docker-compose.yml

version: '3.8'
services:
  proxy:
    image: nginx:1.21
    restart: "no"
    ports:
      - 127.0.0.1:443:443
    secrets:
      - proxy_certificate_and_int_cas.pem
      - proxy_certificate_private_key.pem
      - proxy_trusted_client_cas.pem
    volumes:
      - type: bind
        source: ./proxy/conf.d
        target: /etc/nginx/conf.d
        read_only: true
      - type: bind
        source: ./proxy/nginx.conf
        target: /etc/nginx/nginx.conf
        read_only: true
    networks:
      dic-fhir-frontend:
        ipv4_address: 172.20.0.66
      dts-fhir-frontend:
        ipv4_address: 172.20.0.82
      crr-fhir-frontend:
        ipv4_address: 172.20.0.98
      internet:
        aliases:
          - dic
          - dts
          - crr
    environment:
      TZ: Europe/Berlin

  db:
    image: postgres:15
    restart: "no"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U liquibase_user -d postgres"]
      interval: 10s
      timeout: 5s
      retries: 5
    environment:
      TZ: Europe/Berlin
      POSTGRES_PASSWORD_FILE: /run/secrets/db_liquibase.password
      POSTGRES_USER: liquibase_user
      POSTGRES_DB: postgres
    networks:
      - dic-fhir-backend
      - dts-fhir-backend
      - crr-fhir-backend
      - dic-bpe-backend
      - dts-bpe-backend
      - crr-bpe-backend
    secrets:
      - db_liquibase.password
    volumes:
      - type: volume
        source: db-data
        target: /var/lib/postgresql/data
      - type: bind
        source: ./db/init-db.sh
        target: /docker-entrypoint-initdb.d/init-db.sh
        read_only: true

  mailhog:
    image: mailhog/mailhog
    restart: "no"
    ports:
      - 127.0.0.1:8025:8025 # web ui
    networks:
      internet:


  dic-fhir:
    image: ghcr.io/datasharingframework/fhir:1.5.1
    restart: "no"
    ports:
      - 127.0.0.1:5000:5000
    secrets:
      - db_liquibase.password
      - db_dic_fhir_user.password
      - db_dic_fhir_user_permanent_delete.password
      - app_server_trust_certificates.pem
      - app_client_trust_certificates.pem
      - app_dic_client_certificate.pem
      - app_dic_client_certificate_private_key.pem
      - app_client_certificate_private_key.pem.password
    volumes:
      - type: bind
        source: ./dic/fhir/conf/bundle.xml
        target: /opt/fhir/conf/bundle.xml
      - type: bind
        source: ./dic/fhir/log
        target: /opt/fhir/log
    environment:
      TZ: Europe/Berlin
      EXTRA_JVM_ARGS: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5000
      DEV_DSF_FHIR_DB_LIQUIBASE_PASSWORD_FILE: /run/secrets/db_liquibase.password
      DEV_DSF_FHIR_DB_USER_PASSWORD_FILE: /run/secrets/db_dic_fhir_user.password
      DEV_DSF_FHIR_DB_USER_PERMANENT_DELETE_PASSWORD_FILE: /run/secrets/db_dic_fhir_user_permanent_delete.password
      DEV_DSF_FHIR_CLIENT_TRUST_SERVER_CERTIFICATE_CAS: /run/secrets/app_server_trust_certificates.pem
      DEV_DSF_FHIR_CLIENT_CERTIFICATE: /run/secrets/app_dic_client_certificate.pem
      DEV_DSF_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY: /run/secrets/app_dic_client_certificate_private_key.pem
      DEV_DSF_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY_PASSWORD_FILE: /run/secrets/app_client_certificate_private_key.pem.password
      DEV_DSF_FHIR_DB_URL: jdbc:postgresql://db/dic_fhir
      DEV_DSF_FHIR_DB_USER_GROUP: dic_fhir_users
      DEV_DSF_FHIR_DB_USER_USERNAME: dic_fhir_server_user
      DEV_DSF_FHIR_DB_USER_PERMANENT_DELETE_GROUP: dic_fhir_permanent_delete_users
      DEV_DSF_FHIR_DB_USER_PERMANENT_DELETE_USERNAME: dic_fhir_server_permanent_delete_user
      DEV_DSF_FHIR_SERVER_BASE_URL: https://dic/fhir
      DEV_DSF_FHIR_SERVER_ORGANIZATION_IDENTIFIER_VALUE: Test_DIC
      DEV_DSF_SERVER_AUTH_TRUST_CLIENT_CERTIFICATE_CAS: /run/secrets/app_client_trust_certificates.pem
      DEV_DSF_FHIR_SERVER_ROLECONFIG: |
        - webbrowser_test_user:
            thumbprint: ${WEBBROSER_TEST_USER_THUMBPRINT}
            token-role: admin
            dsf-role:
              - CREATE
              - READ
              - UPDATE
              - DELETE
              - SEARCH
              - HISTORY
              - PERMANENT_DELETE
            practitioner-role:
              - http://dsf.dev/fhir/CodeSystem/practitioner-role|DSF_ADMIN
              - http://dsf.dev/fhir/CodeSystem/practitioner-role|DIC_USER
    networks:
      dic-fhir-frontend:
        ipv4_address: 172.20.0.67
      dic-fhir-backend:
      internet:
    depends_on:
      - db
      - proxy
  dic-bpe:
    image: ghcr.io/datasharingframework/bpe:1.5.1
    restart: "no"
    ports:
      - 127.0.0.1:5003:5003
    secrets:
      - db_liquibase.password
      - db_dic_bpe_user.password
      - db_dic_bpe_user_camunda.password
      - app_server_trust_certificates.pem
      - app_client_trust_certificates.pem
      - app_dic_client_certificate.pem
      - app_dic_client_certificate_private_key.pem
      - app_client_certificate_private_key.pem.password
      - crr_public_key.pem
    volumes:
      - type: bind
        source: ./dic/bpe/plugin
        target: /opt/bpe/plugin
        read_only: true
      - type: bind
        source: ./dic/bpe/process
        target: /opt/bpe/process
        read_only: true
      - type: bind
        source: ./dic/bpe/log
        target: /opt/bpe/log
      - type: bind
        source: ./dic/bpe/cache
        target: /opt/bpe/cache
    environment:
      TZ: Europe/Berlin
      EXTRA_JVM_ARGS: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5003
      DEV_DSF_BPE_DB_LIQUIBASE_PASSWORD_FILE: /run/secrets/db_liquibase.password
      DEV_DSF_BPE_DB_USER_PASSWORD_FILE: /run/secrets/db_dic_bpe_user.password
      DEV_DSF_BPE_DB_USER_CAMUNDA_PASSWORD_FILE: /run/secrets/db_dic_bpe_user_camunda.password
      DEV_DSF_BPE_FHIR_CLIENT_TRUST_SERVER_CERTIFICATE_CAS: /run/secrets/app_server_trust_certificates.pem
      DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE: /run/secrets/app_dic_client_certificate.pem
      DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY: /run/secrets/app_dic_client_certificate_private_key.pem
      DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY_PASSWORD_FILE: /run/secrets/app_client_certificate_private_key.pem.password
      DEV_DSF_BPE_DB_URL: jdbc:postgresql://db/dic_bpe
      DEV_DSF_BPE_DB_USER_GROUP: dic_bpe_users
      DEV_DSF_BPE_DB_USER_USERNAME: dic_bpe_server_user
      DEV_DSF_BPE_DB_USER_CAMUNDA_GROUP: dic_camunda_users
      DEV_DSF_BPE_DB_USER_CAMUNDA_USERNAME: dic_camunda_server_user
      DEV_DSF_BPE_FHIR_SERVER_BASE_URL: https://dic/fhir
      DEV_DSF_BPE_MAIL_HOST: mailhog
      DEV_DSF_BPE_MAIL_PORT: 1025
      DEV_DSF_BPE_MAIL_FROMADDRESS: bpe@dic
      DEV_DSF_BPE_MAIL_TOADDRESSES: bpe@dic
      DEV_DSF_BPE_PROCESS_EXCLUDED: |
        wwwnetzwerk-universitaetsmedizinde_dataTranslate|${PROCESS_VERSION}
        wwwnetzwerk-universitaetsmedizinde_dataReceive|${PROCESS_VERSION}
      DEV_DSF_SERVER_AUTH_TRUST_CLIENT_CERTIFICATE_CAS: /run/secrets/app_client_trust_certificates.pem
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_DTS_IDENTIFIER_VALUE: Test_DTS
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_CRR_PUBLIC_KEY: /run/secrets/crr_public_key.pem
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_DATA_BASE_URL: http://dic-fhir-store:8080/fhir
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_VALIDATION_PACKAGE_CACHEFOLDER: /opt/bpe/cache/Package/
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_VALIDATION_STRUCTUREDEFINITION_CACHEFOLDER: /opt/bpe/cache/StructureDefinition/
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_VALIDATION_VALUESET_CACHEFOLDER: /opt/bpe/cache/ValueSet/
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_VALIDATION_VALUESET_EXPANSION_SERVER_BASEURL: https://r4.ontoserver.csiro.au/fhir
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_MAIL_SENDDRYRUNSUCCESSMAIL: 'true'
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_VALIDATION: 'false'
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_DATALOGGINGENABLED: 'true'
    networks:
      dic-bpe-frontend:
      dic-bpe-backend:
      internet:
    depends_on:
      - db
      - dic-fhir
      - mailhog
      # - dic-fhir-store not defining a dependency here, dic-fhir-store* needs to be started manually
  dic-fhir-store-hapi:
    build: ./dic/hapi
    restart: "no"
    ports:
      - 127.0.0.1:8080:8080
    environment:
      TZ: Europe/Berlin
    networks:
      dic-bpe-backend:
        aliases:
          - dic-fhir-store
  dic-fhir-store-blaze:
    image: samply/blaze
    ports:
      - 127.0.0.1:8080:8080
    environment:
      TZ: Europe/Berlin
    networks:
      dic-bpe-backend:
        aliases:
          - dic-fhir-store


  dts-fhir:
    image: ghcr.io/datasharingframework/fhir:1.5.1
    restart: "no"
    ports:
      - 127.0.0.1:5001:5001
    secrets:
      - db_liquibase.password
      - db_dts_fhir_user.password
      - db_dts_fhir_user_permanent_delete.password
      - app_server_trust_certificates.pem
      - app_client_trust_certificates.pem
      - app_dts_client_certificate.pem
      - app_dts_client_certificate_private_key.pem
      - app_client_certificate_private_key.pem.password
    volumes:
      - type: bind
        source: ./dts/fhir/conf/bundle.xml
        target: /opt/fhir/conf/bundle.xml
      - type: bind
        source: ./dts/fhir/log
        target: /opt/fhir/log
    environment:
      TZ: Europe/Berlin
      EXTRA_JVM_ARGS: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5001
      DEV_DSF_FHIR_DB_LIQUIBASE_PASSWORD_FILE: /run/secrets/db_liquibase.password
      DEV_DSF_FHIR_DB_USER_PASSWORD_FILE: /run/secrets/db_dts_fhir_user.password
      DEV_DSF_FHIR_DB_USER_PERMANENT_DELETE_PASSWORD_FILE: /run/secrets/db_dts_fhir_user_permanent_delete.password
      DEV_DSF_FHIR_CLIENT_TRUST_SERVER_CERTIFICATE_CAS: /run/secrets/app_server_trust_certificates.pem
      DEV_DSF_FHIR_CLIENT_CERTIFICATE: /run/secrets/app_dts_client_certificate.pem
      DEV_DSF_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY: /run/secrets/app_dts_client_certificate_private_key.pem
      DEV_DSF_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY_PASSWORD_FILE: /run/secrets/app_client_certificate_private_key.pem.password
      DEV_DSF_FHIR_DB_URL: jdbc:postgresql://db/dts_fhir
      DEV_DSF_FHIR_DB_USER_GROUP: dts_fhir_users
      DEV_DSF_FHIR_DB_USER_USERNAME: dts_fhir_server_user
      DEV_DSF_FHIR_DB_USER_PERMANENT_DELETE_GROUP: dts_fhir_permanent_delete_users
      DEV_DSF_FHIR_DB_USER_PERMANENT_DELETE_USERNAME: dts_fhir_server_permanent_delete_user
      DEV_DSF_FHIR_SERVER_BASE_URL: https://dts/fhir
      DEV_DSF_FHIR_SERVER_ORGANIZATION_IDENTIFIER_VALUE: Test_DTS
      DEV_DSF_SERVER_AUTH_TRUST_CLIENT_CERTIFICATE_CAS: /run/secrets/app_client_trust_certificates.pem
      DEV_DSF_FHIR_SERVER_ROLECONFIG: |
        - webbrowser_test_user:
            thumbprint: ${WEBBROSER_TEST_USER_THUMBPRINT}
            token-role: admin
            dsf-role:
              - CREATE
              - READ
              - UPDATE
              - DELETE
              - SEARCH
              - HISTORY
              - PERMANENT_DELETE
            practitioner-role:
              - http://dsf.dev/fhir/CodeSystem/practitioner-role|DSF_ADMIN
    networks:
      dts-fhir-frontend:
        ipv4_address: 172.20.0.83
      dts-fhir-backend:
      internet:
    depends_on:
      - db
      - proxy
  dts-bpe:
    image: ghcr.io/datasharingframework/bpe:1.5.1
    restart: "no"
    ports:
      - 127.0.0.1:5004:5004
    secrets:
      - db_liquibase.password
      - db_dts_bpe_user.password
      - db_dts_bpe_user_camunda.password
      - app_server_trust_certificates.pem
      - app_client_trust_certificates.pem
      - app_dts_client_certificate.pem
      - app_dts_client_certificate_private_key.pem
      - app_client_certificate_private_key.pem.password
    volumes:
      - type: bind
        source: ./dts/bpe/plugin
        target: /opt/bpe/plugin
        read_only: true
      - type: bind
        source: ./dts/bpe/process
        target: /opt/bpe/process
        read_only: true
      - type: bind
        source: ./dts/bpe/log
        target: /opt/bpe/log
    environment:
      TZ: Europe/Berlin
      EXTRA_JVM_ARGS: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5004
      DEV_DSF_BPE_DB_LIQUIBASE_PASSWORD_FILE: /run/secrets/db_liquibase.password
      DEV_DSF_BPE_DB_USER_PASSWORD_FILE: /run/secrets/db_dts_bpe_user.password
      DEV_DSF_BPE_DB_USER_CAMUNDA_PASSWORD_FILE: /run/secrets/db_dts_bpe_user_camunda.password
      DEV_DSF_BPE_FHIR_CLIENT_TRUST_SERVER_CERTIFICATE_CAS: /run/secrets/app_server_trust_certificates.pem
      DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE: /run/secrets/app_dts_client_certificate.pem
      DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY: /run/secrets/app_dts_client_certificate_private_key.pem
      DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY_PASSWORD_FILE: /run/secrets/app_client_certificate_private_key.pem.password
      DEV_DSF_BPE_DB_URL: jdbc:postgresql://db/dts_bpe
      DEV_DSF_BPE_DB_USER_GROUP: dts_bpe_users
      DEV_DSF_BPE_DB_USER_USERNAME: dts_bpe_server_user
      DEV_DSF_BPE_DB_USER_CAMUNDA_GROUP: dts_camunda_users
      DEV_DSF_BPE_DB_USER_CAMUNDA_USERNAME: dts_camunda_server_user
      DEV_DSF_BPE_FHIR_SERVER_BASE_URL: https://dts/fhir
      DEV_DSF_BPE_MAIL_HOST: mailhog
      DEV_DSF_BPE_MAIL_PORT: 1025
      DEV_DSF_BPE_MAIL_FROMADDRESS: bpe@dts
      DEV_DSF_BPE_MAIL_TOADDRESSES: bpe@dts
      DEV_DSF_BPE_PROCESS_EXCLUDED: |
        wwwnetzwerk-universitaetsmedizinde_dataTrigger|${PROCESS_VERSION}
        wwwnetzwerk-universitaetsmedizinde_dataSend|${PROCESS_VERSION}
        wwwnetzwerk-universitaetsmedizinde_dataReceive|${PROCESS_VERSION}
      DEV_DSF_SERVER_AUTH_TRUST_CLIENT_CERTIFICATE_CAS: /run/secrets/app_client_trust_certificates.pem
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_DTS_IDENTIFIER_VALUE: Test_DTS
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_CRR_IDENTIFIER_VALUE: Test_CRR
    networks:
      dts-bpe-frontend:
      dts-bpe-backend:
      internet:
    depends_on:
      - db
      - dts-fhir
      - mailhog


  crr-fhir:
    image: ghcr.io/datasharingframework/fhir:1.5.1
    restart: "no"
    ports:
      - 127.0.0.1:5002:5002
    secrets:
      - db_liquibase.password
      - db_crr_fhir_user.password
      - db_crr_fhir_user_permanent_delete.password
      - app_server_trust_certificates.pem
      - app_client_trust_certificates.pem
      - app_crr_client_certificate.pem
      - app_crr_client_certificate_private_key.pem
      - app_client_certificate_private_key.pem.password
    volumes:
      - type: bind
        source: ./crr/fhir/conf/bundle.xml
        target: /opt/fhir/conf/bundle.xml
      - type: bind
        source: ./crr/fhir/log
        target: /opt/fhir/log
    environment:
      TZ: Europe/Berlin
      EXTRA_JVM_ARGS: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5002
      DEV_DSF_FHIR_DB_LIQUIBASE_PASSWORD_FILE: /run/secrets/db_liquibase.password
      DEV_DSF_FHIR_DB_USER_PASSWORD_FILE: /run/secrets/db_crr_fhir_user.password
      DEV_DSF_FHIR_DB_USER_PERMANENT_DELETE_PASSWORD_FILE: /run/secrets/db_crr_fhir_user_permanent_delete.password
      DEV_DSF_FHIR_CLIENT_TRUST_SERVER_CERTIFICATE_CAS: /run/secrets/app_server_trust_certificates.pem
      DEV_DSF_FHIR_CLIENT_CERTIFICATE: /run/secrets/app_crr_client_certificate.pem
      DEV_DSF_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY: /run/secrets/app_crr_client_certificate_private_key.pem
      DEV_DSF_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY_PASSWORD_FILE: /run/secrets/app_client_certificate_private_key.pem.password
      DEV_DSF_FHIR_DB_URL: jdbc:postgresql://db/crr_fhir
      DEV_DSF_FHIR_DB_USER_GROUP: crr_fhir_users
      DEV_DSF_FHIR_DB_USER_USERNAME: crr_fhir_server_user
      DEV_DSF_FHIR_DB_USER_PERMANENT_DELETE_GROUP: crr_fhir_permanent_delete_users
      DEV_DSF_FHIR_DB_USER_PERMANENT_DELETE_USERNAME: crr_fhir_server_permanent_delete_user
      DEV_DSF_FHIR_SERVER_BASE_URL: https://crr/fhir
      DEV_DSF_FHIR_SERVER_ORGANIZATION_IDENTIFIER_VALUE: Test_CRR
      DEV_DSF_SERVER_AUTH_TRUST_CLIENT_CERTIFICATE_CAS: /run/secrets/app_client_trust_certificates.pem
      DEV_DSF_FHIR_SERVER_ROLECONFIG: |
        - webbrowser_test_user:
            thumbprint: ${WEBBROSER_TEST_USER_THUMBPRINT}
            token-role: admin
            dsf-role:
              - CREATE
              - READ
              - UPDATE
              - DELETE
              - SEARCH
              - HISTORY
              - PERMANENT_DELETE
            practitioner-role:
              - http://dsf.dev/fhir/CodeSystem/practitioner-role|DSF_ADMIN
    networks:
      crr-fhir-frontend:
        ipv4_address: 172.20.0.99
      crr-fhir-backend:
      internet:
    depends_on:
      - db
      - proxy
  crr-bpe:
    image: ghcr.io/datasharingframework/bpe:1.5.1
    restart: "no"
    ports:
      - 127.0.0.1:5005:5005
    secrets:
      - db_liquibase.password
      - db_crr_bpe_user.password
      - db_crr_bpe_user_camunda.password
      - app_server_trust_certificates.pem
      - app_client_trust_certificates.pem
      - app_crr_client_certificate.pem
      - app_crr_client_certificate_private_key.pem
      - app_client_certificate_private_key.pem.password
      - crr_private_key.pem
    volumes:
      - type: bind
        source: ./crr/bpe/plugin
        target: /opt/bpe/plugin
        read_only: true
      - type: bind
        source: ./crr/bpe/process
        target: /opt/bpe/process
        read_only: true
      - type: bind
        source: ./crr/bpe/log
        target: /opt/bpe/log
    environment:
      TZ: Europe/Berlin
      EXTRA_JVM_ARGS: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005
      DEV_DSF_BPE_DB_LIQUIBASE_PASSWORD_FILE: /run/secrets/db_liquibase.password
      DEV_DSF_BPE_DB_USER_PASSWORD_FILE: /run/secrets/db_crr_bpe_user.password
      DEV_DSF_BPE_DB_USER_CAMUNDA_PASSWORD_FILE: /run/secrets/db_crr_bpe_user_camunda.password
      DEV_DSF_BPE_FHIR_CLIENT_TRUST_SERVER_CERTIFICATE_CAS: /run/secrets/app_server_trust_certificates.pem
      DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE: /run/secrets/app_crr_client_certificate.pem
      DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY: /run/secrets/app_crr_client_certificate_private_key.pem
      DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY_PASSWORD_FILE: /run/secrets/app_client_certificate_private_key.pem.password
      DEV_DSF_BPE_DB_URL: jdbc:postgresql://db/crr_bpe
      DEV_DSF_BPE_DB_USER_GROUP: crr_bpe_users
      DEV_DSF_BPE_DB_USER_USERNAME: crr_bpe_server_user
      DEV_DSF_BPE_DB_USER_CAMUNDA_GROUP: crr_camunda_users
      DEV_DSF_BPE_DB_USER_CAMUNDA_USERNAME: crr_camunda_server_user
      DEV_DSF_BPE_FHIR_SERVER_BASE_URL: https://crr/fhir
      DEV_DSF_BPE_MAIL_HOST: mailhog
      DEV_DSF_BPE_MAIL_PORT: 1025
      DEV_DSF_BPE_MAIL_FROMADDRESS: bpe@crr
      DEV_DSF_BPE_MAIL_TOADDRESSES: bpe@crr
      DEV_DSF_BPE_PROCESS_EXCLUDED: |
        wwwnetzwerk-universitaetsmedizinde_dataTrigger|${PROCESS_VERSION}
        wwwnetzwerk-universitaetsmedizinde_dataSend|${PROCESS_VERSION}
        wwwnetzwerk-universitaetsmedizinde_dataTranslate|${PROCESS_VERSION}
      DEV_DSF_SERVER_AUTH_TRUST_CLIENT_CERTIFICATE_CAS: /run/secrets/app_client_trust_certificates.pem
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_DTS_IDENTIFIER_VALUE: Test_DTS
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_CRR_IDENTIFIER_VALUE: Test_CRR
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_CRR_PRIVATE_KEY: /run/secrets/crr_private_key.pem
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_DATA_BASE_URL: http://crr-fhir-store-hapi:8080/fhir
      DE_NETZWERK_UNIVERSITAETSMEDIZIN_RDP_DATALOGGINGENABLED: 'true'
    networks:
      crr-bpe-frontend:
      crr-bpe-backend:
      internet:
    depends_on:
      - db
      - crr-fhir
      - mailhog
      # - crr-fhir-bridge not defining a dependency here, crr-fhir-bridge* needs to be started manually
  crr-ehrbase-db:
    image: ehrbase/ehrbase-postgres
    networks:
      - crr-ehrbase-network
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
      EHRBASE_USER: ehrbase
      EHRBASE_PASSWORD: ehrbase
      TZ: Europe/Berlin
  crr-ehrbase:
    image: ehrbase/ehrbase
    networks:
      - crr-ehrbase-network
    environment:
      DB_URL: jdbc:postgresql://crr-ehrbase-db:5432/ehrbase
      DB_USER: ehrbase
      DB_PASS: ehrbase
      SECURITY_AUTHTYPE: BASIC
      SECURITY_AUTHUSER: myuser
      SECURITY_AUTHPASSWORD: myPassword432
      SECURITY_AUTHADMINUSER: myadmin
      SECURITY_AUTHADMINPASSWORD: mySuperAwesomePassword123
      SYSTEM_NAME: local.ehrbase.org
      ADMIN_API_ACTIVE: 'true'
      # SERVER_DISABLESTRICTVALIDATION: 'true'
      TZ: Europe/Berlin
    depends_on:
      - crr-ehrbase-db
  crr-fhir-bridge:
    image: ehrbase/fhir-bridge
    ports:
      - 127.0.0.1:8888:8888
      - 127.0.0.1:5006:5006
    networks:
      - crr-ehrbase-network
      - crr-bpe-backend
    environment:
      FHIR_BRIDGE_EHRBASE_BASE_URL: http://crr-ehrbase:8080/ehrbase/
      FHIR_BRIDGE_FHIR_VALIDATION_OPTIONAL_IDENTIFIER: 'true'
      TZ: Europe/Berlin
      # SPRING_PROFILES_ACTIVE: dev
      JAVA_TOOL_OPTIONS: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5006
    depends_on:
      - crr-ehrbase
  crr-fhir-store-hapi:
    build: ./crr/hapi
    restart: "no"
    ports:
      - 127.0.0.1:8888:8080
    environment:
      TZ: Europe/Berlin
      hapi.fhir.allowed_bundle_types: COLLECTION,DOCUMENT,MESSAGE,TRANSACTION
    networks:
      - crr-bpe-backend


secrets:
  proxy_certificate_and_int_cas.pem:
    file: ./secrets/proxy_certificate_and_int_cas.pem
  proxy_certificate_private_key.pem:
    file: ./secrets/proxy_certificate_private_key.pem
  proxy_trusted_client_cas.pem:
    file: ./secrets/proxy_trusted_client_cas.pem

  db_liquibase.password:
    file: ./secrets/db_liquibase.password

  db_dic_fhir_user.password:
    file: ./secrets/db_dic_fhir_user.password
  db_dic_fhir_user_permanent_delete.password:
    file: ./secrets/db_dic_fhir_user_permanent_delete.password
  db_dic_bpe_user.password:
    file: ./secrets/db_dic_bpe_user.password
  db_dic_bpe_user_camunda.password:
    file: ./secrets/db_dic_bpe_user_camunda.password

  db_dts_fhir_user.password:
    file: ./secrets/db_dts_fhir_user.password
  db_dts_fhir_user_permanent_delete.password:
    file: ./secrets/db_dts_fhir_user_permanent_delete.password
  db_dts_bpe_user.password:
    file: ./secrets/db_dts_bpe_user.password
  db_dts_bpe_user_camunda.password:
    file: ./secrets/db_dts_bpe_user_camunda.password

  db_crr_fhir_user.password:
    file: ./secrets/db_crr_fhir_user.password
  db_crr_fhir_user_permanent_delete.password:
    file: ./secrets/db_crr_fhir_user_permanent_delete.password
  db_crr_bpe_user.password:
    file: ./secrets/db_crr_bpe_user.password
  db_crr_bpe_user_camunda.password:
    file: ./secrets/db_crr_bpe_user_camunda.password

  app_server_trust_certificates.pem:
    file: ./secrets/app_testca_certificate.pem
  app_client_trust_certificates.pem:
    file: ./secrets/app_testca_certificate.pem

  app_client_certificate_private_key.pem.password:
    file: ./secrets/app_client_certificate_private_key.pem.password

  app_dic_client_certificate.pem:
    file: ./secrets/app_dic_client_certificate.pem
  app_dic_client_certificate_private_key.pem:
    file: ./secrets/app_dic_client_certificate_private_key.pem

  app_dts_client_certificate.pem:
    file: ./secrets/app_dts_client_certificate.pem
  app_dts_client_certificate_private_key.pem:
    file: ./secrets/app_dts_client_certificate_private_key.pem

  app_crr_client_certificate.pem:
    file: ./secrets/app_crr_client_certificate.pem
  app_crr_client_certificate_private_key.pem:
    file: ./secrets/app_crr_client_certificate_private_key.pem

  crr_public_key.pem:
    file: ./secrets/crr_public_key.pem
  crr_private_key.pem:
    file: ./secrets/crr_private_key.pem

networks:
  internet:
  dic-fhir-frontend:
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 172.20.0.64/28
  dic-fhir-backend:
  dic-bpe-frontend:
  dic-bpe-backend:
  dts-fhir-frontend:
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 172.20.0.80/28
  dts-fhir-backend:
  dts-bpe-frontend:
  dts-bpe-backend:
  crr-fhir-frontend:
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 172.20.0.96/28
  crr-fhir-backend:
  crr-bpe-frontend:
  crr-bpe-backend:
  crr-ehrbase-network:


volumes:
  db-data:
    name: db-data-codex-dsf-processes