docker-compose.yml

version: "3.9"
volumes:
  #These correspond to the N: folders where
  #the user can place the data to upload
  staging:
    driver: local
    driver_opts:
      o: bind
      type: none
      device: /home/basi/staging
  #This stores the state of openbis, including logs
  openbis-state:
  #Logs for promtail to ingest
  logs:
  #Incoming dropboxes
  openbis-incoming:

networks:
  loki:

services:
  nginx:
    image: nginx:latest
    ports:
    - 8433:443
    hostname: ngnix
    volumes:
      - ./services/nginx/nginx-setup.conf:/etc/nginx/conf.d/default.conf:ro
  worker:
    build:
      context: ./services/
      dockerfile: ./worker/Dockerfile
    depends_on:
      - cache
      - nginx
    hostname: worker
    volumes:
      - ./services/data-discovery/app/datastore/:/datastore
      - ./services/worker/supervisord.conf:/supervisord.conf/
    environment:
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - REDIS_PASSWORD=${REDIS_PASSWORD}
  data-discovery:
    build: 
      context: ./services/
      dockerfile: ./data-discovery/Dockerfile
    volumes:
      - logs:/logs/:rw
      - ./services/data-discovery/app:/app/
      -  staging:/shares/
      - ./services/openbis-configuration/instance_creator:/instance_creator/
    hostname: data-discovery
    ports:
      - "8080:80"
    depends_on:
      - openbis
      - ldap
      - datamover
      - cache 
      - worker
    environment:
      - BASE_PATH=/shares
      - LDAP_SERVER=ldap
      - LDAP_PORT=1389
      - LDAP_PRINCIPAL_NAME=cn=admin,dc=empa,dc=ch
      - LDAP_PRINCIPAL_PASSWORD=password
      - LDAP_BASE=dc=empa,dc=ch
      - OPENBIS_SERVER=https://openbis:443
      - JWS_SECRET_KEY=72f0337b7a0ba5efc612af93bd75e5ff305e329acee0cfa57bd15b843b5789f3
      - CREDENTIALS_STORAGE_KEY=428c9416c004ea21fcfe3480d3b84d92306784bea452d3a249cdcf9e6250eeb8
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - REDIS_PASSWORD=${REDIS_PASSWORD}
  cache:
    image: redis:6.2-alpine
    restart: always
    ports:
      - '6379:6379'
    command: redis-server --save 20 1 --loglevel warning --requirepass eYVX7EwVmmxKPCDmwMtyKVge8oLd2t81
    volumes: 
      - ./builds/cache:/data
    hostname: redis




  datamover:
    build:
      context: ./services/datamover/
    environment:
      - SOURCE=/incoming/
      - DEST=/outgoing/
      - LOG=/transfer.log
    volumes:
      - staging:/incoming/
      - openbis-incoming:/outgoing/
    depends_on:
      - openbis
  ldap:
    image: bitnami/openldap:latest
    environment:
      - BITNAMI_DEBUG=true
      - LDAP_ROOT=dc=empa,dc=ch
      - LDAP_ADMIN_USERNAME=admin 
      - LDAP_ADMIN_PASSWORD=password 
      - LDAP_EXTRA_SCHEMAS=cosine,inetorgperson,nis,memberof
    volumes:
        - './services/ldap/memberof.ldif:/opt/bitnami/openldap/etc/schema/memberof.ldif'
        - ./services/ldap/test_users.ldif:/ldifs/test_users.ldif
    hostname: ldap
    ports:
      - "1389:1389"
      - "1636:1636"

  
  openbis:
    build: ./services/openbis
    environment:
      - SERVER_HOST_PORT=localhost:8443
      - GROUP_ID=1000
      - CORE_PLUGINS=enabled-modules = dataset-uploader, dataset-file-search, xls-import, eln-lims, openbis-ng-ui, search-store, user-management-maintenance
    volumes:      
    #Openbis state
      - openbis-state:/home/openbis/openbis_state/
      - openbis-incoming:/home/openbis/openbis_state/dss_store/incoming
      #External configuration files
      - ./services/openbis/groups.json:/home/openbis/openbis_state/as_etc/groups.json
      - ./services/openbis/as_service.properties:/home/openbis/openbis_state/as_etc/service.properties
      - ./services/openbis/dss_service.properties:/home/openbis/openbis_state/dss_etc/service.properties
      # - logs:/home/openbis/openbis_state/dss_logs/:rw
      # - logs:/home/openbis/openbis_state/as_logs/:rw
      #- dropboxes:/home/openbis/openbis_state/dss_store/eln-lims-dropbox-marker/
    ports:
      - 8443:443
      - 8444:8081
    hostname: openbis
    depends_on:
      - ldap
    healthcheck:
      test: ["CMD", "curl", "openbis:443"]
      interval: 1m30s
      timeout: 30s
      retries: 5
      start_period: 30s

  openbis-initialiser:
    build: 
      context: ./services/
      dockerfile: ./openbis-initialiser/Dockerfile
    depends_on:
      openbis:
        condition: service_healthy
    environment:
      - OPENBIS_URL=openbis
      - OPENBIS_PORT=443
      - OPENBIS_ADMIN_USER=admin
      - OPENBIS_ADMIN_PASSWORD=changeit

  frontend:
    build: 
      context: ./apps/front
      target: "build-stage"
    volumes:
      - ./apps/front/app:/usr/app/
    command: sh -c "npm run dev"
    ports:
      - "8000:5173"
    depends_on:
      - data-discovery

    #Log aggregation to monitor
  #the other containers
  loki:
    image: grafana/loki
    hostname: loki
    ports: 
      - 3100:3100
    volumes:
      - ./services/loki/config.yaml:/etc/loki/local-config.yaml
    networks:
      - loki
    depends_on:
      - openbis
      - data-discovery
      - ldap
      - cache

  promtail:
    image: grafana/promtail:2.6.0
    volumes:
      - logs:/var/log:ro
      - ./services/loki/promtail-config.yaml:/etc/promtail/config.yml
    command: -config.file=/etc/promtail/config.yml
    depends_on:
      - openbis
      - loki

    networks:
      - loki

  grafana:
    image: grafana/grafana:latest
    ports:
      - "3000:3000"
    networks:
      - loki
    depends_on:
      - loki
      - promtail