weiss/docker-compose.yml at main · weiss-controls/weiss · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
services:
  weiss:
    build:
      context: "."
      target: prod
      args:
        VITE_DEMO_MODE: ${VITE_DEMO_MODE}
    ports:
      - "${HTTP_PORT:-80}:8081"
      - "${HTTPS_PORT:-443}:8082"
    image: weiss:${DOCKER_TAG:-latest}
    container_name: weiss
    restart: always
    environment:
      NODE_ENV: production
      ENABLE_HTTPS: ${ENABLE_HTTPS:-false}
      SSL_CERT_FILE: ${SSL_CERT_FILE:-./nginx/certs/example-fullchain.pem}
      SSL_KEY_FILE: ${SSL_KEY_FILE:-./nginx/certs/example-privkey.pem}
      APP_HOSTNAME: ${APP_HOSTNAME}
      DOCS_HOSTNAME: ${DOCS_HOSTNAME:-}
    volumes:
      - ${SSL_CERT_FILE}:/etc/nginx/certs/fullchain.pem:ro
      - ${SSL_KEY_FILE}:/etc/nginx/certs/privkey.pem:ro
    extra_hosts:
      - "weiss-epicsws:host-gateway"
    networks:
      - default
      - weiss-public
    depends_on:
      - weiss-epicsws

  weiss-epicsws:
    build:
      context: ./backend/epicsWS
    image: weiss-epicsws:${DOCKER_TAG:-latest}
    container_name: weiss-epicsws
    network_mode: host
    restart: always
    environment:
      EPICS_DEFAULT_PROTOCOL: ${EPICS_DEFAULT_PROTOCOL}
      EPICS_CA_ADDR_LIST: ${EPICS_CA_ADDR_LIST}
      EPICS_CA_AUTO_ADDR_LIST: ${EPICS_CA_AUTO_ADDR_LIST}
      EPICS_CA_MAX_ARRAY_BYTES: ${EPICS_CA_MAX_ARRAY_BYTES}
      EPICS_PVA_ADDR_LIST: ${EPICS_PVA_ADDR_LIST}
      EPICS_PVA_AUTO_ADDR_LIST: ${EPICS_PVA_AUTO_ADDR_LIST}

  weiss-api:
    build:
      context: ./backend/api
    volumes:
      - storage:/app/storage
      - ${ROLES_CONFIG_FILE:-./roles.toml}:/config/roles.toml:ro
    image: weiss-api:${DOCKER_TAG:-latest}
    container_name: weiss-api
    ports:
      - "8000:8000"
    restart: always
    environment:
      MS_AUTH_CLIENT_ID: ${MS_AUTH_CLIENT_ID}
      MS_AUTH_TENANT_ID: ${MS_AUTH_TENANT_ID}
      MS_AUTH_CLIENT_SECRET: ${MS_AUTH_CLIENT_SECRET}
      APP_HOSTNAME: ${APP_HOSTNAME}
      ENABLE_HTTPS: ${ENABLE_HTTPS:-false}
      TECHNICAL_ACCOUNT_TOKEN: ${TECHNICAL_ACCOUNT_TOKEN}
      TECHNICAL_ACCOUNT_USERNAME: ${TECHNICAL_ACCOUNT_USERNAME}
      TECHNICAL_ACCOUNT_EMAIL: ${TECHNICAL_ACCOUNT_EMAIL}
      ROLES_CONFIG_PATH: /config/roles.toml

volumes:
  storage:

networks:
  default:
    driver: bridge
  weiss-public:
    name: weiss-public
    driver: bridge