version: '2.4'

services:
  parapheur-nginx:
    image: gitlab.libriciel.fr:4567/libriciel/pole-signature/i-parapheur-4/iparapheur-nginx:master
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      # Confs
      - ./conf/certs:/etc/nginx/ssl
      # Logs
      - ./logs/nginx:/var/log/nginx
    environment:
      - AUTO_SIGNED=1
      - PARAPHEUR_URL=${PARAPHEUR_BASE_URL:-iparapheur.dom.local}
      - PARAPHEUR_SECURE_URL=secure-${PARAPHEUR_BASE_URL:-iparapheur.dom.local}
      - PARAPHEUR_MOBILE_URL=m.${PARAPHEUR_BASE_URL:-iparapheur.dom.local}

  parapheur-core:
    image: gitlab.libriciel.fr:4567/libriciel/pole-signature/i-parapheur-4/iparapheur-core:master
    restart: unless-stopped
    mem_limit: 3G
    volumes:
      # Data
      - ./data/alf_data:/usr/local/tomcat/alf_data
      - ./data/xwv-shared:/var/tmp/bl-xemwebviewer/xwv-shared
      - ./data/temp:/usr/local/tomcat/temp
      # Confs
      - ./conf/alfresco-global.properties:/usr/local/tomcat/shared/classes/alfresco-global.tpl
      - ./conf/keycloak.json:/usr/local/tomcat/shared/keycloak.json
      - ./conf/ldap:/usr/local/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/ldap
      # Logs
      - ./logs/alfresco:/usr/local/tomcat/logs
      # Dev
      # - ./iparapheur-amp/target/iparapheur-amp-4.7.15-for-Alf3.4.c.war:/usr/local/tomcat/webapps/alfresco.war
    environment:
      - JVM_MEMORY="${PARAPHEUR_MEMORY:-3G}"
      - PARAPHEUR_URL=${PARAPHEUR_BASE_URL:-iparapheur.dom.local}
      - PARAPHEUR_SECURE_URL=secure-${PARAPHEUR_BASE_URL:-iparapheur.dom.local}
      - MULTITENANT_ENABLED=${MULTITENANT_ENABLED:-false}
      - KEYCLOAK_AUTH_ENABLED=${KEYCLOAK_AUTH_ENABLED:-false}
      - CAS_AUTH_ENABLED=${CAS_AUTH_ENABLED:-false}
      - TRUSTSTORE_URLS=${TRUSTSTORE_URLS:-}
      # Dev
      # - JPDA_ADDRESS=5005
      # - JPDA_TRANSPORT=dt_socket
    entrypoint: ["/usr/local/tomcat/bin/catalina.sh", "jpda", "run"]
    extra_hosts:
      - "secure-${PARAPHEUR_BASE_URL:-iparapheur.dom.local}:host-gateway"
    depends_on:
      - parapheur-db
      - redis
    ports:
      - "127.0.0.1:8080:8080"
      # Dev
      # - "5005:5005"

  parapheur-web:
    image: gitlab.libriciel.fr:4567/libriciel/pole-signature/i-parapheur-4/iparapheur-web:master
    restart: unless-stopped
    mem_limit: 1G
    volumes:
      # Confs
      - ./conf/iparapheur-global.properties:/usr/local/tomcat/shared/classes/iparapheur-global.tpl
      - ./conf/alfresco-global.properties:/usr/local/tomcat/shared/classes/alfresco-global.tpl
      - ./conf/iparapheur.xml:/usr/local/tomcat/webapps/iparapheur/WEB-INF/web.xml
      - ./conf/login-config.json:/usr/local/tomcat/shared/login-config.json
      - ./conf/keycloak.json:/usr/local/tomcat/shared/keycloak.json
      # Dev
      # - ../iparapheur-web/iparapheur-surf-webapp/target/iparapheur-surf-webapp-4.7.13.war:/usr/local/tomcat/webapps/iparapheur.war
    environment:
      - JVM_MEMORY=1G
      - PARAPHEUR_URL=${PARAPHEUR_BASE_URL:-iparapheur.dom.local}
      - PARAPHEUR_SCHEME=${PARAPHEUR_SCHEME:-https}
      - PARAPHEUR_SECURE_URL=secure-${PARAPHEUR_BASE_URL:-iparapheur.dom.local}
      - KEYCLOAK_AUTH_ENABLED=${KEYCLOAK_AUTH_ENABLED:-false}
      - CAS_AUTH_ENABLED=${CAS_AUTH_ENABLED:-false}
      - CAS_BASE_URL=${CAS_BASE_URL:-}
      - CAS_LOGIN_PATH=${CAS_LOGIN_PATH:-}
      - TRUSTSTORE_URLS=${TRUSTSTORE_URLS:-}

  parapheur-db:
    image: mariadb:10.8.3
    restart: unless-stopped
    environment:
      - MARIADB_USER=alfresco
      - MARIADB_PASSWORD=alfresco
      - MARIADB_DATABASE=alfresco
      - MARIADB_RANDOM_ROOT_PASSWORD=true
    volumes:
      # Data
      - ./data/mysql:/var/lib/mysql
      # Confs
      - ./conf/iParapheur-mysql.cnf:/etc/mysql/conf.d/iParapheur-mysql.cnf

  pes-viewer:
    image: registry.libriciel.fr:443/public/signature/pes-viewer:2.0.5
    restart: unless-stopped
    mem_limit: 1536M
    environment:
      - SERVER_SERVLET_CONTEXT_PATH=/bl-xemwebviewer
      - MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE=health
      - SERVER_FORWARD_HEADERS_STRATEGY=FRAMEWORK
    volumes:
      # Data
      - ./data/pes-viewer/pesPJ:/pesPJ/
      - ./data/xwv-shared:/var/tmp/bl-xemwebviewer/xwv-shared

  crypto:
    image: registry.libriciel.fr:443/public/signature/crypto:3.0.14
    restart: unless-stopped
    mem_limit: 1G
    environment:
      - MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE=health
      - PADES_FLAG_NEEDAPPEARANCES_REMOVE=true
    ports:
      - '127.0.0.1:8004:8080'

  pdf-stamp:
    image: registry.libriciel.fr/public/signature/pdf-stamp:2.7.0
    restart: unless-stopped
    mem_limit: 512M
    environment:
      - MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE=health

  pastell-connector:
    image: registry.libriciel.fr/public/signature/pastell-connector:1.4.0-LEGACY
    restart: unless-stopped
    mem_limit: 512M
    environment:
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE=health
      - PASTELL_CONNECTOR_SCHEDULER_GET_PASTELL_DOCUMENTS_RATE_SECONDS=600
      - PASTELL_CONNECTOR_REDIS_PUBLISH_CHANNEL=pastell-connector
      - SPRING_DATASOURCE_DRIVER_CLASS_NAME=org.h2.Driver
      - SPRING_DATASOURCE_URL=jdbc:h2:file:/data/pastellconnector2
      - SPRING_DATASOURCE_USERNAME=sa
      - SPRING_DATASOURCE_PASSWORD=
      - SPRING_JPA_DATABASE_PLATFORM=org.hibernate.dialect.H2Dialect
    volumes:
      # Data
      - ./data/pastellconnector:/data
    depends_on:
      - redis
    ports:
      - "127.0.0.1:8002:8080"

  redis:
    image: redis:6.2.1-alpine
    restart: unless-stopped
    mem_limit: 128M
    volumes:
      # Data
      - ./data/redis:/data
    ports:
      - "127.0.0.1:6379:6379"

  libriciel-pdf:
    image: registry.libriciel.fr/public/signature/libriciel-pdf:3.0.6
    restart: unless-stopped
    volumes:
      # Data
      - ./data/alf_data:/usr/local/tomcat/alf_data
      - ./data/temp:/usr/local/tomcat/temp