docker-compose.yml

services:

  setup:
    image: eclipse-temurin:17
    command: bash /config/generate-resources.sh
    volumes:
      - ./config:/config:rw

  govsso-mock:
    build:
      context: .
      dockerfile: build/Dockerfile
    image: govsso-mock
    depends_on:
      setup:
        condition: service_completed_successfully
    networks:
      default:
        aliases:
          - govsso-mock.localhost
    ports:
      - '10443:10443'
    volumes:
      - ./config:/govsso-mock/config:ro

  client:
    image: ghcr.io/e-gov/tara-govsso-exampleclient:0.7.3
    # TODO add HEALTHCHECK to mock's Dockerfile and replace sleep with depends_on.govsso-mock.condition: service_healthy
    entrypoint: bash -c 'sleep 5 && /cnb/process/web'
    depends_on:
      - govsso-mock
    deploy:
      resources:
        limits:
          memory: 650M
    environment:
      - server.port=11443
      - govsso.client-id=example-client-id
      - govsso.client-secret=secret-a
      - govsso.redirect-uri=https://client.localhost:11443/login/oauth2/code/govsso
      - govsso.post-logout-redirect-uri=https://client.localhost:11443/?show-post-logout-message
      - govsso.issuer-uri=https://govsso-mock.localhost:10443/
      - govsso.trust-store=file:/var/local/config/tls/client/client.localhost.truststore.p12
      - govsso.trust-store-password=changeit
      - example-client.messages.title=GovSSO Client (LOCAL)
      - server.ssl.key-store-type=PKCS12
      - server.ssl.key-store=/var/local/config/tls/client/client.localhost.keystore.p12
      - server.ssl.key-store-password=changeit
      - BPL_JVM_THREAD_COUNT=10
      - SPRING_PROFILES_ACTIVE=govsso
    networks:
      default:
        aliases:
          - client.localhost
    ports:
      - '11443:11443'
    restart: unless-stopped
    volumes:
      # Cannot use more specific folder/files, because client container is created before setup container run is completed.
      - ./config/tls:/var/local/config/tls:ro