docker-compose.yml

services:

  keycloak:
    image: quay.io/keycloak/keycloak:26.0.4
    ports:
      - 9080:8080
    networks:
      - defender
    volumes:
      - ./keycloak/defender-realm.json:/opt/keycloak/data/import/defender-realm.json
    command: ["start-dev", "--import-realm"]
    environment:
      TZ: America/Chicago
      KC_BOOTSTRAP_ADMIN_USERNAME: admin
      KC_BOOTSTRAP_ADMIN_PASSWORD: admin
      KC_DB: postgres
      KC_DB_URL: jdbc:postgresql://authdb:5432/keycloak
      KC_DB_USERNAME: keycloak
      KC_DB_PASSWORD: password

  authdb:
    image: postgres:16
    volumes:
      - authdb-data:/var/lib/postgresql/data
    restart: always
    networks:
      - defender
    environment:
      TZ: America/Chicago
      POSTGRES_PASSWORD: password
      POSTGRES_USER: keycloak
      POSTGRES_DB: keycloak

  appdb:
    image: postgres:16
    volumes:
      - appdb-data:/var/lib/postgresql/data
    restart: always
    networks:
      - defender
    environment:
      TZ: America/Chicago
      POSTGRES_PASSWORD: defender
      POSTGRES_USER: defender
      POSTGRES_DB: defender
    ports:
      - 5432:5432

  defender-client:
    image: quantasnet/defender-client:0.0.1-SNAPSHOT
    build:
      context: defender-client/.
    networks:
      - defender
    links:
      - defender-api
    environment: 
      TZ: America/Chicago
    ports:
      - 8000:8000

  defender-api:
    image: quantasnet/defender-api:0.0.1-SNAPSHOT
    build:
      context: defender-api/.
    restart: always
    networks:
      - defender
    healthcheck:
      test: ["CMD", "/bin/sh", "-c",  "wget --quiet --tries=1 --spider http://localhost:8080/actuator/health || exit 1"]
      interval: 1m30s
      timeout: 10s
      retries: 3
    ports:
      - 8080:8080
    environment:
      PORT: 8080
      TZ: America/Chicago
      SPRING_DATASOURCE_URL: jdbc:postgresql://appdb:5432/defender?sslmode=disable
      SPRING_DATASOURCE_USERNAME: defender
      SPRING_DATASOURCE_PASSWORD: defender
      AUTH_STS_SERVER: http://localhost:9080/realms/defender
      # Setting internal stsServer for running in Docker locally
      AUTH_STS_SERVER_INTERNAL: http://keycloak:8080/realms/defender

networks:
  defender:

volumes:
  authdb-data:
  appdb-data: