docker-compose.yml

---
version: "3.7"

# This Docker composition file is used to build and test the container

secrets:
  admiral_yml:
    file: ./src/secrets/admiral.yml
  mongo_root_passwd_txt:
    file: ./src/secrets/mongo-root-passwd.txt
  redis_conf:
    file: ./src/secrets/redis.conf
  sslmate_api_key_txt:
    file: ./src/secrets/sslmate-api-key.txt

x-admiral-template: &admiral-template
  build:
    context: .
    dockerfile: Dockerfile
  deploy:
    mode: replicated
    replicas: 5
  environment:
    ADMIRAL_CONFIG_FILE: "/run/secrets/admiral.yml"
    ADMIRAL_CONFIG_SECTION: dev-mode
    ADMIRAL_WORKER_NAME: dev
  image: cisagov/admiral
  init: true
  secrets:
    - source: admiral_yml
      target: admiral.yml
    - source: sslmate_api_key_txt
      target: sslmate-api-key.txt

services:
  celery-flower:
    environment:
      CELERY_BROKER_URL: "redis://:fruitcake@redis:6379/0"
    image: mher/flower:1.2
    ports:
      - "5555:5555"

  cert-worker:
    <<: *admiral-template
    environment:
      ADMIRAL_CONFIG_SECTION: cert-worker
      ADMIRAL_WORKER_NAME: cert

  mongo:
    environment:
      MONGO_INITDB_DATABASE: certs
      MONGO_INITDB_ROOT_USERNAME: root
      MONGO_INITDB_ROOT_PASSWORD_FILE: /run/secrets/mongo_root_passwd_txt
    image: mongo:4.2
    restart: always
    secrets:
      - source: mongo_root_passwd_txt
    volumes:
      - ./init/mongo-init.js:/docker-entrypoint-initdb.d/mongo-init.js:ro

  mongo-express:
    environment:
      ME_CONFIG_MONGODB_SERVER: mongo
      ME_CONFIG_MONGODB_ADMINUSERNAME: root
      ME_CONFIG_MONGODB_ADMINPASSWORD: example
    image: mongo-express:0.54
    ports:
      - "8083:8081"
    restart: always

  redis:
    command:
      - "redis-server"
      - "/run/secrets/redis_conf"
    image: redis:7.0-alpine
    ports:
      - "6379:6379"
    secrets:
      - source: redis_conf

  redis-commander:
    depends_on:
      - redis
    environment:
      REDIS_HOSTS: "default:redis:6379:0:fruitcake"
    hostname: redis-commander
    image: ghcr.io/joeferner/redis-commander:0.8
    ports:
      - "8082:8081"
    restart: always

  scanner-worker:
    <<: *admiral-template
    environment:
      ADMIRAL_CONFIG_SECTION: scanner-worker
      ADMIRAL_WORKER_NAME: scanner

  admiral-version:
    # Run the container to collect version information
    <<: *admiral-template
    deploy:
      mode: global
    restart: "no"
    command: --version