bcda-ssas-app/compose.yml at main · CMSgov/bcda-ssas-app · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
services:
  db:
    image: postgres:16
    environment:
      - POSTGRES_DB=bcda
      - POSTGRES_PASSWORD=toor
    ports:
      - "5430:5432"
    volumes:
      - ./db:/var/db
    healthcheck:
      test: ["CMD", "pg_isready", "-d", "bcda"]
      interval: 40s
      timeout: 15s
      retries: 5
      start_period: 2s
  documentation:
    build:
      context: .
      dockerfile: docker/Dockerfile.ssas
      target: documentation
    platform: linux/arm64
    volumes:
      - .:/go/src/github.com/CMSgov/bcda-ssas-app
  ssas:
    build:
      context: .
      dockerfile: docker/Dockerfile.ssas
      args:
        VERSION: latest
    platform: linux/arm64
    environment:
      - DATABASE_URL=postgresql://postgres:toor@db:5432/bcda?sslmode=disable
      - ATO_PUBLIC_KEY_FILE=../shared_files/ATO_public.pem
      - ATO_PRIVATE_KEY_FILE=../shared_files/ATO_private.pem
      - HTTP_ONLY=true
      - DEPLOYMENT_TARGET=local
      - LOG_TO_STD_OUT=true
      - SKIP_BOOTSTRAP=true
      - SSAS_ADMIN_SIGNING_KEY_PATH=../shared_files/ssas/admin_test_signing_key.pem
      - SSAS_PUBLIC_SIGNING_KEY_PATH=../shared_files/ssas/public_test_signing_key.pem
      - SSAS_ADMIN_PORT=:3004
      - SSAS_PUBLIC_PORT=:3003
      - SSAS_HTTP_TO_HTTPS_PORT=:3005
      - SSAS_HASH_ITERATIONS=130000
      - SSAS_HASH_KEY_LENGTH=64
      - SSAS_HASH_SALT_SIZE=32
      - SSAS_TOKEN_DENYLIST_CACHE_CLEANUP_MINUTES=15
      - SSAS_TOKEN_DENYLIST_CACHE_TIMEOUT_MINUTES=1440
      - SSAS_TOKEN_DENYLIST_CACHE_REFRESH_MINUTES=5
      - SSAS_CLIENT_ASSERTION_AUD=http://local.testing.cms.gov/api/v2/Token/auth
    volumes:
      - ./shared_files:/usr/local/shared_files
      - .:/go/src/github.com/CMSgov/bcda-ssas-app
    ports:
      - "3103:3003"
      - "3104:3004"
      - "3105:3005"
    healthcheck:
      test: ["CMD", "curl", "-k", "-s", "-f", "-o", "/dev/null", "localhost:3003/_health"]
      interval: 40s
      retries: 5
      start_period: 10s
      timeout: 10s
    depends_on:
      db:
        condition: service_healthy

networks:
  default:
    name: bcda-ssas-net