docker-compose.yml

services:
  db:
    image: postgres:15
    container_name: chpay-db
    environment:
      POSTGRES_DB: chpay
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    volumes:
      - db-data:/var/lib/postgresql/data
    ports:
      - "35432:5432"
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U postgres -d chpay" ]
      interval: 5s
      timeout: 5s
      retries: 20

  pgadmin:
    image: dpage/pgadmin4:9
    container_name: chpay-pgadmin
    entrypoint: ["/bin/sh", "/bootstrap-pgpass.sh"]
    environment:
      PGADMIN_DEFAULT_EMAIL: admin@example.com
      PGADMIN_DEFAULT_PASSWORD: admin
      PGADMIN_CONFIG_SESSION_COOKIE_NAME: "'chpay_pga4_session'"
      PGADMIN_SERVER_JSON_FILE: /pgadmin4/servers.json
      PGADMIN_REPLACE_SERVERS_ON_STARTUP: "True"
      PGADMIN_CONFIG_MASTER_PASSWORD_REQUIRED: "False"
      PGADMIN_CONFIG_SERVER_MODE: "False"
    depends_on:
      - db
    ports:
      - "3081:80"
    volumes:
      - pgadmin-data:/var/lib/pgadmin
      - ./pgadmin/servers.json:/pgadmin4/servers.json:ro
      - ./pgadmin/pgpassfile:/pgpassfile.template:ro
      - ./pgadmin/bootstrap-pgpass.sh:/bootstrap-pgpass.sh:ro

  frontend-dev:
    image: node:20
    container_name: chpay-frontend-dev
    working_dir: /workspace/src/main/frontend
    command: bash -lc "npm install && npm run dev -- --host 0.0.0.0 --port 3084"
    init: true
    tty: true
    stdin_open: true
    ports:
      - "3084:3084"
    volumes:
      - .:/workspace:cached
      - frontend-node-modules:/workspace/src/main/frontend/node_modules
    restart: unless-stopped

  oidc:
    image: xdevsoftware/oidc-server-mock:1.2
    container_name: chpay-oidc
    ports:
      - "3083:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Development

      SERVER_OPTIONS_INLINE: |
        {
          "AccessTokenJwtType": "JWT",
          "Discovery": { "ShowKeySet": true },
          "Authentication": { "CookieSameSiteMode": "Lax", "CheckSessionCookieSameSiteMode": "Lax" }
        }

      IDENTITY_RESOURCES_INLINE: |
        - Name: student
          ClaimTypes:
            - netid
            - study
            - student_number
        - Name: auth
          ClaimTypes:
            - google_groups
            - google_username
        - Name: organization
          ClaimTypes:
            - organization
        - Name: roles
          ClaimTypes:
            - role
            - groups

      USERS_CONFIGURATION_INLINE: |
        [
          {
            "SubjectId": "WISVCH.0001",
            "Username": "christiaan",
            "Password": "pwd",
            "Claims": [
              { "Type": "name",               "Value": "Christiaan Huygens",       "ValueType": "string" },
              { "Type": "given_name",         "Value": "Christiaan",               "ValueType": "string" },
              { "Type": "family_name",        "Value": "Huygens",                  "ValueType": "string" },
              { "Type": "preferred_username", "Value": "christiaanh",              "ValueType": "string" },
              { "Type": "google_username",    "Value": "christiaanh",              "ValueType": "string" },
              { "Type": "email",              "Value": "christiaan@example.com",   "ValueType": "string" },
              { "Type": "email_verified",     "Value": "true",                     "ValueType": "boolean" },
              { "Type": "google_groups",      "Value": "[\"sjaarcie\"]",           "ValueType": "json" },
              { "Type": "netid",              "Value": "c123456",                  "ValueType": "string" },
              { "Type": "study",              "Value": "CE",                       "ValueType": "string" },
              { "Type": "student_number",     "Value": "S000001",                  "ValueType": "string" },
              { "Type": "organization",       "Value": "W.I.S.V. 'Christiaan Huygens'", "ValueType": "string" }
            ]
          },
          {
            "SubjectId": "WISVCH.0002",
            "Username": "constantijn",
            "Password": "pwd",
            "Claims": [
              { "Type": "name",               "Value": "Constantijn Huygens",      "ValueType": "string" },
              { "Type": "given_name",         "Value": "Constantijn",              "ValueType": "string" },
              { "Type": "family_name",        "Value": "Huygens",                  "ValueType": "string" },
              { "Type": "preferred_username", "Value": "constantijnh",             "ValueType": "string" },
              { "Type": "google_username",    "Value": "constantijnh",             "ValueType": "string" },
              { "Type": "email",              "Value": "constantijn@example.com",  "ValueType": "string" },
              { "Type": "email_verified",     "Value": "true",                     "ValueType": "boolean" },
              { "Type": "google_groups",      "Value": "[\"sjaarcie\", \"beheer\"]", "ValueType": "json" },
              { "Type": "netid",              "Value": "c654321",                  "ValueType": "string" },
              { "Type": "study",              "Value": "CE",                       "ValueType": "string" },
              { "Type": "student_number",     "Value": "S000002",                  "ValueType": "string" },
              { "Type": "organization",       "Value": "W.I.S.V. 'Christiaan Huygens'", "ValueType": "string" }
            ]
          }
        ]

      CLIENTS_CONFIGURATION_INLINE: |
        [
          {
            "ClientId": "chpay.devcontainer",
            "Description": "CHPay Spring Boot devcontainer client",
            "AllowedGrantTypes": ["authorization_code"],
            "RequirePkce": false,
            "RequireClientSecret": false,
            "AllowAccessTokensViaBrowser": true,
            "RedirectUris": ["*"],
            "PostLogoutRedirectUris": ["*"],
            "AllowedScopes": ["openid","profile","email","phone","address","student","auth","organization","roles"],
            "IdentityTokenLifetime": 600,
            "AccessTokenLifetime": 3600,
            "AlwaysIncludeUserClaimsInIdToken": true
          }
        ]


volumes:
  db-data:
  frontend-node-modules:
  pgadmin-data: