server:/graphdb/home
  al-auth-server-db:
    image: postgres:13
    environment:
      POSTGRES_DB:
      POSTGRES_USER:
      POSTGRES_PASSWORD:
    restart: always
    volumes:
      - al-auth-server-db:/var/lib/postgresql/data
  al-auth-server:
    image: ghcr.io/datagov-cz/keycloak-graphdb-user-replicator/al-auth-server:latest
    entrypoint: ["bash","/al-auth-server/startup.sh"]
    environment:
      CONTEXT:
      ID: al-auth-server
      URL: ${URL}/sluzby/auth-server/realms/assembly-line
      COMPONENTS: # then REPOSITORY_USERNAME and REPOSITORY_PASSWORD
      DB_VENDOR: POSTGRES
      DB_ADDR: al-auth-server-db
      DB_DATABASE: ${POSTGRES_DB}
      DB_USER: ${POSTGRES_USER}
      DB_SCHEMA: public
      DB_PASSWORD: ${POSTGRES_PASSWORD}
      REALM_ID: assembly-line
      KEYCLOAK_USER:
      KEYCLOAK_PASSWORD:
      PROXY_ADDRESS_FORWARDING: "true"
      KEYCLOAK_FRONTEND_URL: ${URL}/sluzby/auth-server
      KEYCLOAK_IMPORT: /al-auth-server/keycloak-realm.json
      DB_SERVER_URL: http://al-db-server:7200
      DB_SERVER_REPOSITORY_ID: assembly-line
      DB_SERVER_CONTEXT: https://slovník.gov.cz/uživatel
      NAMESPACE: https://slovník.gov.cz/uživatel/
      KEYCLOAK_API_USER_USERNAME: ${KEYCLOAK_API_USER_USERNAME}
      KEYCLOAK_API_USER_PASSWORD: ${KEYCLOAK_API_USER_PASSWORD}
    depends_on:
      - al-auth-server-db
      - al-db-server
    restart: always
    volumes:
      - ./al-auth-server:/al-auth-server
  al-sgov-server:
    image: ghcr.io/datagov-cz/sgov/al-sgov-server:latest
    environment:
      CONTEXT:
      ID: al-sgov-server
      URL: ${URL}/sluzby/sgov-server
      COMPONENTS:
      SERVER_SERVLET_CONTEXT-PATH: /modelujeme/sluzby/sgov-server
      REPOSITORY_URL: http://al-db-server:7200/repositories/${REPOSITORY}
      KEYCLOAK_REALM: assembly-line
      KEYCLOAK_RESOURCE: al-sgov-server
      KEYCLOAK_AUTHSERVERURL: http://al-auth-server:8080/modelujeme/sluzby/auth-server
      KEYCLOAK_REALMKEY: ${KEYCLOAK_REALMKEY}
      KEYCLOAK_CREDENTIALS_SECRET: ${SGOV_SERVER_KEYCLOAK_CREDENTIALS_SECRET}
      KEYCLOAK_PUBLIC_CLIENT: "false"
      REPOSITORY_GITHUBORGANIZATION: ${SGOV_SERVER_REPOSITORY_GITHUBORGANIZATION:-datagov-cz}
      REPOSITORY_GITHUBREPO: ${SGOV_SERVER_REPOSITORY_GITHUBREPO:-ssp}
      REPOSITORY_GITHUBUSERTOKEN: ${SGOV_SERVER_REPOSITORY_GITHUBUSERTOKEN}
      USER_NAMESPACE: https://slovník.gov.cz/uživatel/
      USER_CONTEXT: https://slovník.gov.cz/uživatel
      FEATURE_DEMO: ${FEATURE_DEMO:-false}
      DEBUG: ${SGOV_SERVER_DEBUG:-false}
    depends_on:
      - al-db-server
      - al-auth-server
    restart: always
  al-termit-server:
    image: ghcr.io/datagov-cz/termit/al-termit-server:latest
    environment:
      CONTEXT:
      ID: al-termit-server
      URL: ${URL}/sluzby/termit-server
      COMPONENTS:
      TERMIT_CORS_ALLOWEDORIGINPATTERNS: "*"
      TERMIT_REPOSITORY_CANONICAL_CONTAINER: https://slovník.gov.cz
      TERMIT_REPOSITORY_URL: http://al-db-server:7200/repositories/${REPOSITORY}
      TERMIT_REPOSITORY_PUBLICURL: ${URL}/sluzby/db-server/repositories/${REPOSITORY}
      TERMIT_TEXTANALYSIS_URL: http://al-annotace-server:8080/annotate?enableKeywordExtraction=true
      TERMIT_TEXTANALYSIS_TERMOCCURRENCEMINSCORE: "0.49"
      TERMIT_TEXTANALYSIS_TERMASSIGNMENTMINSCORE: "1"
      TERMIT_NAMESPACE_USER: https://slovník.gov.cz/uživatel/
      SERVER_SERVLET_CONTEXT-PATH: /modelujeme/sluzby/termit-server
      KEYCLOAK_REALM: assembly-line
      KEYCLOAK_RESOURCE: al-termit-server
      KEYCLOAK_AUTHSERVERURL: http://al-auth-server:8080/modelujeme/sluzby/auth-server
      KEYCLOAK_REALMKEY: ${KEYCLOAK_REALMKEY}
      KEYCLOAK_CREDENTIALS_SECRET: ${TERMIT_SERVER_KEYCLOAK_CREDENTIALS_SECRET}
      KEYCLOAK_PUBLIC_CLIENT: "false"
      KEYCLOAK_USERESOURCEROLEMAPPINGS: "true"
      SPRING_PROFILES_ACTIVE: "no-cache"
    depends_on:
      - al-db-server
      - al-auth-server
    restart: always
    volumes:
      - al-termit-server:/tmp/termit
  al-annotace-server:
    image: ghcr.io/kbss-cvut/annotace/annotace-spark:latest
    environment:
      JAVA_OPTS: "-Xmx1g"
    ports:
      - "8888:8080"
    restart: always
  al-checkit-ui:
    image: ghcr.io/filip-kopecky/checkit-ui/al-checkit-ui:latest
    environment:
      VITE_URL: ${URL}/v-nástroji/checkit/
      VITE_APP_ID: al-checkit-ui
      VITE_AUTHENTICATION_SERVER: ${URL}/sluzby/auth-server/realms/assembly-line
      VITE_SERVER: ${URL}/sluzby/checkit-server
    depends_on:
      - al-auth-server
    restart: always
  al-checkit-server:
    image: ghcr.io/mighantos/checkit-server/al-checkit-server:latest
    environment:
      SERVER_SERVLET_CONTEXTPATH: /modelujeme/sluzby/checkit-server
      KEYCLOAK_URL: http://al-auth-server:8080/modelujeme/sluzby/auth-server
      KEYCLOAK_CLIENTID: al-checkit-server
      KEYCLOAK_REALM: assembly-line
      KEYCLOAK_REALMKEY: ${KEYCLOAK_REALMKEY}
      KEYCLOAK_SECRET: ${CHECKIT_SERVER_KEYCLOAK_CREDENTIALS_SECRET}
      KEYCLOAK_APIADMIN_USERNAME: ${KEYCLOAK_API_USER_USERNAME}
      KEYCLOAK_APIADMIN_PASSWORD: ${KEYCLOAK_API_USER_PASSWORD}
      REPOSITORY_URL: http://al-db-server:7200/repositories/${REPOSITORY}
      GITHUB_PUBLISHTOSSP: "false"
      GITHUB_TOKEN: ${CHECKIT_SERVER_REPOSITORY_GITHUBUSERTOKEN}
      SGOVSERVER_URL: http://al-sgov-server:8080/modelujeme/sluzby/sgov-server
    depends_on:
      - al-db-server
      - al-auth-server
    restart: always

volumes:
  al-db-server:
  al-auth-server-db:
  al-termit-server: