-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Deployed 8cb95c9 with MkDocs version: 1.5.3
- Loading branch information
Unknown
committed
Jan 12, 2024
1 parent
480d283
commit cb651bb
Showing
6 changed files
with
557 additions
and
184 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,154 @@ | ||
version: "3.4" | ||
|
||
x-minio-access: &minio-access --replace-me-- | ||
x-minio-secret: &minio-secret --replace-me-- | ||
x-mongo-password: &mongo-password --replace-me-- | ||
|
||
x-app-env: &app-env | ||
APP_URI: https://--replace-me-- | ||
API_GATEWAY: https://--replace-me-- | ||
REDIS_CACHE_HOST: redis | ||
USER_HOST: http://user | ||
LICENCE_HOST: http://licence | ||
NOTIFICATION_HOST: http://notification | ||
PROVIDER_HOST: http://provider | ||
APP_HOST: http://app | ||
BOARDS_EVENT_HOST: http://boards-event | ||
|
||
x-s3-env: &s3-env | ||
S3_ENDPOINT: minio | ||
S3_ACCESS_KEY: *minio-access | ||
S3_SECRET_KEY: *minio-secret | ||
S3_BUCKET: kudosboards | ||
|
||
x-db-env: &db-env | ||
MONGO_HOST: mongo | ||
MONGO_USER: root | ||
MONGO_PASSWORD: *mongo-password | ||
MONGO_PARAMS: authSource=admin | ||
|
||
services: | ||
# Proxy | ||
nginx: | ||
image: nginx:1.25.3 | ||
restart: always | ||
ports: | ||
- "443:443" | ||
- "80:80" | ||
volumes: | ||
- ./nginx.conf:/etc/nginx/conf.d/proxy.conf | ||
- /path/to/certificate.pem.crt:/etc/nginx/ssl.crt # --replace-me-- | ||
- /path/to/key.pem.key:/etc/nginx/ssl.key # --replace-me-- | ||
|
||
# UI | ||
webfront: | ||
image: quay.io/huddo/boards-webfront:2023-12-18 | ||
restart: always | ||
environment: | ||
<<: [*app-env] | ||
|
||
# Core App routing logic | ||
core: | ||
image: quay.io/huddo/boards-core:2023-12-18 | ||
restart: always | ||
depends_on: | ||
- redis | ||
- minio | ||
- licence | ||
- notification | ||
environment: | ||
<<: [*app-env, *s3-env] | ||
|
||
# Boards business logic | ||
app: | ||
image: quay.io/huddo/boards:2023-12-18 | ||
restart: always | ||
environment: | ||
<<: [*app-env, *db-env, *s3-env] | ||
|
||
user: | ||
image: quay.io/huddo/user:2023-12-18 | ||
restart: always | ||
environment: | ||
<<: [*app-env, *db-env, *s3-env] | ||
CONNECTIONS_NAME: --replace-me-- | ||
CONNECTIONS_CLIENT_ID: --replace-me-- | ||
CONNECTIONS_CLIENT_SECRET: --replace-me-- | ||
CONNECTIONS_URL: --replace-me-- | ||
CONNECTIONS_ADMINS: '["[email protected]", "[email protected]"]' # --replace-me-- | ||
# DOMINO_AUTH_URL: https://domino.rest.api.company.com # --replace-me-- | ||
# DOMINO_CLIENT_ID: # --replace-me-- | ||
# DOMINO_CLIENT_SECRET: # --replace-me-- | ||
# DOMINO_ADMINS: '["[email protected]"]' # --replace-me-- | ||
# DOMINO_USE_PROFILE_IMAGE_ATTACHMENTS: 'true' | ||
# DOMINO_PROFILE_IMAGE_NAME: profile.png | ||
# Default values below that can be customised | ||
# DOMINO_AUTH_SCOPE: $DATA | ||
# DOMINO_REST_SCOPE: directorylookup | ||
|
||
provider: | ||
image: quay.io/huddo/provider:2023-12-18 | ||
restart: always | ||
depends_on: | ||
- redis | ||
- minio | ||
environment: | ||
<<: [*app-env, *s3-env] | ||
|
||
notification: | ||
image: quay.io/huddo/notification:2023-12-18 | ||
restart: always | ||
depends_on: | ||
- redis | ||
environment: | ||
<<: [*app-env, *db-env] | ||
|
||
#Events Service | ||
boards-event: | ||
image: quay.io/huddo/boards-event:2023-12-18 | ||
restart: always | ||
depends_on: | ||
- redis | ||
- mongo | ||
environment: | ||
<<: [*app-env, *db-env] | ||
NOTIFIER_EMAIL_HOST: localhost | ||
NOTIFIER_EMAIL_USERNAME: --replace-me | ||
NOTIFIER_EMAIL_PASSWORD: --replace-me | ||
|
||
licence: | ||
image: quay.io/huddo/licence:2023-12-18 | ||
restart: always | ||
depends_on: | ||
- user | ||
- redis | ||
- mongo | ||
environment: | ||
<<: [*db-env, *app-env] | ||
LICENCE: --replace-with-licence-from-store-- | ||
|
||
mongo: | ||
image: bitnami/mongodb:7.0 | ||
restart: always | ||
environment: | ||
MONGODB_ADVERTISED_HOSTNAME: mongo | ||
MONGODB_ROOT_PASSWORD: *mongo-password | ||
volumes: | ||
- /path/to/db:/bitnami/mongodb # --replace-me-- | ||
|
||
minio: | ||
image: minio/minio | ||
restart: always | ||
environment: | ||
MINIO_ROOT_USER: *minio-access | ||
MINIO_ROOT_PASSWORD: *minio-secret | ||
volumes: | ||
- /path/to/s3:/data # --replace-me-- | ||
command: server /data | ||
|
||
# Shared DB for internal caching, communication etc | ||
redis: | ||
image: redis | ||
restart: always | ||
environment: | ||
MASTER: "true" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,75 @@ | ||
upstream ui { | ||
server webfront:8080; | ||
} | ||
|
||
upstream api { | ||
server core:3001; | ||
} | ||
|
||
server { | ||
listen 80; | ||
server_name boards-url.replace.me; | ||
rewrite ^ https://$server_name$request_uri? permanent; | ||
} | ||
|
||
server { | ||
listen 80; | ||
server_name boards-api-url.replace.me; | ||
rewrite ^ https://$server_name$request_uri? permanent; | ||
} | ||
|
||
server { | ||
listen 443 ssl; | ||
server_name boards-api-url.replace.me; | ||
|
||
ssl_certificate /etc/nginx/ssl.crt; | ||
ssl_certificate_key /etc/nginx/ssl.key; | ||
ssl_protocols TLSv1.2; | ||
client_max_body_size 50M; | ||
|
||
location / { | ||
proxy_buffering off; | ||
proxy_cache off; | ||
proxy_set_header Host $host; | ||
proxy_set_header Connection ''; | ||
proxy_http_version 1.1; | ||
chunked_transfer_encoding off; | ||
proxy_pass http://api; | ||
} | ||
|
||
location ^~ /socket { | ||
rewrite ^/socket/(.*) /$1 break; #used to send request to base url | ||
proxy_pass http://api; | ||
proxy_redirect off; | ||
proxy_pass_request_headers on; | ||
proxy_set_header X-Real-IP $remote_addr; | ||
proxy_set_header Host $http_host; | ||
proxy_http_version 1.1; | ||
proxy_set_header Upgrade $http_upgrade; | ||
proxy_set_header Connection "upgrade"; | ||
proxy_set_header Host $host; | ||
} | ||
} | ||
|
||
server { | ||
listen 443; | ||
server_name boards-url.replace.me; | ||
|
||
client_max_body_size 50m; | ||
client_body_timeout 120s; | ||
large_client_header_buffers 4 32k; | ||
|
||
ssl_certificate /etc/nginx/ssl.crt; | ||
ssl_certificate_key /etc/nginx/ssl.key; | ||
ssl_protocols TLSv1.2; | ||
|
||
location / { | ||
proxy_buffering off; | ||
proxy_cache off; | ||
proxy_set_header Host $host; | ||
proxy_set_header Connection ''; | ||
proxy_http_version 1.1; | ||
chunked_transfer_encoding off; | ||
proxy_pass http://ui; | ||
} | ||
} |
Oops, something went wrong.