archivesspace/docker-compose.yml at main · lehigh-university-libraries/archivesspace · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
secrets:
  CERT_PUBLIC_KEY:
    file: ./certs/cert.pem
  CERT_PRIVATE_KEY:
    file: ./certs/privkey.pem

services:
  app:
    image: archivesspace/archivesspace:4.2.1@sha256:f46223c4e3fe5f32384779b0796f777b83db3ce878f76c727adf5aa96d88f4de
    platform: linux/x86_64
    container_name: archivesspace
    restart: unless-stopped
    ports:
      - "127.0.0.1:8089:8089"
    env_file:
      - .env
    depends_on:
      - db
      - solr
    volumes:
      - app-data:/archivesspace/data
      - ./plugins:/archivesspace/plugins
      - ./config:/archivesspace/config
      - ./locales:/archivesspace/locales
      - ./stylesheets:/archivesspace/stylesheets

  db:
    image: mysql:8.4.10@sha256:d36d39a64cd12a5c1cc9e6aa2bfb5f8d4c81a2f6586e0a04a9ae13939db02209
    platform: linux/x86_64
    cap_add:
      - SYS_NICE
    container_name: mysql
    restart: unless-stopped
    env_file:
      - .env
    command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci --innodb_buffer_pool_size=1G  --innodb_buffer_pool_instances=1 --log_bin_trust_function_creators=1
    volumes:
      - db-data:/var/lib/mysql
      - ./sql:/docker-entrypoint-initdb.d

  db-backup:
    image: databack/mysql-backup:1.5.0@sha256:668f299c4f0ecbf82f0178776d980f646cf12b74138565990f66038db191180a
    platform: linux/x86_64
    container_name: db-backup
    restart: unless-stopped
    user: "0"
    env_file:
      - .env
    environment:
      DB_DUMP_CRON: "0 2 * * *" # UTC
      DB_DUMP_TARGET: /db
      DB_SERVER: db
      DB_USER: root
      DB_PASS: ${MYSQL_ROOT_PASSWORD} # from .env
    command: dump
    volumes:
      - ./backups:/db
    depends_on:
      - db

  solr:
    image: archivesspace/solr:4.2.1@sha256:22d3e2002e1875385da83d3edfbd5931591fd410bd3e5be16823c8af6accbec4
    platform: linux/x86_64
    container_name: solr
    restart: unless-stopped
    env_file:
      - .env
    command:
      - solr-precreate
      - archivesspace
      - /opt/solr/server/solr/configsets/archivesspace
    volumes:
      - solr-data:/var/solr

  traefik:
    image: traefik:v3.7.6@sha256:21a3d83696379bac6434bb32e1dde0aff0e84ef2abd053ed3db87d3f45e749b2
    restart: always
    container_name: traefik
    command: >-
      --api.insecure=true
      --api.dashboard=true
      --api.debug=true
      --ping=true
      --entryPoints.http.address=:80
      --entryPoints.http.forwardedHeaders.trustedIPs=172.0.0.0/8
      --entryPoints.http.transport.respondingTimeouts.readTimeout=3600
      --entryPoints.https.address=:443
      --entryPoints.https.forwardedHeaders.trustedIPs=172.0.0.0/8
      --entryPoints.https.transport.respondingTimeouts.readTimeout=3600
      --providers.file.filename=/etc/traefik/config.yaml
      --providers.file.watch=true
      --providers.docker=true
      --providers.docker.network=default
      --providers.docker.exposedByDefault=false
      --experimental.localPlugins.captcha-protect.moduleName=github.com/libops/captcha-protect
    environment:
      TURNSTILE_SITE_KEY: ${TURNSTILE_SITE_KEY:-1x00000000000000000000AA}
      TURNSTILE_SECRET_KEY: ${TURNSTILE_SECRET_KEY:-1x0000000000000000000000000000000AA}
      LOG_LEVEL: ${LOG_LEVEL:-INFO}
      AS_HOSTNAME: ${AS_HOSTNAME}
    secrets:
      - source: CERT_PUBLIC_KEY
      - source: CERT_PRIVATE_KEY
    ports:
      - ${HOST_INSECURE_PORT:-80}:80
      - ${HOST_SECURE_PORT:-443}:443
    volumes:
      - ./conf/traefik/plugins/captcha-protect:/plugins-local/src/github.com/libops/captcha-protect:ro
      - ./conf/traefik/config.tmpl:/etc/traefik/config.yaml:ro
      - ./conf/traefik/challenge.tmpl.html:/challenge.tmpl.html:ro
      - /var/run/docker.sock:/var/run/docker.sock:z
      - traefik-data:/data
    healthcheck:
      test: traefik healthcheck --ping
      start_period: 5s
    depends_on:
      app:
        condition: service_healthy

volumes:
  app-data:
  db-data:
  solr-data:
  traefik-data: