docker-compose.test.yml

services:
  pathocore_db:
    image: mysql:8.0
    command: --default-authentication-plugin=mysql_native_password
    restart: unless-stopped
    environment:
      MYSQL_DATABASE: ${DB_NAME:-pathocore_api}
      MYSQL_USER: ${DB_USER:-pathocore}
      MYSQL_PASSWORD: ${DB_PASSWORD:-pathocore_password}
      MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASSWORD:-root}
    ports:
      - "${DB_PORT_HOST:-6606}:3306"
    healthcheck:
      test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -u$$MYSQL_USER -p$$MYSQL_PASSWORD --silent"]
      interval: 5s
      timeout: 5s
      retries: 30
      start_period: 20s
    volumes:
      - pathocore_db_data:/var/lib/mysql

  keycloak_db:
    image: mysql:8.0
    command: --default-authentication-plugin=mysql_native_password
    restart: unless-stopped
    environment:
      MYSQL_DATABASE: ${KEYCLOAK_DB_NAME:-keycloak}
      MYSQL_USER: ${KEYCLOAK_DB_USER:-keycloak}
      MYSQL_PASSWORD: ${KEYCLOAK_DB_PASSWORD:-keycloak_password}
      MYSQL_ROOT_PASSWORD: ${KEYCLOAK_DB_ROOT_PASSWORD:-root}
    ports:
      - "${KEYCLOAK_DB_PORT_HOST:-6607}:3306"
    healthcheck:
      test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -u$$MYSQL_USER -p$$MYSQL_PASSWORD --silent"]
      interval: 5s
      timeout: 5s
      retries: 30
      start_period: 20s
    volumes:
      - keycloak_db_data:/var/lib/mysql

  keycloak:
    image: quay.io/keycloak/keycloak:26.6.1
    command:
      - start-dev
      - --import-realm
    restart: unless-stopped
    depends_on:
      keycloak_db:
        condition: service_healthy
    environment:
      KC_BOOTSTRAP_ADMIN_USERNAME: ${KC_BOOTSTRAP_ADMIN_USERNAME:-admin}
      KC_BOOTSTRAP_ADMIN_PASSWORD: ${KC_BOOTSTRAP_ADMIN_PASSWORD:-admin}
      KC_DB: mysql
      KC_DB_URL: jdbc:mysql://keycloak_db:3306/${KEYCLOAK_DB_NAME:-keycloak}?useSSL=false&allowPublicKeyRetrieval=true
      KC_DB_USERNAME: ${KEYCLOAK_DB_USER:-keycloak}
      KC_DB_PASSWORD: ${KEYCLOAK_DB_PASSWORD:-keycloak_password}
      KC_HEALTH_ENABLED: "true"
      KC_HOSTNAME: ${KEYCLOAK_PUBLIC_URL:-http://127.0.0.1:8080}
      KC_HOSTNAME_STRICT: "false"
      KC_HTTP_ENABLED: "true"
      KC_PROXY_HEADERS: xforwarded
    ports:
      - "${KEYCLOAK_PORT:-8080}:8080"
    healthcheck:
      test: ["CMD-SHELL", "bash -ec '</dev/tcp/127.0.0.1/8080'"]
      interval: 10s
      timeout: 5s
      retries: 30
      start_period: 60s
    volumes:
      - ./keycloak/tmp-import:/opt/keycloak/data/import:ro,z

  pathocore_api:
    build:
      context: ../pathocore-api
      args:
        GIT_REVISION: ${PATHOCORE_API_GIT_REVISION:-current}
        INSTALL_CONF: ${PATHOCORE_API_INSTALL_CONF:-conf/docker_test_settings.txt}
    command: ["bash", "/usr/local/bin/pathocore-api-start.sh"]
    restart: unless-stopped
    depends_on:
      pathocore_db:
        condition: service_healthy
      keycloak:
        condition: service_healthy
      mailpit:
        condition: service_started
    environment:
      APP_INSTALL_PATH: /opt/pathocore-api
      APP_REPO_PATH: /srv/pathocore-api
      APP_PORT: 8000
      APP_UID: ${APP_UID:-1001}
      APP_GID: ${APP_GID:-1001}
      DB_USER: ${DB_USER:-pathocore}
      DB_PASSWORD: ${DB_PASSWORD:-pathocore_password}
      DB_NAME: ${DB_NAME:-pathocore_api}
      DB_HOST: pathocore_db
      DB_PORT: 3306
      LOCAL_SERVER_IP: ${LOCAL_SERVER_IP:-127.0.0.1}
      DNS_URL: ${DNS_URL:-localhost}
      PATHOCORE_ENABLE_LEGACY_BASIC_AUTH: ${PATHOCORE_ENABLE_LEGACY_BASIC_AUTH:-true}
      PATHOCORE_ENABLE_PUBLIC_READ_ENDPOINTS: ${PATHOCORE_ENABLE_PUBLIC_READ_ENDPOINTS:-true}
      PATHOCORE_RATELIMIT_ENABLED: ${PATHOCORE_RATELIMIT_ENABLED:-true}
      PATHOCORE_RATELIMIT_AUTHENTICATED_RATE: ${PATHOCORE_RATELIMIT_AUTHENTICATED_RATE:-300/m}
      PATHOCORE_RATELIMIT_EXPENSIVE_RATE: ${PATHOCORE_RATELIMIT_EXPENSIVE_RATE:-60/m}
      PATHOCORE_RATELIMIT_WRITE_RATE: ${PATHOCORE_RATELIMIT_WRITE_RATE:-20/m}
      PATHOCORE_RATELIMIT_IP_META_KEY: ${PATHOCORE_RATELIMIT_IP_META_KEY:-}
      PATHOCORE_RATELIMIT_CACHE: ${PATHOCORE_RATELIMIT_CACHE:-default}
      PUBLIC_API_THROTTLE_RATE: ${PUBLIC_API_THROTTLE_RATE:-500/hour}
      PATHOCORE_CREATE_DEFAULT_SUPERUSER: ${PATHOCORE_CREATE_DEFAULT_SUPERUSER:-true}
      DJANGO_SUPERUSER_USERNAME: ${DJANGO_SUPERUSER_USERNAME:-admin}
      DJANGO_SUPERUSER_EMAIL: ${DJANGO_SUPERUSER_EMAIL:-admin@example.org}
      DJANGO_SUPERUSER_PASSWORD: ${DJANGO_SUPERUSER_PASSWORD:-admin_pass}
      KEYCLOAK_ISSUER: ${KEYCLOAK_ISSUER:-http://127.0.0.1:8080/realms/ciberisciii_datahub}
      KEYCLOAK_JWKS_URL: ${KEYCLOAK_JWKS_URL:-http://keycloak:8080/realms/ciberisciii_datahub/protocol/openid-connect/certs}
      KEYCLOAK_REALM: ${KEYCLOAK_REALM:-ciberisciii_datahub}
      KEYCLOAK_AUDIENCE: ${KEYCLOAK_AUDIENCE:-pathocore-api}
      KEYCLOAK_CLIENT_ID: ${KEYCLOAK_CLIENT_ID:-pathocore-web}
      KEYCLOAK_JWKS_CACHE_TTL_SECONDS: ${KEYCLOAK_JWKS_CACHE_TTL_SECONDS:-300}
      KEYCLOAK_JWKS_TIMEOUT_SECONDS: ${KEYCLOAK_JWKS_TIMEOUT_SECONDS:-5}
      KEYCLOAK_ADMIN_BASE_URL: ${KEYCLOAK_ADMIN_BASE_URL:-http://keycloak:8080}
      KEYCLOAK_ADMIN_TOKEN_REALM: ${KEYCLOAK_ADMIN_TOKEN_REALM:-master}
      KEYCLOAK_ADMIN_CLIENT_ID: ${KEYCLOAK_ADMIN_CLIENT_ID:-admin-cli}
      KEYCLOAK_ADMIN_USERNAME: ${KEYCLOAK_ADMIN_USERNAME:-admin}
      KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD:-admin}
      KEYCLOAK_ADMIN_SEND_ACTION_EMAILS: ${KEYCLOAK_ADMIN_SEND_ACTION_EMAILS:-true}
      KEYCLOAK_ADMIN_ACTION_EMAIL_REDIRECT_URI: ${KEYCLOAK_ADMIN_ACTION_EMAIL_REDIRECT_URI:-}
      PATHOCORE_ACCESS_REQUEST_ADMIN_EMAILS: ${PATHOCORE_ACCESS_REQUEST_ADMIN_EMAILS:-}
      EMAIL_HOST: ${EMAIL_HOST:-mailpit}
      EMAIL_PORT: ${EMAIL_PORT:-1025}
      EMAIL_HOST_USER: ${EMAIL_HOST_USER:-}
      EMAIL_HOST_PASSWORD: ${EMAIL_HOST_PASSWORD:-}
      EMAIL_USE_TLS: ${EMAIL_USE_TLS:-false}
      DEFAULT_FROM_EMAIL: ${DEFAULT_FROM_EMAIL:-no-reply@pathocore.local}
      DATABROWSER_CACHE_SCHEDULER_ENABLED: ${DATABROWSER_CACHE_SCHEDULER_ENABLED:-true}
      DATABROWSER_CACHE_REFRESH_WEEKDAY: ${DATABROWSER_CACHE_REFRESH_WEEKDAY:-4}
      DATABROWSER_CACHE_REFRESH_TIME: ${DATABROWSER_CACHE_REFRESH_TIME:-12:00}
      DATABROWSER_CACHE_REFRESH_ON_START: ${DATABROWSER_CACHE_REFRESH_ON_START:-false}
      LOAD_INITIAL_TABLES: ${LOAD_INITIAL_TABLES:-false}
    ports:
      - "${PATHOCORE_API_PORT:-8000}:8000"
    healthcheck:
      test: ["CMD-SHELL", "bash -ec '</dev/tcp/127.0.0.1/8000'"]
      interval: 10s
      timeout: 5s
      retries: 30
      start_period: 180s
    volumes:
      - ./docker/pathocore-api-start.sh:/usr/local/bin/pathocore-api-start.sh:ro,z
      - pathocore_api_documents:/opt/pathocore-api/documents
      - pathocore_api_logs:/opt/pathocore-api/logs
      - pathocore_api_static:/opt/pathocore-api/static

  mepram_omop_db:
    image: mysql:8.0
    command: --default-authentication-plugin=mysql_native_password
    restart: unless-stopped
    environment:
      MYSQL_DATABASE: ${MEPRAM_DB_NAME:-mepram_omop_api}
      MYSQL_USER: ${MEPRAM_DB_USER:-mepram}
      MYSQL_PASSWORD: ${MEPRAM_DB_PASSWORD:-mepram_password}
      MYSQL_ROOT_PASSWORD: ${MEPRAM_DB_ROOT_PASSWORD:-root}
    ports:
      - "${MEPRAM_OMOP_DB_PORT_HOST:-6608}:3306"
    healthcheck:
      test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -u$$MYSQL_USER -p$$MYSQL_PASSWORD --silent"]
      interval: 5s
      timeout: 5s
      retries: 30
      start_period: 20s
    volumes:
      - mepram_omop_db_data:/var/lib/mysql

  mepram_omop_api:
    build:
      context: ../mepram-omop-api
    command: >
      sh -c "bash install.sh --bootstrap install --conf conf/docker_test_settings.txt &&
             python manage.py runserver 0.0.0.0:8000"
    restart: unless-stopped
    depends_on:
      mepram_omop_db:
        condition: service_healthy
      keycloak:
        condition: service_healthy
    environment:
      MEPRAM_API_DEBUG: ${MEPRAM_API_DEBUG:-true}
      MEPRAM_API_ALLOWED_HOSTS: ${MEPRAM_API_ALLOWED_HOSTS:-localhost,127.0.0.1,0.0.0.0}
      APP_INSTALL_PATH: /srv/mepram-omop-api
      MEPRAM_DB_HOST: mepram_omop_db
      MEPRAM_DB_PORT: 3306
      MEPRAM_DB_NAME: ${MEPRAM_DB_NAME:-mepram_omop_api}
      MEPRAM_DB_USER: ${MEPRAM_DB_USER:-mepram}
      MEPRAM_DB_PASSWORD: ${MEPRAM_DB_PASSWORD:-mepram_password}
      MEPRAM_DASHBOARD_SCHEMA: ${MEPRAM_DASHBOARD_SCHEMA:-mepram_omop_api}
      MEPRAM_CORS_ALLOWED_ORIGINS: ${MEPRAM_CORS_ALLOWED_ORIGINS:-http://127.0.0.1:3000,http://localhost:3000}
      MEPRAM_AUTH_REQUIRED: ${MEPRAM_AUTH_REQUIRED:-true}
      MEPRAM_DOCS_REQUIRE_STAFF: ${MEPRAM_DOCS_REQUIRE_STAFF:-true}
      MEPRAM_CREATE_DEFAULT_SUPERUSER: ${MEPRAM_CREATE_DEFAULT_SUPERUSER:-true}
      DJANGO_SUPERUSER_USERNAME: ${DJANGO_SUPERUSER_USERNAME:-admin}
      DJANGO_SUPERUSER_EMAIL: ${DJANGO_SUPERUSER_EMAIL:-admin@example.org}
      DJANGO_SUPERUSER_PASSWORD: ${DJANGO_SUPERUSER_PASSWORD:-admin_pass}
      MEPRAM_KEYCLOAK_ISSUER: ${MEPRAM_KEYCLOAK_ISSUER:-http://127.0.0.1:8080/realms/ciberisciii_datahub}
      MEPRAM_KEYCLOAK_JWKS_URL: ${MEPRAM_KEYCLOAK_JWKS_URL:-http://keycloak:8080/realms/ciberisciii_datahub/protocol/openid-connect/certs}
      MEPRAM_KEYCLOAK_AUDIENCE: ${MEPRAM_KEYCLOAK_AUDIENCE:-mepram-api}
      MEPRAM_KEYCLOAK_CLIENT_ID: ${MEPRAM_KEYCLOAK_CLIENT_ID:-pathocore-web}
      MEPRAM_KEYCLOAK_JWKS_CACHE_TTL_SECONDS: ${MEPRAM_KEYCLOAK_JWKS_CACHE_TTL_SECONDS:-300}
      MEPRAM_KEYCLOAK_JWKS_TIMEOUT_SECONDS: ${MEPRAM_KEYCLOAK_JWKS_TIMEOUT_SECONDS:-5}
    ports:
      - "${MEPRAM_OMOP_API_PORT:-8100}:8000"
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "python - <<'PY'\nimport urllib.request\nurllib.request.urlopen('http://127.0.0.1:8000/v1/health', timeout=5).read()\nPY",
        ]
      interval: 10s
      timeout: 5s
      retries: 30
      start_period: 20s
    volumes:
      - mepram_omop_api_data:/data

  pathocore_web:
    build:
      context: .
      target: dev
    restart: unless-stopped
    depends_on:
      pathocore_api:
        condition: service_healthy
    environment:
      VITE_API_BASE_URL: ${VITE_API_BASE_URL:-/api/v1}
      PATHOCORE_API_PROXY_TARGET: ${PATHOCORE_API_PROXY_TARGET:-http://pathocore_api:8000}
      VITE_KEYCLOAK_URL: ${VITE_KEYCLOAK_URL:-http://127.0.0.1:8080}
      VITE_KEYCLOAK_REALM: ${VITE_KEYCLOAK_REALM:-ciberisciii_datahub}
      VITE_KEYCLOAK_CLIENT_ID: ${VITE_KEYCLOAK_CLIENT_ID:-pathocore-web}
      VITE_USE_CASE_DATA_MODE: ${VITE_USE_CASE_DATA_MODE:-live}
      VITE_USE_CASE_ALERTS_CONTACT_EMAIL: ${VITE_USE_CASE_ALERTS_CONTACT_EMAIL:-}
    ports:
      - "${PATHOCORE_WEB_PORT:-3000}:3000"
    volumes:
      - .:/app:z
    healthcheck:
      test: ["CMD-SHELL", "node -e \"require('http').get('http://127.0.0.1:3000', r => process.exit(r.statusCode < 500 ? 0 : 1)).on('error', () => process.exit(1))\""]
      interval: 10s
      timeout: 5s
      retries: 30
      start_period: 180s

  adminer:
    image: adminer
    restart: unless-stopped
    ports:
    - 8085:8080
    depends_on:
      - keycloak_db
      - mepram_omop_db
      - pathocore_db

  mailpit:
    image: axllent/mailpit:v1.27
    restart: unless-stopped
    ports:
      - "${MAILPIT_SMTP_PORT:-1025}:1025"
      - "${MAILPIT_WEB_PORT:-8025}:8025"

volumes:
  keycloak_db_data:
  mepram_omop_api_data:
  mepram_omop_db_data:
  pathocore_api_documents:
  pathocore_api_logs:
  pathocore_api_static:
  pathocore_db_data: