mirror of
https://github.com/f-eld-ch/sitrep.git
synced 2025-12-19 08:15:42 +01:00
fc4b63105e
* feat: small backend to move away from oauth2-proxy * fix: adjust local development files * feat(backend): set proper cache-control headers * feat(otel): add otel telemetry to server * feat: add otel * feat(ui): change version embedding * fix(backend): add proper legacy OAUTH2_PROXY_ env variables for OIDC * chore: adjust gh action pipeline * fix: add git-rev-sync dependency * chore: optimize ui build * fix: make ports configurable * fix(server): properly derive cookie key from input * chore: remove legacy docker services * fix: minor fixes of logging * fix: update stats * fix(server): disable request logging
79 lines
2.3 KiB
YAML
79 lines
2.3 KiB
YAML
name: sitrep
|
|
services:
|
|
graphql-engine:
|
|
depends_on:
|
|
postgres:
|
|
condition: service_started
|
|
dex:
|
|
condition: service_started
|
|
environment:
|
|
HASURA_GRAPHQL_ADMIN_SECRET: ${HASURA_GRAPHQL_ADMIN_SECRET}
|
|
HASURA_GRAPHQL_DEV_MODE: "true"
|
|
HASURA_GRAPHQL_ENABLE_CONSOLE: "false"
|
|
HASURA_GRAPHQL_ENABLED_LOG_TYPES: startup, http-log, webhook-log, websocket-log, query-log
|
|
HASURA_GRAPHQL_JWT_SECRET: '{"jwk_url": "http://dex:5556/dex/keys" ,"header":{"type":"Authorization"},"claims_map":{"x-hasura-user-id":{"path":"$.sub"},"x-hasura-email":{"path":"$.email"},"x-hasura-allowed-roles":["viewer","editor"],"x-hasura-default-role":"editor"}}'
|
|
HASURA_GRAPHQL_METADATA_DATABASE_URL: postgres://postgres:${POSTGRES_PASSWORD}@postgres:5432/postgres
|
|
HASURA_GRAPHQL_UNAUTHORIZED_ROLE: anonymous
|
|
PG_DATABASE_URL: postgres://postgres:${POSTGRES_PASSWORD}@postgres:5432/postgres
|
|
build:
|
|
dockerfile: Dockerfile.hasura
|
|
networks:
|
|
default: null
|
|
ports:
|
|
- mode: ingress
|
|
target: 8080
|
|
published: "8080"
|
|
protocol: tcp
|
|
restart: always
|
|
postgres:
|
|
environment:
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
image: postgres:16
|
|
networks:
|
|
default: null
|
|
restart: always
|
|
volumes:
|
|
- type: volume
|
|
source: db_data
|
|
target: /var/lib/postgresql/data
|
|
volume: {}
|
|
ports:
|
|
- mode: ingress
|
|
target: 5432
|
|
published: "5432"
|
|
protocol: tcp
|
|
dex:
|
|
image: docker.io/dexidp/dex:latest
|
|
environment:
|
|
OAUTH2_PROXY_CLIENT_ID: ${OAUTH2_PROXY_CLIENT_ID}
|
|
OAUTH2_PROXY_CLIENT_SECRET: ${OAUTH2_PROXY_CLIENT_SECRET}
|
|
DEX_CONNECTORS_ENABLE_MOCK: "true"
|
|
DEX_CONNECTORS_ENABLE_DEMO_USER: "true"
|
|
DEX_ISSUER: http://localhost:5556/dex
|
|
networks:
|
|
default: null
|
|
command: dex serve /etc/dex/config-demo.yaml
|
|
volumes:
|
|
- "./example/dexidp/config-demo.yaml:/etc/dex/config-demo.yaml:Z"
|
|
- type: volume
|
|
source: dex_data
|
|
target: /var/dex
|
|
volume: {}
|
|
ports:
|
|
- mode: ingress
|
|
target: 5556
|
|
published: "5556"
|
|
protocol: tcp
|
|
- mode: ingress
|
|
target: 5557
|
|
published: "5557"
|
|
protocol: tcp
|
|
networks:
|
|
default:
|
|
name: sitrep_default
|
|
volumes:
|
|
db_data:
|
|
name: sitrep_db_data
|
|
dex_data:
|
|
name: sitrep_dex_data
|