selfhostyourtech/lasuite/docs/docker-compose.yaml at c92c0a4a34112d239e15f9c4df1a17cac965cbc6 · Monadical-SAS/selfhostyourtech · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
services:
  postgresql:
    image: postgres:16
    healthcheck:
      test: [ "CMD", "pg_isready", "-q", "-U", "docs", "-d", "docs" ]
      interval: 1s
      timeout: 2s
      retries: 300
    env_file:
      - .env
    environment:
      - PGDATA=/var/lib/postgresql/data/pgdata
    volumes:
      - ./data/databases/backend:/var/lib/postgresql/data/pgdata

  redis:
    image: redis:5

  backend:
    image: lasuite/impress-backend:latest
    user: ${DOCKER_USER:-1000}
    restart: always
    environment:
      - DJANGO_CONFIGURATION=Production
      # Common variables
      - DOCS_HOST=${DOCS_HOST}
      - S3_HOST=${S3_HOST}
      - MINIO_HOST=${MINIO_HOST}
      - BACKEND_HOST=${BACKEND_HOST}
      - FRONTEND_HOST=${FRONTEND_HOST}
      - BUCKET_NAME=docs-media-storage
      - REALM_NAME=docs
      # Backend variables## Django
      - DJANGO_ALLOWED_HOSTS=${DOCS_HOST}
      - DJANGO_SECRET_KEY=${DJANGO_SECRET_KEY}
      - DJANGO_SETTINGS_MODULE=impress.settings
      - DJANGO_CONFIGURATION=Production

      # Logging
      # Set to DEBUG level for dev only
      - LOGGING_LEVEL_HANDLERS_CONSOLE=ERROR
      - LOGGING_LEVEL_LOGGERS_ROOT=INFO
      - LOGGING_LEVEL_LOGGERS_APP=INFO

      # Python
      - PYTHONPATH=/app

      # Mail
      - DJANGO_EMAIL_HOST=${DJANGO_EMAIL_HOST}
      - DJANGO_EMAIL_HOST_USER=${DJANGO_EMAIL_HOST_USER}
      - DJANGO_EMAIL_HOST_PASSWORD=${DJANGO_EMAIL_HOST_PASSWORD}
      - DJANGO_EMAIL_PORT=${DJANGO_EMAIL_PORT}
      - DJANGO_EMAIL_FROM=${DJANGO_EMAIL_FROM}

      #DJANGO_EMAIL_USE_TLS=true # A flag to enable or disable TLS for email sending.
      #DJANGO_EMAIL_USE_SSL=true # A flag to enable or disable SSL for email sending.

      - DJANGO_EMAIL_BRAND_NAME="Monadical"
      # DJANGO_EMAIL_LOGO_IMG="https://${DOCS_HOST}/assets/logo-suite-numerique.png"

      # Media
      - AWS_S3_ENDPOINT_URL=https://${S3_HOST}
      - AWS_S3_ACCESS_KEY_ID=${AWS_S3_ACCESS_KEY_ID}
      - AWS_S3_SECRET_ACCESS_KEY=${AWS_S3_SECRET_ACCESS_KEY}
      - AWS_STORAGE_BUCKET_NAME=${BUCKET_NAME}
      - MEDIA_BASE_URL=https://${DOCS_HOST}

      # OIDC
      - OIDC_OP_JWKS_ENDPOINT=${OIDC_OP_JWKS_ENDPOINT}
      - OIDC_OP_AUTHORIZATION_ENDPOINT=${OIDC_OP_AUTHORIZATION_ENDPOINT}
      - OIDC_OP_TOKEN_ENDPOINT=${OIDC_OP_TOKEN_ENDPOINT}
      - OIDC_OP_USER_ENDPOINT=${OIDC_OP_USER_ENDPOINT}
      - OIDC_OP_LOGOUT_ENDPOINT=${OIDC_OP_LOGOUT_ENDPOINT}
      - OIDC_RP_CLIENT_ID=${OIDC_RP_CLIENT_ID}
      - OIDC_RP_CLIENT_SECRET=${OIDC_RP_CLIENT_SECRET}
      - OIDC_RP_SIGN_ALGO=RS256
      - OIDC_RP_SCOPES="openid email"
      #USER_OIDC_FIELD_TO_SHORTNAME
      #USER_OIDC_FIELDS_TO_FULLNAME

      - LOGIN_REDIRECT_URL=https://${DOCS_HOST}
      - LOGIN_REDIRECT_URL_FAILURE=https://${DOCS_HOST}
      - LOGOUT_REDIRECT_URL=https://${DOCS_HOST}
      - OIDC_REDIRECT_ALLOWED_HOSTS=["https://${DOCS_HOST}"]

      # AI
      - AI_FEATURE_ENABLED=true # is false by default
      - AI_BASE_URL=${AI_BASE_URL}
      - AI_API_KEY=${AI_API_KEY}
      - AI_MODEL=${AI_MODEL} # e.g. llama
      # Frontend
      #FRONTEND_THEME=mytheme
      #FRONTEND_CSS_URL=https://storage.yourdomain.tld/themes/custom.css
      #FRONTEND_FOOTER_FEATURE_ENABLED=true
      #FRONTEND_URL_JSON_FOOTER=https://docs.domain.tld/contents/footer-demo.json

    env_file:
      - .env
    healthcheck:
      test: [ "CMD", "python", "manage.py", "check" ]
      interval: 15s
      timeout: 30s
      retries: 20
      start_period: 10s
    depends_on:
      postgresql:
        condition: service_healthy
        restart: true
      redis:
        condition: service_started

  y-provider:
    image: lasuite/impress-y-provider:latest
    user: ${DOCKER_USER:-1000}
    entrypoint:
      - Y_PROVIDER_API_KEY=${Y_PROVIDER_API_KEY}
      - COLLABORATION_SERVER_SECRET=${COLLABORATION_SERVER_SECRET}
      - COLLABORATION_SERVER_ORIGIN=https://${DOCS_HOST}
      - COLLABORATION_API_URL=https://${DOCS_HOST}/collaboration/api/
      - COLLABORATION_WS_URL=wss://${DOCS_HOST}/collaboration/ws/
      - COLLABORATION_BACKEND_BASE_URL=https://${DOCS_HOST}
      - COLLABORATION_LOGGING=true

  frontend:
    image: lasuite/impress-frontend:latest
    user: "101"
    env_file:
      - .env
      # Uncomment and set your values if using our nginx proxy example
      #environment:
      # - VIRTUAL_HOST=${DOCS_HOST} # used by nginx proxy
      # - VIRTUAL_PORT=8083 # used by nginx proxy
      # - LETSENCRYPT_HOST=${DOCS_HOST} # used by lets encrypt to generate TLS certificate
    volumes:
      - ./default.conf.template:/etc/nginx/templates/default.conf.template
    depends_on:
      backend:
        condition: service_healthy

# Uncomment if using our nginx proxy example
#    networks:
#    - proxy-tier
#    - default

# Uncomment if using our nginx proxy example
#networks:
#  proxy-tier:
#    external: true