docker-compose-dev.yml

---
name: kitconcept-website

x-frontend: &frontend
  image: ghcr.io/kitconcept/kitconcept-website-frontend:latest
  pull_policy: build
  build:
    context: ./frontend
    args:
      - VOLTO_VERSION=${VOLTO_VERSION:-latest}
  platform: linux/amd64
  environment:
    RAZZLE_INTERNAL_API_PATH: http://backend:8080/Plone

x-frontend-tests: &frontend-tests
  <<: *frontend
  ports:
    - 3000:3000

x-backend: &backend
  image: ghcr.io/kitconcept/kitconcept-website-backend:latest
  pull_policy: build
  build:
    context: ./backend
    args:
      - PYTHON_VERSION=${PYTHON_VERSION:-3.12}
  platform: linux/amd64

x-backend-acceptance: &backend-acceptance
  <<: *backend
  image: ghcr.io/kitconcept/kitconcept-website-acceptance:latest
  build:
    context: ./backend
    dockerfile: Dockerfile.acceptance
    args:
      - PYTHON_VERSION=${PYTHON_VERSION:-3.12}
  pull_policy: build

x-solr: &solr
  image: ghcr.io/kitconcept/solr:latest
  platform: linux/amd64
  ports:
    - 8983:8983
  volumes:
    - vol-solr-data:/var/solr/data
  command:
    - solr-precreate
    - plone
    - /plone-config

services:

  traefik:
    image: traefik:v2.11
    profiles: ["dev"]

    ports:
      - 80:80

    labels:
      - traefik.enable=true
      - traefik.constraint-label=public
      - traefik.http.routers.traefik-public-http.rule=Host(`traefik.site.localhost`)
      - traefik.http.routers.traefik-public-http.entrypoints=http
      - traefik.http.routers.traefik-public-http.service=api@internal
      - traefik.http.services.traefik-public.loadbalancer.server.port=8000

      # GENERIC MIDDLEWARES
      - traefik.http.middlewares.gzip.compress=true
      - traefik.http.middlewares.gzip.compress.excludedcontenttypes=image/png, image/jpeg, font/woff2

    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro

    command:
      - --providers.docker
      - --providers.docker.constraints=Label(`traefik.constraint-label`, `public`)
      - --providers.docker.exposedbydefault=false
      - --entrypoints.http.address=:80
      - --accesslog
      - --log
      - --api

  frontend:
    <<: *frontend
    profiles: ["dev"]
    depends_on:
      - backend
    labels:
      - traefik.enable=true
      - traefik.constraint-label=public
      # Service
      - traefik.http.services.svc-frontend.loadbalancer.server.port=3000
      # Routers
      ## /
      - traefik.http.routers.rt-frontend.rule=Host(`site.localhost`)
      - traefik.http.routers.rt-frontend.entrypoints=http
      - traefik.http.routers.rt-frontend.service=svc-frontend
      - traefik.http.routers.rt-frontend.middlewares=gzip

  backend:
    <<: *backend
    profiles: ["dev"]
    environment:
      RELSTORAGE_DSN: "dbname='${DB_NAME:-plone}' user='${DB_NAME:-plone}' host='${DB_HOST:-db}' password='${DB_PASSWORD:-OwAaOExRfIvY}' port='${DB_PORT:-5432}'"
    depends_on:
      - db
      - solr
    labels:
      - traefik.enable=true
      - traefik.constraint-label=public
      # Services
      - traefik.http.services.svc-backend.loadbalancer.server.port=8080

      # Middlewares
      ## VHM rewrite /++api++/
      - "traefik.http.middlewares.mw-backend-vhm-api.replacepathregex.regex=^/\\+\\+api\\+\\+($$|/.*)"
      - "traefik.http.middlewares.mw-backend-vhm-api.replacepathregex.replacement=/VirtualHostBase/http/site.localhost/Plone/++api++/VirtualHostRoot$$1"

      ## VHM rewrite /ClassicUI/
      - "traefik.http.middlewares.mw-backend-vhm-classic.replacepathregex.regex=^/ClassicUI($$|/.*)"
      - "traefik.http.middlewares.mw-backend-vhm-classic.replacepathregex.replacement=/VirtualHostBase/http/site.localhost/Plone/VirtualHostRoot/_vh_ClassicUI$$1"

      ## Basic Authentication
      ### Note: all dollar signs in the hash need to be doubled for escaping.
      ### To create user:password pair, it's possible to use this command:
      ### echo $(htpasswd -nb user password) | sed -e s/\\$/\\$\\$/g
      ### Defaults to admin:admin
      - traefik.http.middlewares.mw-backend-auth.basicauth.users=admin:$$apr1$$uZPT5Fgu$$AmlIdamxT5ipBvPlsdfD70
      # Routers
      - traefik.http.routers.rt-backend-api.rule=Host(`site.localhost`) && (PathPrefix(`/++api++`))
      - traefik.http.routers.rt-backend-api.entrypoints=http
      - traefik.http.routers.rt-backend-api.service=svc-backend
      - traefik.http.routers.rt-backend-api.middlewares=gzip,mw-backend-vhm-api
      ## /ClassicUI
      - traefik.http.routers.rt-backend-classic.rule=Host(`site.localhost`) && PathPrefix(`/ClassicUI`)
      - traefik.http.routers.rt-backend-classic.entrypoints=http
      - traefik.http.routers.rt-backend-classic.service=svc-backend
      - traefik.http.routers.rt-backend-classic.middlewares=gzip,mw-backend-auth,mw-backend-vhm-classic
      ## Site Admin
      - traefik.http.routers.rt-backend-zmi.rule=Host(`site-admin.localhost`)
      - traefik.http.routers.rt-backend-zmi.entrypoints=http
      - traefik.http.routers.rt-backend-zmi.service=svc-backend
      - traefik.http.routers.rt-backend-zmi.middlewares=gzip

  db:
    image: postgres:14
    profiles: ["dev"]
    environment:
      POSTGRES_USER: plone
      POSTGRES_PASSWORD: OwAaOExRfIvY
      POSTGRES_DB: plone
    volumes:
      - vol-site-data:/var/lib/postgresql/data

  solr:
    <<: *solr
    profiles: ["dev"]

  frontend-acceptance:
    <<: *frontend-tests
    profiles: ["acceptance"]
    environment:
      RAZZLE_INTERNAL_API_PATH: http://backend-acceptance:55001/plone
    depends_on:
      - backend-acceptance

  backend-acceptance:
    <<: *backend-acceptance
    profiles: ["acceptance"]
    ports:
      - 55001:55001

  frontend-a11y:
    <<: *frontend-tests
    profiles: ["a11y"]
    environment:
      RAZZLE_INTERNAL_API_PATH: http://backend-a11y:8080/plone
    depends_on:
      - backend-a11y

  backend-a11y:
    <<: *backend
    profiles: ["a11y"]
    environment:
      SITE: plone
    ports:
      - 8080:8080

volumes:
  vol-site-data: {}
  vol-solr-data: {}