docker-compose.yml

services:
  webclient:
    image: ghcr.io/tum-dev/navigatum-webclient:main
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.navigatum-webclient.entrypoints=webs"
      - "traefik.http.routers.navigatum-webclient.tls.certresolver=leacme"
      - "traefik.http.routers.navigatum-webclient.rule=Host(`nav.tum.de`)"
      - "traefik.http.services.navigatum-webclient.loadbalancer.server.port=3000"
    networks:
      - traefik_traefik
    expose:
      - "3000"
    environment:
      TZ: Europe/Berlin
      NUXT_PUBLIC_MAPS_URL: https://nav.tum.de
      NUXT_PUBLIC_CDN_URL: https://nav.tum.de
      NUXT_PUBLIC_API_URL: https://nav.tum.de
  # maps
  tileserver-init-config:
    image: alpine:latest
    command:
      - /bin/sh
      - -c
      - |
        rm -f /data/*.json
        cp /map/*.json /data/
        
        rm -fr /data/sprites/
        mkdir -p /data/sprites/
        cp /map/sprites/* /data/sprites/
        
        rm -fr /data/styles/
        mkdir -p /data/styles/
        cp /map/styles/* /data/styles/
        
        mkdir -p /data/fonts/
    volumes:
      - tileserver-src:/data
      - ./map/:/map/:ro
    environment:
      TZ: Europe/Berlin
  tileserver:
    image: maptiler/tileserver-gl:v5.0.0
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.navigatum-tileserver.entrypoints=webs"
      - "traefik.http.routers.navigatum-tileserver.tls.certresolver=leacme"
      - "traefik.http.routers.navigatum-tileserver.rule=Host(`nav.tum.de`) && PathPrefix(`/maps/`)"
      - "traefik.http.routers.navigatum-tileserver.middlewares=navigatum-maps-stripprefix@docker, navigatum-compress@docker, navigatum-cache-2m@docker"
      - "traefik.http.middlewares.navigatum-maps-stripprefix.stripprefix.prefixes=/maps"
      - "traefik.http.middlewares.navigatum-compress.compress=true"
      - "traefik.http.middlewares.navigatum-cache-2m.headers.customrequestheaders.Cache-Control=public, max-age=5184000"
      - "traefik.http.services.navigatum-tileserver.loadbalancer.server.port=8080"
    networks:
      - traefik_traefik
    expose:
      - "8080"
    command: /usr/src/app/docker-entrypoint.sh --public_url=https://nav.tum.de/maps/
    environment:
      TZ: Europe/Berlin
    tmpfs:
      - /tmp
    volumes:
      - tileserver-src:/data/:ro
    read_only: true
    depends_on:
      tileserver-init-config:
        condition: service_completed_successfully
  # cdn
  data:
    image: ghcr.io/tum-dev/navigatum-data:main
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.navigatum-data.entrypoints=webs"
      - "traefik.http.routers.navigatum-data.tls.certresolver=leacme"
      - "traefik.http.routers.navigatum-data.rule=Host(`nav.tum.de`) && PathPrefix(`/cdn/`)"
      - "traefik.http.services.navigatum-data.loadbalancer.server.port=3002"
    networks:
      - traefik_traefik
    environment:
      TZ: Europe/Berlin
    expose:
      - "3002"
  server:
    image: ghcr.io/tum-dev/navigatum-server:main
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.navigatum-server.entrypoints=webs"
      - "traefik.http.routers.navigatum-server.tls.certresolver=leacme"
      - "traefik.http.routers.navigatum-server.rule=Host(`nav.tum.de`) && (PathPrefix(`/api/locations/`) || PathPrefix(`/api/get/`) || PathPrefix(`/api/preview/`) || Path(`/api/search`) || PathPrefix(`/api/feedback/`) || Path(`/api/calendar`) || Path(`/api/status`)|| Path(`/api/metrics`) || PathPrefix(`/api/maps/indoor`))"
      - "traefik.http.services.navigatum-server.loadbalancer.server.port=3003"
    networks:
      - traefik_traefik
    expose:
      - "3003"
    command: /bin/navigatum-server
    user: 1000:3000
    environment:
      TZ: Europe/Berlin
      LOG_LEVEL: ${LOG_LEVEL-info}
      MIELI_URL: http://meilisearch:7700
      MEILI_MASTER_KEY: ${MEILI_MASTER_KEY}
      TILESERVER_URL: http://tileserver:8080
      CDN_URL: http://data:3002/cdn
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_URL: db:5432
      CONNECTUM_OAUTH_CLIENT_ID: ${CONNECTUM_OAUTH_CLIENT_ID}
      CONNECTUM_OAUTH_CLIENT_SECRET: ${CONNECTUM_OAUTH_CLIENT_SECRET}
      GITHUB_TOKEN: ${GITHUB_TOKEN}
      JWT_KEY: ${JWT_KEY}
    depends_on:
      meilisearch:
        condition: service_healthy
      osm2pgsql-init:
        condition: service_started
      db:
        condition: service_healthy
  meilisearch:
    image: getmeili/meilisearch:v1.11.3
    restart: unless-stopped
    networks:
      - traefik_traefik
    expose:
      - "7700"
    environment:
      TZ: Europe/Berlin
      MEILI_MASTER_KEY: ${MEILI_MASTER_KEY}
      MEILI_ENV: production
    healthcheck:
      test: wget --quiet --spider http://localhost:7700/health
      retries: 5
      interval: 10s
      start_period: 10s
  db:
    image: postgis/postgis:17-3.4
    restart: unless-stopped
    environment:
      TZ: Europe/Berlin
      PGDATA: /var/lib/postgresql/data/pgdata
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_DB: ${POSTGRES_DB}
    networks:
      - traefik_traefik
    expose:
      - "5432"
    volumes:
      - postgis-data:/var/lib/postgresql/data
      - ./resources/init-db.sh:/docker-entrypoint-initdb.d/init-db.sh:ro
    healthcheck:
      test: [ "CMD", "pg_isready", "-U", "${POSTGRES_USER}" ]
      retries: 5
      interval: 10s
      # requires docker v25 to be available for ubuntu
      # start_interval: 20s
      start_period: 20s
  download-data:
    image: alpine:latest
    command: sh /map/download.sh europe/germany/bayern
    environment:
      TZ: Europe/Berlin
    working_dir: /map
    volumes:
      - ./map/data/:/map/data/:rw
      - ./map/gtfs_feeds/:/map/gtfs_feeds/:rw
      - ./map/download.sh:/map/download.sh:ro
      - ./map/valhalla.json:/map/valhalla.json:ro
  valhalla:
    image: ghcr.io/gis-ops/docker-valhalla/valhalla:latest
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.navigatum-valhalla.entrypoints=webs"
      - "traefik.http.routers.navigatum-valhalla.tls.certresolver=leacme"
      - "traefik.http.routers.navigatum-valhalla.rule=Host(`nav.tum.de`) && PathPrefix(`/valhalla`)"
      - "traefik.http.routers.navigatum-valhalla.middlewares=navigatum-valhalla-stripprefix@docker"
      - "traefik.http.middlewares.navigatum-valhalla-stripprefix.stripprefix.prefixes=/valhalla"
      - "traefik.http.services.navigatum-valhalla.loadbalancer.server.port=8002"
    environment:
      TZ: Europe/Berlin
    networks:
      - traefik_traefik
    expose:
      - 8002
    volumes:
      - ./map/data/:/custom_files:rw
    tmpfs:
      - /tmp
    read_only: true
    healthcheck:
      test: curl --fail -s http://localhost:8002/status || exit 1
      interval: 60s
      retries: 2
      start_period: 5s
      timeout: 1s
  nominatim:
    image: mediagis/nominatim:4.5
    restart: unless-stopped
    networks:
      - traefik_traefik
    environment:
      PBF_PATH: /map/data/bayern-latest.osm.pbf
      REPLICATION_URL: https://download.geofabrik.de/europe/germany/bayern-updates/
      UPDATE_MODE: continuous
      IMPORT_WIKIPEDIA: true
      IMPORT_STYLE: street
    volumes:
      - ./map/data/:/map/data/:ro
    depends_on:
      download-data:
        condition: service_completed_successfully
    expose:
      - 8080
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.navigatum-nominatim.entrypoints=webs"
      - "traefik.http.routers.navigatum-nominatim.tls.certresolver=leacme"
      - "traefik.http.routers.navigatum-nominatim.rule=Host(`nav.tum.de`) && PathPrefix(`/nominatim`)"
      - "traefik.http.routers.navigatum-nominatim.middlewares=navigatum-nominatim-stripprefix@docker"
      - "traefik.http.middlewares.navigatum-nominatim-stripprefix.stripprefix.prefixes=/nominatim"
      - "traefik.http.services.navigatum-nominatim.loadbalancer.server.port=8080"
    healthcheck:
      test: curl --fail -s http://localhost:8080/status || exit 1
      interval: 60s
      retries: 2
      start_period: 5s
      timeout: 1s
  osm2pgsql-init:
    image: iboates/osm2pgsql:latest
    networks:
      - traefik_traefik
    environment:
      TZ: Europe/Berlin
      PGPASSWORD: ${POSTGRES_PASSWORD}
    command:
      - osm2pgsql
      - --create
      - --slim
      - --cache
      - "4096" # cache size in MB, maybe too low for optimum
      - --database
      - ${POSTGRES_DB}
      - --user
      - ${POSTGRES_USER}
      - --host
      - db
      - --port
      - "5432"
      - /map/data/bayern-latest.osm.pbf
      - --output=flex
      - --style
      - /map/osm2pgsql/style.lua
    volumes:
      - ./map/data/:/map/data/:ro
      - ./map/osm2pgsql/:/map/osm2pgsql/:ro
    depends_on:
      download-data:
        condition: service_completed_successfully
      db:
        condition: service_healthy
  osm2pgsql-replication-init:
    image: iboates/osm2pgsql:latest
    networks:
      - traefik_traefik
    environment:
      TZ: Europe/Berlin
      PGPASSWORD: ${POSTGRES_PASSWORD}
    command:
      - replication
      - init
      - --database
      - ${POSTGRES_DB}
      - --username
      - ${POSTGRES_USER}
      - --host
      - db
      - --port
      - "5432"
    depends_on:
      osm2pgsql-init:
        condition: service_completed_successfully
      db:
        condition: service_healthy
    volumes:
      - ./map/osm2pgsql/:/map/osm2pgsql/:ro
  osm2pgsql-replication:
    image: iboates/osm2pgsql:latest
    networks:
      - traefik_traefik
    environment:
      TZ: Europe/Berlin
      PGPASSWORD: ${POSTGRES_PASSWORD}
    command:
      - replication
      - update
      - --database
      - ${POSTGRES_DB}
      - --username
      - ${POSTGRES_USER}
      - --host
      - db
      - --port
      - "5432"
    depends_on:
      osm2pgsql-replication-init:
        condition: service_completed_successfully
    volumes:
      - ./map/osm2pgsql/:/map/osm2pgsql/:ro
  martin-init-config:
    image: alpine:latest
    command:
      - /bin/sh
      - /map/martin/setup.sh
    environment:
      TZ: Europe/Berlin
    volumes:
      - ./map/:/map/
  martin:
    image: ghcr.io/maplibre/martin:main # TODO: just to see sdf images in action.. don't keep this on permanently
    restart: unless-stopped
    command:
      - --config
      - /map/config.yaml
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.navigatum-martin.entrypoints=webs"
      - "traefik.http.routers.navigatum-martin.tls.certresolver=leacme"
      - "traefik.http.routers.navigatum-martin.rule=Host(`nav.tum.de`) && PathPrefix(`/tiles`)"
      - "traefik.http.routers.navigatum-martin.middlewares=navigatum-martin-stripprefix@docker"
      - "traefik.http.middlewares.navigatum-martin-stripprefix.stripprefix.prefixes=/tiles"
      - "traefik.http.services.navigatum-martin.loadbalancer.server.port=3001"
    networks:
      - traefik_traefik
    expose:
      - "3001"
    environment:
      TZ: Europe/Berlin
      BASE_PATH: /tiles/
      DATABASE_URL: postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db/${POSTGRES_DB}
      RUST_LOG: info
    depends_on:
      db:
        condition: service_healthy
      martin-init-config:
        condition: service_completed_successfully
      osm2pgsql-init:
        condition: service_started
    volumes:
      - ./map/martin/:/map/:ro
      - tileserver-src:/data:ro
    healthcheck:
      test: wget --spider http://localhost:3001/health || exit 1
      retries: 10
      interval: 1s
      start_period: 1s
  redirect-domain:
    image: traefik/whoami:latest
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.navigatum-redirect-domain.entrypoints=webs"
      - "traefik.http.routers.navigatum-redirect-domain.tls.certresolver=leacme"
      - "traefik.http.routers.navigatum-redirect-domain.rule=Host(`www.nav.tum.de`) || Host(`nav.tum.sexy`)"
      - "traefik.http.routers.navigatum-redirect-domain.middlewares=navigatum-redirect-to-domain@docker"
      - "traefik.http.middlewares.navigatum-redirect-to-domain.redirectregex.regex=^https://(www.)?nav.tum.(de|sexy)/(.*)"
      - "traefik.http.middlewares.navigatum-redirect-to-domain.redirectregex.replacement=https://nav.tum.de/$${3}"
      - "traefik.http.middlewares.navigatum-redirect-to-domain.redirectregex.permanent=true"
      - "traefik.http.services.navigatum-redirect-domain.loadbalancer.server.port=80"
    environment:
      TZ: Europe/Berlin
    healthcheck:
      test: ["CMD", "/whoami", "--help"] # I know that this is not usefull. There does not exists a executable in that image that can call /health
      retries: 2
      interval: 10s
      start_period: 10s

volumes:
  tileserver-src:
    driver: local
  postgis-data:
    driver: local

networks:
  traefik_traefik:
    external: true