docker-compose.server.yml

version: "3"

networks:
  frontend:
    external: true
  app:
    driver: bridge
    internal: false

services:
  api:
    image: itkdev/os2display-api-service:${COMPOSE_VERSION}
    restart: unless-stopped
    networks:
      - app
    environment:
      # PHP config values
      - PHP_MAX_EXECUTION_TIME=${PHP_MAX_EXECUTION_TIME}
      - PHP_MEMORY_LIMIT=${PHP_MEMORY_LIMIT}
      - PHP_POST_MAX_SIZE=${PHP_POST_MAX_SIZE}
      - PHP_UPLOAD_MAX_FILESIZE=${PHP_UPLOAD_MAX_FILESIZE}
      # APP (Symfony)
      - APP_SECRET=${APP_SECRET:?err}
      - APP_DATABASE_URL=${APP_DATABASE_URL:?err}
      - APP_JWT_PASSPHRASE=${APP_JWT_PASSPHRASE:?err}
      - APP_JWT_TOKEN_TTL=${APP_JWT_TOKEN_TTL}
      - APP_JWT_REFRESH_TOKEN_TTL=${APP_JWT_REFRESH_TOKEN_TTL}
      - APP_ENV=${APP_ENV}
      - APP_TRUSTED_PROXIES=${APP_TRUSTED_PROXIES}
      - APP_CORS_ALLOW_ORIGIN=${APP_CORS_ALLOW_ORIGIN}
      - APP_DEFAULT_DATE_FORMAT=${APP_DEFAULT_DATE_FORMAT}
      - APP_OIDC_METADATA_URL=${OIDC_METADATA_URL}
      - APP_OIDC_CLIENT_ID=${OIDC_CLIENT_ID}
      - APP_OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET}
      - APP_OIDC_REDIRECT_URI=${OIDC_REDIRECT_URI}
      - APP_OIDC_LEEWAY=${OIDC_LEEWAY}
      - APP_REDIS_CACHE_PREFIX=${APP_REDIS_CACHE_PREFIX}
      - APP_REDIS_CACHE_DSN=${APP_REDIS_CACHE_DSN}

    volumes:
      - ./jwt:/var/www/html/config/jwt:rw
      - ./media:/var/www/html/public/media:rw
    depends_on:
      - mariadb

  nginx-api:
    image: itkdev/os2display-api-service-nginx:${COMPOSE_VERSION}
    restart: unless-stopped
    networks:
      - app
      - frontend
    environment:
      - PHP_FPM_SERVER=api
      - NGINX_FPM_UPLOAD_MAX=${NGINX_FPM_UPLOAD_MAX}
    depends_on:
      - api
    ports:
      - '80'
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend"
      - "traefik.http.routers.apios2display-http.rule=Host(`${COMPOSE_SERVER_DOMAIN}`)"
      - "traefik.http.routers.apios2display-http.entrypoints=web"
      - "traefik.http.routers.apios2display-http.middlewares=redirect-to-https"
      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
      - "traefik.http.routers.apios2display.rule=Host(`${COMPOSE_SERVER_DOMAIN}`)"
      - "traefik.http.routers.apios2display.entrypoints=websecure"
      # Redirect root / request to /${COMPOSE_ADMIN_CLIENT_PATH}
      - "traefik.http.routers.apios2display.middlewares=redirect-to-admin"
      - "traefik.http.middlewares.redirect-to-admin.redirectregex.regex=^https:\\/\\/([^\\/]+)\\/?$$"
      - "traefik.http.middlewares.redirect-to-admin.redirectregex.replacement=https://$$1${COMPOSE_ADMIN_CLIENT_PATH}"
      # - "traefik.http.routers.apios2display.middlewares=apios2display"
      # - "traefik.http.middlewares.apios2display.ipwhitelist.sourcerange=212.10.60.163, 10.225.0.0/16"
      # - "traefik.http.routers.${COMPOSE_PROJECT_NAME}.middlewares=ITKBasicAuth@file"
    volumes:
      - ./media:/var/www/html/public/media:rw

  admin:
    image: itkdev/os2display-admin-client:${COMPOSE_VERSION}
    restart: unless-stopped
    networks:
      - app
      - frontend
    environment:
      - APP_ADMIN_CLIENT_PATH=${COMPOSE_ADMIN_CLIENT_PATH}
      - API_PATH=${API_PATH}
      - APP_TOUCH_BUTTON_REGIONS=${APP_TOUCH_BUTTON_REGIONS}
    ports:
      - '80'
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend"
      - "traefik.http.routers.adminos2display-http.rule=Host(`${COMPOSE_SERVER_DOMAIN}`) && PathPrefix(`${COMPOSE_ADMIN_CLIENT_PATH}`)"
      - "traefik.http.routers.adminos2display-http.entrypoints=web"
      - "traefik.http.routers.adminos2display-http.middlewares=redirect-to-https"
      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
      - "traefik.http.routers.adminos2display.rule=Host(`${COMPOSE_SERVER_DOMAIN}`) && PathPrefix(`${COMPOSE_ADMIN_CLIENT_PATH}`)"
      - "traefik.http.routers.adminos2display.entrypoints=websecure"
      # - "traefik.http.routers.adminos2display.middlewares=apios2display"
      # - "traefik.http.routers.${COMPOSE_PROJECT_NAME}.middlewares=ITKBasicAuth@file"

  client:
    image: itkdev/os2display-client:${COMPOSE_VERSION}
    restart: unless-stopped
    networks:
      - app
      - frontend
    environment:
      - APP_SCREEN_CLIENT_PATH=${COMPOSE_SCREEN_CLIENT_PATH:?err}
      - APP_API_PATH=${APP_API_PATH:?err}
      - APP_API_AUTHENTICATION_ENDPOINT=${APP_API_AUTHENTICATION_ENDPOINT}
      - APP_API_AUTHENTICATION_REFRESH_ENDPOINT=${APP_API_AUTHENTICATION_REFRESH_ENDPOINT}
      - APP_DATA_PULL_INTERVAL=${APP_DATA_PULL_INTERVAL}
      - APP_SCHEDULING_INTERVAL=${APP_SCHEDULING_INTERVAL}
      - APP_DEBUG=${APP_DEBUG}
    ports:
      - '80'
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend"
      - "traefik.http.routers.clientos2display-http.rule=Host(`${COMPOSE_SERVER_DOMAIN}`) && PathPrefix(`${COMPOSE_SCREEN_CLIENT_PATH}`)"
      - "traefik.http.routers.clientos2display-http.entrypoints=web"
      - "traefik.http.routers.clientos2display-http.middlewares=redirect-to-https"
      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
      - "traefik.http.routers.clientos2display.rule=Host(`${COMPOSE_SERVER_DOMAIN}`) && PathPrefix(`${COMPOSE_SCREEN_CLIENT_PATH}`)"
      - "traefik.http.routers.clientos2display.entrypoints=websecure"
      # - "traefik.http.routers.clientos2display.middlewares=apios2display"
      # - "traefik.http.routers.${COMPOSE_PROJECT_NAME}.middlewares=ITKBasicAuth@file"

  redis:
    image: 'redis:6'
    restart: unless-stopped
    networks:
      - app
    ports:
      - '6379'