compose.yaml

services:
  app:
    hostname: "${DRUPAL_HOSTNAME}"
    container_name: "${COMPOSE_PROJECT_NAME}-app"
    image: "${DRUPAL_IMAGE}"
    volumes:
      - .:/app:delegated
      - ssh:/tmp/druid_ssh-agent:ro
    environment:
      APP_ENV: "${APP_ENV:-dev}"
      DRUPAL_ROUTES: "https://varnish-${DRUPAL_HOSTNAME},https://helfi-proxy.docker.so,http://${COMPOSE_PROJECT_NAME}-varnish"
      STAGE_FILE_PROXY_ORIGIN: "${STAGE_FILE_PROXY_ORIGIN}"
      STAGE_FILE_PROXY_ORIGIN_DIR: "${STAGE_FILE_PROXY_ORIGIN_DIR}"
      DRUSH_OPTIONS_URI: "https://${DRUPAL_HOSTNAME}"
      # XDEBUG_ENABLE: "true"
      # DOCKERHOST: host.docker.internal
      # XDEBUG_CONFIG: "remote_port=9001 remote_host=host.docker.internal remote_connect_back=0"
      # PHP_IDE_CONFIG: "${PHP_IDE_CONFIG:-serverName=${DRUPAL_HOSTNAME}}"
      PHP_SENDMAIL_PATH: /usr/sbin/sendmail -S host.docker.internal:1025 -t

      # permission issues.
      DTT_BASE_URL: "http://app:8080"
      SIMPLETEST_BASE_URL: "http://app:8080"
      SIMPLETEST_DB: "mysql://drupal:drupal@db:3306/drupal"
      DRUPAL_REVERSE_PROXY_ADDRESS: "https://asuntotuotanto.docker.so"
      BROWSERTEST_OUTPUT_BASE_URL: "https://${DRUPAL_HOSTNAME}"
      DRUPAL_VARNISH_HOST: "${COMPOSE_PROJECT_NAME}-varnish"
      DRUPAL_VARNISH_PORT: 6081
      REDIS_HOST: redis
      ASU_ASUNTOTUOTANTO_URL: "https://asuntotuotanto.docker.so"
    networks:
      - internal
      - stonehenge-network
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-app.entrypoints=https"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-app.rule=Host(`${DRUPAL_HOSTNAME}`)"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-app.tls=true"
      - "traefik.http.services.${COMPOSE_PROJECT_NAME}-app.loadbalancer.server.port=8080"
      - "traefik.docker.network=stonehenge-network"
    #extra_hosts:
      #- "host.docker.internal:host-gateway"
      #- "${DRUPAL_HOSTNAME}:host-gateway"

  db:
    container_name: "${COMPOSE_PROJECT_NAME}-db"
    image: druidfi/mariadb:10.6-drupal
    volumes:
      - db_data:/var/lib/mysql
    ports:
      - 3306
    networks:
      - internal

  elastic:
    image: docker.elastic.co/elasticsearch/elasticsearch:8.11.0
    container_name: "${COMPOSE_PROJECT_NAME}-elastic"
    environment:
      - node.name="${COMPOSE_PROJECT_NAME}-elastic"
      - discovery.seed_hosts=elastic
      - cluster.name=es-docker-cluster
      - cluster.initial_master_nodes="${COMPOSE_PROJECT_NAME}-elastic"
      - bootstrap.memory_lock=true
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
      - "http.cors.allow-origin=\"*\""
      - "http.cors.enabled=true"
      - "http.cors.allow-headers=X-Requested-With,X-Auth-Token,Content-Type,Content-Length,Authorization"
      - "http.cors.allow-credentials=true"
      - xpack.security.enabled=false
    ulimits:
      memlock:
        soft: -1
        hard: -1
    ports:
      - 9200:9200
    networks:
      - internal
      - stonehenge-network
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-elastic.entrypoints=https"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-elastic.rule=Host(`elastic-${DRUPAL_HOSTNAME}`)"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-elastic.tls=true"
      - "traefik.http.services.${COMPOSE_PROJECT_NAME}-elastic.loadbalancer.server.port=9200"
      - "traefik.docker.network=stonehenge-network"
      - "traefik.port=9200"

  idp:
    container_name: "${COMPOSE_PROJECT_NAME}-idp"
    image: druidfi/saml-idp:1.19.1
    environment:
      SIMPLESAMLPHP_IDP_BASEURLPATH: "https://idp-${DRUPAL_HOSTNAME}/simplesaml/"
      SIMPLESAMLPHP_SP_ENTITY_ID: "https://${DRUPAL_HOSTNAME}/saml/metadata"
      SIMPLESAMLPHP_SP_ASSERTION_CONSUMER_SERVICE: "https://${DRUPAL_HOSTNAME}/saml/acs"
      SIMPLESAMLPHP_SP_SINGLE_LOGOUT_SERVICE: "https://${DRUPAL_HOSTNAME}/saml/logout"
    volumes:
      - ./conf/local_idp_authsources.php:/var/www/simplesamlphp/config/authsources.php
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-idp.entrypoints=https"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-idp.rule=Host(`idp-${DRUPAL_HOSTNAME}`)"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-idp.tls=true"
      - "traefik.http.services.${COMPOSE_PROJECT_NAME}-idp.loadbalancer.server.port=8080"
      - "traefik.docker.network=stonehenge-network"
    networks:
      - internal
      - stonehenge-network

  redis:
    container_name: "${COMPOSE_PROJECT_NAME}-redis"
    image: redis:6-alpine
    networks:
      - internal
#  varnish:
#    container_name: "${COMPOSE_PROJECT_NAME}-varnish"
#    image: druidfi/varnish:6-drupal
#    environment:
#      VARNISH_BACKEND_HOST: "${COMPOSE_PROJECT_NAME}-app"
#    depends_on:
#      - app
#    networks:
#      - internal
#      - stonehenge-network
#    labels:
#      - "traefik.enable=true"
#      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-varnish.entrypoints=https"
#      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-varnish.rule=Host(`varnish-${DRUPAL_HOSTNAME}`)"
#      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}-varnish.tls=true"
#      - "traefik.http.services.${COMPOSE_PROJECT_NAME}-varnish.loadbalancer.server.port=6081"
#      - "traefik.docker.network=stonehenge-network"


networks:
  internal:
    external: false
  stonehenge-network:
    external: true

volumes:
  data01:
    driver: local
  db_data:
  ssh:
    name: stonehenge-ssh
    external: true