docker-compose.yml

services:
  my-mongodb:
    hostname: my-mongodb
    image: mongo:8.0
    container_name: my-mongodb
    environment:
      MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
      MONGO_INITDB_USERNAME: ${MONGO_INITDB_USERNAME}
      MONGO_INITDB_PASSWORD: ${MONGO_INITDB_PASSWORD}
      MONGO_MAIN_DB: ${MONGO_MAIN_DB}
    ports:
      - "${MONGO_PORT}:27017"
    command: mongod
    volumes:
      - mongo_data:/data/db:rw
      - ./mongodb/mongo-init.sh:/docker-entrypoint-initdb.d/mongo-init.sh:ro
      - ./mongodb/init_documents:/init_documents:ro
    networks:
      net_vre:
        ipv4_address: 172.21.0.10
    restart: on-failure:2


  bao-server:
    build:
      context: ./openbao/
    container_name: bao-server
    image: bao-server
    hostname: bao-server
    ports:
      - "8200:8200"
    environment:
      KEYCLOAK_SERVER: ${KEYCLOAK_SERVER}
      KEYCLOAK_REALM: ${KEYCLOAK_REALM}
      VAULT_ADDR: ${BAO_ADDR}
      BAO_DEV_ROOT_TOKEN_ID: ${BAO_DEV_ROOT_TOKEN_ID}
    volumes:
      - ./openbao/config:/openbao/config:ro
    networks:
      net_vre:
        ipv4_address: 172.21.0.18
    restart: on-failure:2

  keycloak:
    container_name: keycloak
    hostname: keycloak
    image: keycloak/keycloak:26.4
    profiles: ["local_auth"]
    environment:
      KC_BOOTSTRAP_ADMIN_USERNAME: ${KEYCLOAK_ADMIN_USER}
      KC_BOOTSTRAP_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
      KC_HOSTNAME: ${KEYCLOAK_SERVER}
      KEYCLOAK_SECRET: ${KEYCLOAK_SECRET}
    volumes:
      - ${KEYCLOAK_REALMS_DIR}:${KEYCLOAK_IMPORT_DIR}:ro
    command: ["start-dev", "--import-realm"]
    ports:
      - ${KEYCLOAK_PORT}:8080
    networks:
      net_vre:
        ipv4_address: 172.21.0.12
    restart: on-failure:2

  front_end:
    pull_policy: never
    container_name: front_end
    hostname: ${FRONTEND_HOSTNAME}
    build:
      context: ./front_end/
    image: front_end
    environment:
      FRONTEND_HOST_PATH: ${FRONTEND_HOST_PATH}
      KEYCLOAK_CLIENT: ${KEYCLOAK_CLIENT}
      KEYCLOAK_REALM: ${KEYCLOAK_REALM}
      KEYCLOAK_SECRET: ${KEYCLOAK_SECRET}
      KEYCLOAK_SERVER: ${KEYCLOAK_SERVER}
      INCLUDE_EGA_DATASETS: ${INCLUDE_EGA_DATASETS}
      INCLUDE_EXTERNAL_DATASETS: ${INCLUDE_EXTERNAL_DATASETS}
      INCLUDE_HPC_DATASETS: ${INCLUDE_HPC_DATASETS}
      INCLUDE_OPENSTACK_DATASETS: ${INCLUDE_OPENSTACK_DATASETS}
      MAIL_HOST: ${MAIL_HOST}
      MAIL_USER: ${MAIL_USER}
      MAIL_PASS: ${MAIL_PASS}
      MONGO_CREDENTIALS: ${MONGO_INITDB_USERNAME}:${MONGO_INITDB_PASSWORD}
      MONGO_MAIN_DB: ${MONGO_MAIN_DB}
      MONGO_SERVER: ${MONGO_SERVER}
      NETWORK_NAME: ${NETWORK_NAME}
      SERVER_DOMAIN: ${SERVER_DOMAIN}
      SERVER_PORT: ${FRONTEND_PORT}
      SERVER_DOMAIN_PROTOCOL: ${SERVER_DOMAIN_PROTOCOL}
      BAO_ADDR: ${BAO_ADDR}
      BAO_API_VERSION: ${BAO_API_VERSION}
      BAO_ROLENAME: ${BAO_ROLENAME}
      BAO_SECRET_PATH: ${BAO_SECRET_PATH}
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./front_end/openVRE/public/:/var/www/html/openVRE/public
      - ./front_end/openVRE/config:/var/www/html/openVRE/config
      - ./front_end/openVRE/data:/var/www/html/openVRE/data
      - ./front_end/openVRE/apache/check_tool_access.lua:/opt/docker/etc/httpd/check_tool_access.lua
      - ./front_end/openVRE/apache/server.conf:/opt/docker/etc/httpd/conf.d/10-server.conf
      - ./tools:/var/www/html/openVRE/public/tools
      - ./shared_data:/shared_data
    ports:
      - "${FRONTEND_PORT}:80"
    networks:
      net_vre:
        ipv4_address: 172.21.0.14
    restart: on-failure:2

  sgecore:
    pull_policy: never
    image: sgecore
    build:
      context: ./sge
      args:
        SUBMITTER_HOSTNAME: "${FRONTEND_HOSTNAME}"
        DOCKER_GROUP: "${DOCKER_GROUP}"
    container_name: sgecore
    hostname: sgecore
    environment:
      SHARED_DATA_UID: ${UID}
      SHARED_DATA_GID: ${GID}
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:rprivate
      - ./sge/configuration:/tmp/configuration:rprivate
      - ./sge/configuration:/etc/gridengine/configuration:rprivate
      - ./sge/shared_scripts:/shared_scripts:rshared
      - ./shared_data:/shared_data:rshared
    devices:
      - '/dev/fuse:/dev/fuse'
    cap_add:
      - SYS_ADMIN
    security_opt:
      - apparmor:unconfined
    stdin_open: true
    networks:
      - net_vre
    ports:
      - "6444:6444"
    extra_hosts:
      - "front_end:172.21.0.14"
    restart: on-failure:2

volumes:
  mongo_data:
    name: ${MONGO_VOLUME}

networks:
  net_vre:
    name: ${NETWORK_NAME}
    # Use this driver_opts on openStack cloud
    # driver_opts:
    #  com.docker.network.driver.mtu: 1440 or 1442 (to be checked at OpenStack configuration)
    ipam:
      config:
        - subnet: 172.21.0.0/24