Files
server/util/Setup/Templates/DockerCompose.hbs

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

247 lines
6.2 KiB
Handlebars
Raw Normal View History

2018-08-30 23:06:40 -04:00
#
2018-08-31 09:16:01 -04:00
# Useful references:
# https://docs.docker.com/reference/compose-file/
# https://docs.docker.com/reference/cli/docker/compose/#use--f-to-specify-the-name-and-path-of-one-or-more-compose-files
# https://docs.docker.com/compose/how-tos/environment-variables/envvars/
2018-08-30 11:35:44 -04:00
#
2018-08-30 23:06:40 -04:00
#########################################################################
# WARNING: This file is generated. Do not make changes to this file. #
2018-08-30 23:32:18 -04:00
# They will be overwritten on update. If you want to make additions to #
2018-08-30 23:06:40 -04:00
# this file, you can create a `docker-compose.override.yml` file in the #
2018-09-17 15:00:29 -04:00
# same directory and it will be merged into this file at runtime. You #
# can also manage various settings used in this file from the #
# ./bwdata/config.yml file for your installation. #
2018-08-30 23:06:40 -04:00
#########################################################################
2018-08-30 11:35:44 -04:00
services:
{{#if EnableBuiltInMsSql}}
2018-08-30 11:35:44 -04:00
mssql:
image: ghcr.io/bitwarden/mssql:{{{CoreVersion}}}
2018-08-30 11:35:44 -04:00
container_name: bitwarden-mssql
restart: always
2020-01-16 23:25:06 +01:00
stop_grace_period: 60s
2018-08-30 11:35:44 -04:00
volumes:
{{#if MssqlDataDockerVolume}}
2018-08-30 16:40:06 -04:00
- mssql_data:/var/opt/mssql/data
2018-08-30 11:35:44 -04:00
{{else}}
2018-08-30 16:40:06 -04:00
- ../mssql/data:/var/opt/mssql/data
2018-08-30 11:35:44 -04:00
{{/if}}
- ../logs/mssql:/var/opt/mssql/log
- ../mssql/backups:/etc/bitwarden/mssql/backups
env_file:
- mssql.env
- ../env/uid.env
- ../env/mssql.override.env
{{/if}}
2018-08-30 11:35:44 -04:00
web:
image: ghcr.io/bitwarden/web:{{{WebVersion}}}
2018-08-30 11:35:44 -04:00
container_name: bitwarden-web
restart: always
volumes:
- ../web:/etc/bitwarden/web
env_file:
- global.env
- ../env/uid.env
attachments:
image: ghcr.io/bitwarden/attachments:{{{CoreVersion}}}
2018-08-30 11:35:44 -04:00
container_name: bitwarden-attachments
restart: always
volumes:
- ../core/attachments:/etc/bitwarden/core/attachments
env_file:
- global.env
- ../env/uid.env
api:
image: ghcr.io/bitwarden/api:{{{CoreVersion}}}
2018-08-30 11:35:44 -04:00
container_name: bitwarden-api
restart: always
volumes:
- ../core:/etc/bitwarden/core
- ../ca-certificates:/etc/bitwarden/ca-certificates
- ../logs/api:/etc/bitwarden/logs
env_file:
- global.env
- ../env/uid.env
- ../env/global.override.env
2019-11-20 08:09:53 -05:00
networks:
- default
- public
2018-08-30 11:35:44 -04:00
identity:
image: ghcr.io/bitwarden/identity:{{{CoreVersion}}}
2018-08-30 11:35:44 -04:00
container_name: bitwarden-identity
restart: always
volumes:
- ../identity:/etc/bitwarden/identity
- ../core:/etc/bitwarden/core
- ../ca-certificates:/etc/bitwarden/ca-certificates
- ../logs/identity:/etc/bitwarden/logs
env_file:
- global.env
- ../env/uid.env
- ../env/global.override.env
2019-11-20 08:09:53 -05:00
networks:
- default
- public
2018-08-30 11:35:44 -04:00
sso:
image: ghcr.io/bitwarden/sso:{{{CoreVersion}}}
container_name: bitwarden-sso
restart: always
volumes:
- ../identity:/etc/bitwarden/identity
- ../core:/etc/bitwarden/core
- ../ca-certificates:/etc/bitwarden/ca-certificates
- ../logs/sso:/etc/bitwarden/logs
env_file:
- global.env
- ../env/uid.env
- ../env/global.override.env
networks:
- default
- public
2018-08-30 11:35:44 -04:00
admin:
image: ghcr.io/bitwarden/admin:{{{CoreVersion}}}
2018-08-30 11:35:44 -04:00
container_name: bitwarden-admin
restart: always
{{#if EnableBuiltInMsSql}}
2019-03-25 13:21:05 -04:00
depends_on:
2019-03-25 14:48:06 -04:00
- mssql
{{/if}}
2018-08-30 11:35:44 -04:00
volumes:
- ../core:/etc/bitwarden/core
- ../ca-certificates:/etc/bitwarden/ca-certificates
- ../logs/admin:/etc/bitwarden/logs
env_file:
- global.env
- ../env/uid.env
- ../env/global.override.env
2019-11-20 08:09:53 -05:00
networks:
- default
- public
2018-08-30 11:35:44 -04:00
icons:
image: ghcr.io/bitwarden/icons:{{{CoreVersion}}}
2018-08-30 11:35:44 -04:00
container_name: bitwarden-icons
restart: always
volumes:
- ../ca-certificates:/etc/bitwarden/ca-certificates
- ../logs/icons:/etc/bitwarden/logs
env_file:
- global.env
- ../env/uid.env
2019-11-20 08:09:53 -05:00
networks:
- default
- public
2018-08-30 11:35:44 -04:00
notifications:
image: ghcr.io/bitwarden/notifications:{{{CoreVersion}}}
2018-08-30 11:35:44 -04:00
container_name: bitwarden-notifications
restart: always
volumes:
- ../ca-certificates:/etc/bitwarden/ca-certificates
- ../logs/notifications:/etc/bitwarden/logs
env_file:
- global.env
- ../env/uid.env
- ../env/global.override.env
2019-11-20 08:09:53 -05:00
networks:
- default
- public
2018-08-30 11:35:44 -04:00
events:
image: ghcr.io/bitwarden/events:{{{CoreVersion}}}
container_name: bitwarden-events
restart: always
volumes:
- ../ca-certificates:/etc/bitwarden/ca-certificates
- ../logs/events:/etc/bitwarden/logs
env_file:
- global.env
- ../env/uid.env
- ../env/global.override.env
2019-11-20 08:09:53 -05:00
networks:
- default
- public
2018-08-30 11:35:44 -04:00
nginx:
image: ghcr.io/bitwarden/nginx:{{{CoreVersion}}}
2018-08-30 11:35:44 -04:00
container_name: bitwarden-nginx
restart: always
2019-03-25 09:23:50 -04:00
depends_on:
2019-03-25 14:48:06 -04:00
- web
- admin
- api
- identity
2018-09-26 16:53:37 -04:00
{{#if HasPort}}
2018-08-30 11:35:44 -04:00
ports:
{{#if HttpPort}}
- '{{{HttpPort}}}:8080'
{{/if}}
{{#if HttpsPort}}
- '{{{HttpsPort}}}:8443'
2018-09-26 16:53:37 -04:00
{{/if}}
2018-08-30 11:35:44 -04:00
{{/if}}
volumes:
- ../nginx:/etc/bitwarden/nginx
- ../letsencrypt:/etc/letsencrypt
- ../ssl:/etc/ssl
- ../logs/nginx:/var/log/nginx
env_file:
- ../env/uid.env
2019-11-20 08:09:53 -05:00
networks:
- default
- public
{{#if EnableKeyConnector}}
key-connector:
image: ghcr.io/bitwarden/key-connector:{{{KeyConnectorVersion}}}
container_name: bitwarden-key-connector
restart: always
volumes:
- ../key-connector:/etc/bitwarden/key-connector
- ../ca-certificates:/etc/bitwarden/ca-certificates
- ../logs/key-connector:/etc/bitwarden/logs
env_file:
- ../env/uid.env
- ../env/key-connector.override.env
networks:
- default
- public
{{/if}}
[EC-261] SCIM (#2105) * scim project stub * some scim models and v2 controllers * implement some v2 scim endpoints * fix spacing * api key auth * EC-261 - SCIM Org API Key and connection type config * EC-261 - Fix lint errors/formatting * updates for okta implementation testing * fix var ref * updates from testing with Okta * implement scim context via provider parsing * support single and list of ids for add/remove groups * log ops not handled * touch up scim context * group list filtering * EC-261 - Additional SCIM provider types * EC-265 - UseScim flag and license update * EC-265 - SCIM provider type of default (0) * EC-265 - Add Scim URL and update connection validation * EC-265 - Model validation and cleanup for SCIM keys * implement scim org connection * EC-265 - Ensure ServiceUrl is not persisted to DB * EC-265 - Exclude provider type from DB if not configured * EC-261 - EF Migrations for SCIM * add docker builds for scim * EC-261 - Fix failing permissions tests * EC-261 - Fix unit tests and pgsql migrations * Formatting fixes from linter * EC-265 - Remove service URL from scim config * EC-265 - Fix unit tests, removed wayward validation * EC-265 - Require self-hosted for billing sync org conn * EC-265 - Fix formatting issues - whitespace * EC-261 - PR feedback and cleanup * scim constants rename * no scim settings right now * update project name * delete package lock * update appsettings configs for scim * use default scim provider for context Co-authored-by: Kyle Spearrin <kyle.spearrin@gmail.com>
2022-07-14 15:58:48 -04:00
{{#if EnableScim}}
scim:
image: ghcr.io/bitwarden/scim:{{{CoreVersion}}}
[EC-261] SCIM (#2105) * scim project stub * some scim models and v2 controllers * implement some v2 scim endpoints * fix spacing * api key auth * EC-261 - SCIM Org API Key and connection type config * EC-261 - Fix lint errors/formatting * updates for okta implementation testing * fix var ref * updates from testing with Okta * implement scim context via provider parsing * support single and list of ids for add/remove groups * log ops not handled * touch up scim context * group list filtering * EC-261 - Additional SCIM provider types * EC-265 - UseScim flag and license update * EC-265 - SCIM provider type of default (0) * EC-265 - Add Scim URL and update connection validation * EC-265 - Model validation and cleanup for SCIM keys * implement scim org connection * EC-265 - Ensure ServiceUrl is not persisted to DB * EC-265 - Exclude provider type from DB if not configured * EC-261 - EF Migrations for SCIM * add docker builds for scim * EC-261 - Fix failing permissions tests * EC-261 - Fix unit tests and pgsql migrations * Formatting fixes from linter * EC-265 - Remove service URL from scim config * EC-265 - Fix unit tests, removed wayward validation * EC-265 - Require self-hosted for billing sync org conn * EC-265 - Fix formatting issues - whitespace * EC-261 - PR feedback and cleanup * scim constants rename * no scim settings right now * update project name * delete package lock * update appsettings configs for scim * use default scim provider for context Co-authored-by: Kyle Spearrin <kyle.spearrin@gmail.com>
2022-07-14 15:58:48 -04:00
container_name: bitwarden-scim
restart: always
volumes:
- ../core:/etc/bitwarden/core
[EC-261] SCIM (#2105) * scim project stub * some scim models and v2 controllers * implement some v2 scim endpoints * fix spacing * api key auth * EC-261 - SCIM Org API Key and connection type config * EC-261 - Fix lint errors/formatting * updates for okta implementation testing * fix var ref * updates from testing with Okta * implement scim context via provider parsing * support single and list of ids for add/remove groups * log ops not handled * touch up scim context * group list filtering * EC-261 - Additional SCIM provider types * EC-265 - UseScim flag and license update * EC-265 - SCIM provider type of default (0) * EC-265 - Add Scim URL and update connection validation * EC-265 - Model validation and cleanup for SCIM keys * implement scim org connection * EC-265 - Ensure ServiceUrl is not persisted to DB * EC-265 - Exclude provider type from DB if not configured * EC-261 - EF Migrations for SCIM * add docker builds for scim * EC-261 - Fix failing permissions tests * EC-261 - Fix unit tests and pgsql migrations * Formatting fixes from linter * EC-265 - Remove service URL from scim config * EC-265 - Fix unit tests, removed wayward validation * EC-265 - Require self-hosted for billing sync org conn * EC-265 - Fix formatting issues - whitespace * EC-261 - PR feedback and cleanup * scim constants rename * no scim settings right now * update project name * delete package lock * update appsettings configs for scim * use default scim provider for context Co-authored-by: Kyle Spearrin <kyle.spearrin@gmail.com>
2022-07-14 15:58:48 -04:00
- ../ca-certificates:/etc/bitwarden/ca-certificates
- ../logs/scim:/etc/bitwarden/logs
[EC-261] SCIM (#2105) * scim project stub * some scim models and v2 controllers * implement some v2 scim endpoints * fix spacing * api key auth * EC-261 - SCIM Org API Key and connection type config * EC-261 - Fix lint errors/formatting * updates for okta implementation testing * fix var ref * updates from testing with Okta * implement scim context via provider parsing * support single and list of ids for add/remove groups * log ops not handled * touch up scim context * group list filtering * EC-261 - Additional SCIM provider types * EC-265 - UseScim flag and license update * EC-265 - SCIM provider type of default (0) * EC-265 - Add Scim URL and update connection validation * EC-265 - Model validation and cleanup for SCIM keys * implement scim org connection * EC-265 - Ensure ServiceUrl is not persisted to DB * EC-265 - Exclude provider type from DB if not configured * EC-261 - EF Migrations for SCIM * add docker builds for scim * EC-261 - Fix failing permissions tests * EC-261 - Fix unit tests and pgsql migrations * Formatting fixes from linter * EC-265 - Remove service URL from scim config * EC-265 - Fix unit tests, removed wayward validation * EC-265 - Require self-hosted for billing sync org conn * EC-265 - Fix formatting issues - whitespace * EC-261 - PR feedback and cleanup * scim constants rename * no scim settings right now * update project name * delete package lock * update appsettings configs for scim * use default scim provider for context Co-authored-by: Kyle Spearrin <kyle.spearrin@gmail.com>
2022-07-14 15:58:48 -04:00
env_file:
- global.env
- ../env/uid.env
- ../env/global.override.env
networks:
- default
- public
{{/if}}
2018-08-30 11:35:44 -04:00
{{#if MssqlDataDockerVolume}}
volumes:
mssql_data:
labels:
com.bitwarden.product: bitwarden
2018-08-30 11:35:44 -04:00
{{/if}}
2019-11-20 07:35:42 -05:00
networks:
2019-11-20 08:09:53 -05:00
default:
2019-11-20 07:35:42 -05:00
internal: true
2019-11-20 08:09:53 -05:00
public:
internal: false