alfresco-community-repo/scripts/ci/docker-compose/docker-compose.yaml

version: "3"

services:
  transform-core-aio:
    profiles: ["with-transform-core-aio"]
    image: alfresco/alfresco-transform-core-aio:${TRANSFORMERS_TAG}
    environment:
      JAVA_OPTS: " -Xms256m -Xmx256m"
    ports:
      - "8090:8090"
  postgres:
    image: postgres:17.9
    profiles: ["default", "with-transform-core-aio", "postgres", "with-mtls-transform-core-aio", "with-sso", "with-elasticsearch"]
    environment:
      POSTGRES_PASSWORD: alfresco #pragma: allowlist secret
      POSTGRES_USER: alfresco
      POSTGRES_DB: alfresco
    command: postgres -c max_connections=300
    ports:
      - "5433:5432"
  activemq:
    profiles: ["default", "with-transform-core-aio", "activemq", "activemq6", "with-mtls-transform-core-aio", "with-sso", "with-elasticsearch"]
    image: alfresco/alfresco-activemq:6.2-jre17-rockylinux8
    environment:
      ACTIVEMQ_ADMIN_LOGIN: admin
      ACTIVEMQ_ADMIN_PASSWORD: admin #pragma: allowlist secret
    ports:
      - "5672:5672" # AMQP
      - "61616:61616" # OpenWire
  elasticsearch:
    profiles: [ "with-elasticsearch" ]
    image: docker.elastic.co/elasticsearch/elasticsearch:8.17.3
    environment:
      - "discovery.type=single-node"
      # In contrary to ES7, the ES8 has security enabled by default, those can be removed when testing environment
      # is updated to work with SSL and user authentication required by ES8
      # https://www.elastic.co/guide/en/elasticsearch/reference/8.0/release-highlights.html#_security_features_are_enabled_and_configured_by_default
      - "xpack.security.enabled=false"
      - "xpack.security.transport.ssl.enabled=false"
      - "xpack.security.http.ssl.enabled=false"
    ports:
      - "9200:9200"
      - "9300:9300"
  activemq5:
    profiles: ["activemq5"]
    image: alfresco/alfresco-activemq:5.19-jre17-rockylinux8
    ports:
      - "5672:5672" # AMQP
      - "61616:61616" # OpenWire
  mtls-transform-core-aio:
    profiles: ["with-mtls-transform-core-aio"]
    image: quay.io/alfresco/alfresco-transform-core-aio:${TRANSFORMERS_TAG}
    hostname: transform-core-aio
    ports:
      - 8090:8090
    volumes:
      - ${CI_WORKSPACE}/keystores/tengineAIO/tengineAIO.truststore:/tengineAIO.truststore
      - ${CI_WORKSPACE}/keystores/tengineAIO/tengineAIO.keystore:/tengineAIO.keystore
    environment:
      ACTIVEMQ_URL: "nio://activemq:61616"
      ACTIVEMQ_USER: "admin"
      ACTIVEMQ_PASSWORD: "admin"
      LOG_LEVEL: debug

      SERVER_SSL_ENABLED: "true"
      SERVER_SSL_KEY_PASSWORD: "password"
      SERVER_SSL_KEY_STORE: "file:/tengineAIO.keystore"
      SERVER_SSL_KEY_STORE_PASSWORD: "password"
      SERVER_SSL_KEY_STORE_TYPE: "JCEKS"

      SERVER_SSL_CLIENT_AUTH: "need"
      SERVER_SSL_TRUST_STORE: "file:/tengineAIO.truststore"
      SERVER_SSL_TRUST_STORE_PASSWORD: "password"
      SERVER_SSL_TRUST_STORE_TYPE: "JCEKS"

      CLIENT_SSL_KEY_STORE: "file:/tengineAIO.keystore"
      CLIENT_SSL_KEY_STORE_PASSWORD: "password"
      CLIENT_SSL_KEY_STORE_TYPE: "JCEKS"

      CLIENT_SSL_TRUST_STORE: "file:/tengineAIO.truststore"
      CLIENT_SSL_TRUST_STORE_PASSWORD: "password"
      CLIENT_SSL_TRUST_STORE_TYPE: "JCEKS"
  keycloak:
    profiles: ["with-sso"]
    image: quay.io/keycloak/keycloak:26.5.0
    environment:
      KC_BOOTSTRAP_ADMIN_USERNAME: admin
      KC_BOOTSTRAP_ADMIN_PASSWORD: admin #pragma: allowlist secret
      KC_DB: dev-file
    command: ["start-dev", "--import-realm", "--http-relative-path=/auth", "--hostname=localhost", "--http-enabled=true"]
    volumes:
      - ../../../repository/src/test/resources/realms/alfresco-realm.json:/opt/keycloak/data/import/alfresco-realm.json
    ports:
      - 8999:8080