idam/docker-compose.yml at master · SYSNET-CZ/idam · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
version: '3.3'

services:
  ldap:
    image: sysnetcz/apacheds
    container_name: ldap
    restart: always
    environment:
      - APACHEDS_VERSION=${DS_VERSION}
      - APACHEDS_ARCH=${DS_ARCH}
      - APACHEDS_ARCHIVE=apacheds-${DS_VERSION}-${DS_ARCH}.deb
      - APACHEDS_PROGRAM_DIR=${DS_PROGRAM_DIR}
      - APACHEDS_DATA_DIR=${DS_DATA_DIR}
      - APACHEDS_USER=${DS_USER}
      - APACHEDS_GROUP=${DS_GROUP}
      - APACHEDS_INSTANCE=${DS_INSTANCE}
      - APACHEDS_INSTANCE_DIR=${DS_INSTANCE_DIR}
    volumes:
      - instance:${DS_INSTANCE_DIR}
    ports:
      - "10389:10389"
    networks:
      - default

  idm_db:
    image: postgres:12.2
    container_name: idm_db
    environment:
      - POSTGRES_PASSWORD_FILE=/run/secrets/mp_database_password.txt
      - POSTGRES_USER=midpoint
      - POSTGRES_INITDB_ARGS=--lc-collate=en_US.utf8 --lc-ctype=en_US.utf8
    ports:
      - "5432:5432"
    networks:
      - default
    secrets:
      - mp_database_password.txt
    volumes:
      - idm_data:/var/lib/postgresql/data

  idm:
    image: evolveum/midpoint:latest
    container_name: midpoint
    depends_on:
      - idm_db
    ports:
      - "8080:8080"
    environment:
      - REPO_DATABASE_TYPE=postgresql
      - REPO_HOST=idm_db
      - REPO_DATABASE=midpoint
      - REPO_USER=midpoint
      - REPO_PASSWORD_FILE=/run/secrets/mp_database_password.txt
      - REPO_MISSING_SCHEMA_ACTION=create
      - REPO_UPGRADEABLE_SCHEMA_ACTION=upgrade
      - MP_KEYSTORE_PASSWORD_FILE=/run/secrets/mp_keystore_password.txt
      - MP_MEM_MAX=2048M
      - MP_MEM_INIT=1024M
      - MP_JAVA_OPTS
      - TIMEZONE=Europe/Prague
    networks:
      - default
    secrets:
      - mp_database_password.txt
      - mp_keystore_password.txt
    volumes:
      - idm_home:/opt/midpoint/var

secrets:
  mp_database_password.txt:
    file: ./configs-and-secrets/midpoint/database_password.txt
  mp_keystore_password.txt:
    file: ./configs-and-secrets/midpoint/keystore_password.txt

volumes:
  instance:
    driver: local
  idm_data:
    driver: local
  idm_home:
    driver: local

networks:
  default:
    external:
      name: elk_elastic