docker-compose.yml

version: '3.3'
services:
    certs:
        container_name: oe-certs
        image: itechuw/certgen:main
        platform: linux/amd64
        restart: "no"
        # Gives the install its own TLS key on first start and keeps the stores built from it.
        entrypoint: ["/bin/sh", "/ensure-install-keys.sh"]
        environment:
            - KEYSTORE_PW=${SSL_KEYSTORE_PASSWORD:-kspass}
            - TRUSTSTORE_PW=${SSL_TRUSTSTORE_PASSWORD:-tspass}
        networks:
            - default
        volumes:
            -  key_trust-store-volume:/etc/openelis-global
            -  keys-vol:/etc/ssl/private/
            -  certs-vol:/etc/ssl/certs/
            -  ./scripts/certs/ensure-install-keys.sh:/ensure-install-keys.sh:ro

    db.openelis.org:
        container_name: openelisglobal-database 
        image: itechuw/openelis-global-2-database:develop
        platform: linux/amd64
        ports:
            - "15432:5432"
        restart: always
        env_file:
            - ./volume/database/database.env
        environment:
            - DB_PASSWORD=${OE_DB_PASSWORD:-clinlims}
            - DB_SUPERUSER_PASSWORD=${ADMIN_PASSWORD:-superuser}
        volumes:
              # preserves the database between containers
             - db-data:/var/lib/postgresql/data                
        networks:
            - default
        healthcheck:
            test: [ "CMD", "pg_isready", "-q", "-d", "clinlims", "-U", "clinlims" ]
            timeout: 45s
            interval: 10s
            retries: 10 
            
    oe.openelis.org:
        container_name: openelisglobal-webapp 
        image: itechuw/openelis-global-2:develop   
        platform: linux/amd64 
        depends_on:
            db.openelis.org:
                condition: service_started
            certs:
                condition: service_completed_successfully
        ports:
            - "${OE_WEBAPP_HTTP_PORT:-8080}:8080"
            - "${OE_WEBAPP_HTTPS_PORT:-8443}:8443"
        restart: always
        networks:
          default:
              ipv4_address: 172.20.1.121

        environment:
            - DEFAULT_PW=adminADMIN! 
            - TZ=${TZ:-UTC}
            - OE_ENCRYPTION_PASSWORD=${OE_ENCRYPTION_PASSWORD:-}
            - SSL_KEYSTORE_PASSWORD=${SSL_KEYSTORE_PASSWORD:-kspass}
            - SSL_TRUSTSTORE_PASSWORD=${SSL_TRUSTSTORE_PASSWORD:-tspass}
              # context.xml doesn't seem to be able to pick up environment variables directly, so we are passing them in as CATALINA_OPTS
            - CATALINA_OPTS=-Ddatasource.url=jdbc:postgresql://db.openelis.org:5432/clinlims -Ddatasource.username=clinlims -Ddatasource.password=${OE_DB_PASSWORD:-clinlims} -Doe.ssl.truststorepath=${SSL_TRUSTSTORE_PATH:-/etc/openelis-global/truststore} -Doe.ssl.truststorepassword=${SSL_TRUSTSTORE_PASSWORD:-tspass} -Doe.ssl.keystorepath=${SSL_KEYSTORE_PATH:-/etc/openelis-global/keystore} -Doe.ssl.keystorepassword=${SSL_KEYSTORE_PASSWORD:-kspass}
        volumes:
            -  key_trust-store-volume:/etc/openelis-global
            - ./volume/lucene:/var/lib/lucene_index
            - ./volume/analyzer/analyzer-test-map.csv:/var/lib/openelis-global/analyzer/analyzer-test-map.csv
            - ./volume/properties/SystemConfiguration.properties:/var/lib/openelis-global/properties/SystemConfiguration.properties
            - ./volume/odoo/odoo-test-product-mapping.csv:/var/lib/openelis-global/odoo/odoo-test-product-mapping.csv
            - ./configuration:/var/lib/openelis-global/configuration
            - reporting-data:/var/lib/openelis-global/reporting
            - ./volume/translation:/var/lib/openelis-global/translation:ro
        secrets:
            - source: common.properties
            
    fhir.openelis.org:
        container_name: external-fhir-api
        image: itechuw/openelis-global-2-fhir:develop
        platform: linux/amd64
        depends_on:
            db.openelis.org:
                condition: service_started
            certs:
                condition: service_completed_successfully
        ports:
            - "${OE_FHIR_HTTP_PORT:-8081}:8080"
            - "${OE_FHIR_HTTPS_PORT:-8444}:8443"
        networks:
            - default
        restart: always
        environment:
          TZ: ${TZ:-UTC}
          
          JAVA_OPTS: "-Djavax.net.ssl.trustStore=${SSL_TRUSTSTORE_PATH:-/etc/openelis-global/truststore}
                      -Djavax.net.ssl.trustStorePassword=${SSL_TRUSTSTORE_PASSWORD:-tspass}
                      -Djavax.net.ssl.trustStoreType=pkcs12
                      -Djavax.net.ssl.keyStore=${SSL_KEYSTORE_PATH:-/etc/openelis-global/keystore}
                      -Djavax.net.ssl.keyStorePassword=${SSL_KEYSTORE_PASSWORD:-kspass}
                      -Djavax.net.ssl.keyStoreType=pkcs12"
          CATALINA_OPTS: "-Dhapi.ssl.truststorepath=${SSL_TRUSTSTORE_PATH:-/etc/openelis-global/truststore} -Dhapi.ssl.truststorepassword=${SSL_TRUSTSTORE_PASSWORD:-tspass} -Dhapi.ssl.keystorepath=${SSL_KEYSTORE_PATH:-/etc/openelis-global/keystore} -Dhapi.ssl.keystorepassword=${SSL_KEYSTORE_PASSWORD:-kspass}"  
          FHIR_DATASOURCE_URL : "jdbc:postgresql://db.openelis.org:5432/clinlims?currentSchema=clinlims"
          FHIR_DATASOURCE_USERNAME: "clinlims"
          FHIR_DATASOURCE_PASSWORD: ${OE_DB_PASSWORD:-clinlims}
          FHIR_SERVER_ADRESS: "http://fhir.openelis.org:8080/fhir/"      
        volumes:
            -  key_trust-store-volume:/etc/openelis-global
        
    frontend.openelis.org:
        image: itechuw/openelis-global-2-frontend:develop
        container_name: openelisglobal-front-end
        platform: linux/amd64
        networks:
            - default
        environment:
            - CHOKIDAR_USEPOLLING=true
        tty: true

    proxy:
        image: itechuw/openelis-global-2-proxy:develop
        container_name: openelisglobal-proxy
        platform: linux/amd64
        ports:
            - "${OE_HTTP_PORT:-80}:80"
            - "${OE_HTTPS_PORT:-443}:443"
        environment:
            - OE_HTTPS_PORT=${OE_HTTPS_PORT:-443}
        command:
            - /bin/sh
            - -c
            - "envsubst '$$OE_HTTPS_PORT' < /etc/nginx/nginx.conf.template > /etc/nginx/nginx.conf && exec nginx -g 'daemon off;'"
        volumes:
            - certs-vol:/etc/nginx/certs/
            - keys-vol:/etc/nginx/keys/
            - ./volume/nginx/nginx-prod.conf:/etc/nginx/nginx.conf.template:ro
        networks:
            - default
        restart: unless-stopped
        depends_on:
            certs:
                condition: service_completed_successfully
            
secrets:
  common.properties:
    file:  ./volume/properties/common.properties     

networks:
  default:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.1.0/24  
        
volumes:
  db-data:
  key_trust-store-volume:
  certs-vol:
  keys-vol:
  reporting-data: