327 lines
13 KiB
YAML
327 lines
13 KiB
YAML
# Sourced from https://github.com/Alfresco/acs-deployment/blob/4.0.3/docker-compose/docker-compose.yml
|
|
#
|
|
# Using version 2 as 3 does not support resource constraint options (cpu_*, mem_* limits) for non swarm mode in Compose
|
|
version: "2.1"
|
|
|
|
services:
|
|
platform:
|
|
image: quay.io/alfresco/alfresco-governance-repository-enterprise:V3.4-latest
|
|
mem_limit: 1700m
|
|
environment:
|
|
JAVA_OPTS: "
|
|
-Ddb.driver=org.postgresql.Driver
|
|
-Ddb.username=alfresco
|
|
-Ddb.password=alfresco
|
|
-Ddb.url=jdbc:postgresql://postgres-acs:5432/alfresco
|
|
-Dindex.subsystem.name=solr6
|
|
-Dsolr.host=search
|
|
-Dsolr.port=8983
|
|
-Dsolr.secureComms=none
|
|
-Dshare.host=${PROXY_HOST}
|
|
-Dshare.port=${PROXY_PORT}
|
|
-Dshare.protocol=${PROXY_PROTOCOL}
|
|
-Dalfresco.host=${PROXY_HOST}
|
|
-Dalfresco.port=${PROXY_PORT}
|
|
-Dalfresco.protocol=${PROXY_PROTOCOL}
|
|
-Daos.baseUrlOverwrite=${PROXY_PROTOCOL}://${PROXY_HOST}:${PROXY_PORT}/alfresco/aos
|
|
-Dmessaging.broker.url=\"failover:(nio://activemq:61616)?timeout=3000&jms.useCompression=true\"
|
|
-Ddeployment.method=DOCKER_COMPOSE
|
|
-DlocalTransform.core-aio.url=http://transform-core-aio:8090/
|
|
-Dalfresco-pdf-renderer.url=http://transform-core-aio:8090/
|
|
-Djodconverter.url=http://transform-core-aio:8090/
|
|
-Dimg.url=http://transform-core-aio:8090/
|
|
-Dtika.url=http://transform-core-aio:8090/
|
|
-Dtransform.misc.url=http://transform-core-aio:8090/
|
|
-Dcsrf.filter.enabled=false
|
|
-XX:MinRAMPercentage=50 -XX:MaxRAMPercentage=80
|
|
|
|
-Dtransform.service.enabled=true
|
|
-Dlocal.transform.service.enabled=false
|
|
|
|
-Dtransform.service.url=http://transform-router:8095
|
|
-Dsfs.url=http://shared-file-store:8099
|
|
-Dalfresco-pdf-renderer.url=http://transform-engine-aio:8090
|
|
-Djodconverter.url=http://transform-engine-aio:8090
|
|
-Dimg.url=http://transform-engine-aio:8090
|
|
-Dtika.url=http://transform-engine-aio:8090
|
|
-Dtransform.misc.url=http://transform-engine-aio:8090
|
|
|
|
-Ddsync.service.uris=${PROXY_PROTOCOL}://${PROXY_HOST}:${PROXY_PORT}/sync
|
|
|
|
-Dauthentication.chain=aims:identity-service,builtin:alfrescoNtlm
|
|
-Didentity-service.authentication.defaultAdministratorUserNames=admin.1
|
|
-Didentity-service.auth-server-url=${IDENTITY_SERVICE_PROTOCOL}://${IDENTITY_SERVICE_HOST}:${IDENTITY_SERVICE_PORT}/auth
|
|
|
|
-Dsystem.content.eagerOrphanCleanup=true
|
|
-Dsystem.content.orphanProtectDays=0
|
|
-Djodconverter.enabled=false
|
|
"
|
|
depends_on:
|
|
postgres-acs:
|
|
condition: service_started
|
|
activemq:
|
|
condition: service_started
|
|
shared-file-store:
|
|
condition: service_started
|
|
identity:
|
|
condition: service_healthy
|
|
volumes:
|
|
- "$ALFRESCO_LICENSE_DIR/acs:/usr/local/tomcat/shared/classes/alfresco/extension/license:ro"
|
|
- acsbin-volume:/usr/local/tomcat/alf_data:rw
|
|
|
|
transform-router:
|
|
image: quay.io/alfresco/alfresco-transform-router:1.3.1
|
|
environment:
|
|
ACTIVEMQ_URL: "nio://activemq:61616"
|
|
CORE_AIO_URL : "http://transform-core-aio:8090"
|
|
FILE_STORE_URL: "http://shared-file-store:8099/alfresco/api/-default-/private/sfs/versions/1/file"
|
|
depends_on:
|
|
- activemq
|
|
- shared-file-store
|
|
|
|
transform-core-aio:
|
|
image: alfresco/alfresco-transform-core-aio:2.3.6
|
|
environment:
|
|
ACTIVEMQ_URL: "nio://activemq:61616"
|
|
FILE_STORE_URL: "http://shared-file-store:8099/alfresco/api/-default-/private/sfs/versions/1/file"
|
|
depends_on:
|
|
- activemq
|
|
- shared-file-store
|
|
|
|
shared-file-store:
|
|
image: alfresco/alfresco-shared-file-store:0.10.0
|
|
volumes:
|
|
- shared-file-store-volume:/tmp/Alfresco/sfs
|
|
|
|
share:
|
|
image: quay.io/alfresco/alfresco-governance-share-enterprise:V3.4-latest
|
|
mem_limit: 512m
|
|
environment:
|
|
REPO_HOST: "platform"
|
|
CSRF_FILTER_REFERER: "${PROXY_PROTOCOL}://${PROXY_HOST}(:${PROXY_PORT})?/?.*"
|
|
CSRF_FILTER_ORIGIN: "${PROXY_PROTOCOL}://${PROXY_HOST}(:${PROXY_PORT})?"
|
|
JAVA_OPTS: "
|
|
-Dshare.host=${PROXY_HOST}
|
|
-Dshare.port=${PROXY_PORT}
|
|
-Dshare.protocol=${PROXY_PROTOCOL}
|
|
-Dalfresco.host=${PROXY_HOST}
|
|
-Dalfresco.port=${PROXY_PORT}
|
|
-Dalfresco.protocol=${PROXY_PROTOCOL}
|
|
-Daims.enabled=true
|
|
-Daims.realm=alfresco
|
|
-Daims.resource=acs-share
|
|
-Daims.authServerUrl=${IDENTITY_SERVICE_PROTOCOL}://${IDENTITY_SERVICE_HOST}:${IDENTITY_SERVICE_PORT}/auth
|
|
-Daims.sslRequired=none
|
|
-Daims.publicClient=true
|
|
-Daims.autodetectBearerOnly=true
|
|
-Daims.alwaysRefreshToken=true
|
|
-Daims.principalAttribute=preferred_username
|
|
-Daims.enableBasicAuth=true
|
|
"
|
|
|
|
postgres-acs:
|
|
image: postgres:11.7
|
|
mem_limit: 512m
|
|
environment:
|
|
- POSTGRES_PASSWORD=alfresco
|
|
- POSTGRES_USER=alfresco
|
|
- POSTGRES_DB=alfresco
|
|
command: postgres -c max_connections=300 -c log_min_messages=LOG
|
|
volumes:
|
|
- acsdb-volume:/var/lib/postgresql/data:rw
|
|
|
|
search:
|
|
image: alfresco/alfresco-search-services:2.0.1
|
|
mem_limit: 2g
|
|
environment:
|
|
- SOLR_ALFRESCO_HOST=platform
|
|
- SOLR_ALFRESCO_PORT=8080
|
|
- SOLR_SOLR_HOST=search
|
|
- SOLR_SOLR_PORT=8983
|
|
- SOLR_CREATE_ALFRESCO_DEFAULTS=alfresco,archive
|
|
- ALFRESCO_SECURE_COMMS=none
|
|
volumes:
|
|
- solrindex-volume:/opt/alfresco-search-services/data:rw
|
|
|
|
activemq:
|
|
image: alfresco/alfresco-activemq:5.15.8
|
|
mem_limit: 256m
|
|
volumes:
|
|
- activemq-volume:/opt/activemq/data:rw
|
|
|
|
sync:
|
|
image: quay.io/alfresco/service-sync:3.3.3.1
|
|
mem_limit: 512m
|
|
environment:
|
|
JAVA_OPTS : "
|
|
-Dsql.db.driver=org.postgresql.Driver
|
|
-Dsql.db.url=jdbc:postgresql://postgres-acs:5432/alfresco
|
|
-Dsql.db.username=alfresco
|
|
-Dsql.db.password=alfresco
|
|
-Dmessaging.broker.host=activemq
|
|
-Drepo.hostname=platform
|
|
-Drepo.port=8080
|
|
-Ddw.server.applicationConnectors[0].type=http
|
|
-XX:MinRAMPercentage=50 -XX:MaxRAMPercentage=80
|
|
-Didentity-service.auth-server-url=${IDENTITY_SERVICE_PROTOCOL}://${IDENTITY_SERVICE_HOST}:${IDENTITY_SERVICE_PORT}/auth
|
|
-Didentity-service.resource=acs-sync
|
|
"
|
|
depends_on:
|
|
- postgres-acs
|
|
- activemq
|
|
|
|
digital-workspace:
|
|
image: quay.io/alfresco/alfresco-digital-workspace:2.0.0-adw
|
|
mem_limit: 128m
|
|
environment:
|
|
BASE_PATH: ./
|
|
APP_CONFIG_ECM_HOST: "${PROXY_PROTOCOL}://${PROXY_HOST}:${PROXY_PORT}"
|
|
APP_CONFIG_BPM_HOST: "${PROXY_PROTOCOL}://${PROXY_HOST}:${PROXY_PORT}"
|
|
APP_BASE_SHARE_URL: "${PROXY_PROTOCOL}://${PROXY_HOST}:${PROXY_PORT}/workspace/#/preview/s"
|
|
APP_CONFIG_PROVIDER: "ALL"
|
|
APP_CONFIG_PLUGIN_PROCESS_SERVICE: "true"
|
|
#APP_CONFIG_PLUGIN_PROCESS_AUTOMATION: "true"
|
|
APP_CONFIG_AUTH_TYPE: OAUTH
|
|
APP_CONFIG_OAUTH2_HOST: "${IDENTITY_SERVICE_PROTOCOL}://${IDENTITY_SERVICE_HOST}:${IDENTITY_SERVICE_PORT}/auth/realms/alfresco"
|
|
APP_CONFIG_OAUTH2_CLIENTID: alfresco
|
|
APP_CONFIG_OAUTH2_IMPLICIT_FLOW: "true"
|
|
APP_CONFIG_OAUTH2_REDIRECT_LOGIN: "/workspace/"
|
|
APP_CONFIG_OAUTH2_REDIRECT_LOGOUT: "/workspace/logout"
|
|
|
|
activiti-app:
|
|
image: alfresco/process-services:1.11.1.1
|
|
mem_limit: 512m
|
|
environment:
|
|
ACTIVITI_DATASOURCE_USERNAME: alfresco
|
|
ACTIVITI_DATASOURCE_PASSWORD: alfresco
|
|
ACTIVITI_DATASOURCE_DRIVER: org.postgresql.Driver
|
|
ACTIVITI_HIBERNATE_DIALECT: org.hibernate.dialect.PostgreSQLDialect
|
|
ACTIVITI_DATASOURCE_URL: 'jdbc:postgresql://postgres-aps:5432/activiti?characterEncoding=UTF-8'
|
|
ACTIVITI_ES_SERVER_TYPE: rest
|
|
ACTIVITI_ES_REST_CLIENT_ADDRESS: search-aps
|
|
ACTIVITI_ES_REST_CLIENT_PORT: 9200
|
|
ACTIVITI_ES_REST_CLIENT_SCHEMA: http
|
|
IDENTITY_SERVICE_ENABLED: "true"
|
|
IDENTITY_SERVICE_AUTH: ${IDENTITY_SERVICE_PROTOCOL}://${IDENTITY_SERVICE_HOST}:${IDENTITY_SERVICE_PORT}/auth
|
|
IDENTITY_SERVICE_CONTENT_SSO_REDIRECT_URI: ${PROXY_PROTOCOL}://${PROXY_HOST}:${PROXY_PORT}/activiti-app/app/rest/integration/sso/confirm-auth-request
|
|
JAVA_OPTS: "-XX:MinRAMPercentage=50 -XX:MaxRAMPercentage=80"
|
|
depends_on:
|
|
- postgres-aps
|
|
volumes:
|
|
- "$ALFRESCO_LICENSE_DIR/aps:/root/.activiti/enterprise-license:ro"
|
|
- apsbin-volume:/var/lib/postgresql/data:rw
|
|
|
|
activiti-admin:
|
|
image: alfresco/process-services-admin:1.11.1.1
|
|
mem_limit: 256m
|
|
environment:
|
|
ACTIVITI_ADMIN_DATASOURCE_USERNAME: alfresco
|
|
ACTIVITI_ADMIN_DATASOURCE_PASSWORD: alfresco
|
|
ACTIVITI_ADMIN_DATASOURCE_DRIVER: org.postgresql.Driver
|
|
ACTIVITI_ADMIN_HIBERNATE_DIALECT: org.hibernate.dialect.PostgreSQLDialect
|
|
ACTIVITI_ADMIN_DATASOURCE_URL: 'jdbc:postgresql://postgres-aps-admin:5432/activiti-admin?characterEncoding=UTF-8'
|
|
ACTIVITI_ADMIN_REST_APP_HOST: http://activiti-app
|
|
ACTIVITI_ADMIN_REST_APP_PORT: 8080
|
|
JAVA_OPTS: "-XX:MinRAMPercentage=50 -XX:MaxRAMPercentage=80"
|
|
depends_on:
|
|
- postgres-aps-admin
|
|
- activiti-app
|
|
|
|
postgres-aps:
|
|
image: postgres:11.6
|
|
mem_limit: 256m
|
|
environment:
|
|
POSTGRES_DB: activiti
|
|
POSTGRES_USER: alfresco
|
|
POSTGRES_PASSWORD: alfresco
|
|
command: postgres -c max_connections=300 -c log_min_messages=LOG
|
|
volumes:
|
|
- apsdb-volume:/var/lib/postgresql/data:rw
|
|
|
|
postgres-aps-admin:
|
|
image: postgres:11.6
|
|
mem_limit: 128m
|
|
environment:
|
|
POSTGRES_DB: activiti-admin
|
|
POSTGRES_USER: alfresco
|
|
POSTGRES_PASSWORD: alfresco
|
|
command: postgres -c max_connections=50 -c log_min_messages=LOG
|
|
volumes:
|
|
- apsadmindb-volume:/var/lib/postgresql/data:rw
|
|
|
|
search-aps:
|
|
image: elasticsearch:7.6.0
|
|
mem_limit: 512m
|
|
environment:
|
|
discovery.type: single-node
|
|
ES_JAVA_OPTS: "-Xms128m -Xmx256m"
|
|
ulimits:
|
|
memlock:
|
|
soft: -1
|
|
hard: -1
|
|
depends_on:
|
|
- activiti-app
|
|
volumes:
|
|
- esindex-volume:/var/lib/postgresql/data:rw
|
|
|
|
identity:
|
|
image: alfresco/alfresco-identity-service:1.3
|
|
user: jboss
|
|
environment:
|
|
KEYCLOAK_USER: admin
|
|
KEYCLOAK_PASSWORD: admin
|
|
KEYCLOAK_HOSTNAME: ${IDENTITY_SERVICE_HOST}
|
|
KEYCLOAK_IMPORT: /tmp/keycloak-alfresco-realm.json
|
|
KEYCLOAK_STATISTICS: enabled
|
|
networks:
|
|
default:
|
|
aliases:
|
|
- "${IDENTITY_SERVICE_HOST}"
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8080/auth"]
|
|
interval: 10s
|
|
timeout: 10s
|
|
# Really long startup times on Windows
|
|
retries: 18
|
|
volumes:
|
|
- ./keycloak-alfresco-realm.json:/tmp/keycloak-alfresco-realm.json:ro
|
|
- keycloak-volume:/opt/jboss/keycloak/standalone/data:rw
|
|
|
|
proxy:
|
|
build: ./nginx-ingress
|
|
image: local/nginx-ingress:acs-sync-share-adw-aps-aims
|
|
ports:
|
|
- 8080:8080
|
|
depends_on:
|
|
- platform
|
|
- sync
|
|
- share
|
|
- digital-workspace
|
|
- activiti-app
|
|
- activiti-admin
|
|
- identity
|
|
|
|
volumes:
|
|
shared-file-store-volume:
|
|
driver_opts:
|
|
type: tmpfs
|
|
device: tmpfs
|
|
acsbin-volume:
|
|
driver: local
|
|
acsdb-volume:
|
|
driver: local
|
|
activemq-volume:
|
|
driver: local
|
|
solrindex-volume:
|
|
driver: local
|
|
apsbin-volume:
|
|
driver: local
|
|
apsdb-volume:
|
|
driver: local
|
|
apsadmindb-volume:
|
|
driver: local
|
|
esindex-volume:
|
|
driver: local
|
|
keycloak-volume:
|
|
driver: local
|