docker-compose.yml

###########################################################################
#######                FOR TESTING PURPOSES ONLY                    #######
###########################################################################
# Instead of using the docker compose file you should use the helmfiles   #
# to deploy the single sign on system on a kubernetes cluster             #
###########################################################################
version: '3'
services:
  hydra:
    image: oryd/hydra:latest
    ports:
      - "4444:4444" # Public port
      - "4445:4445" # Admin port
      - "5555:5555" # Port for hydra token user
    command:
        serve all --dangerous-force-http --dangerous-allow-insecure-redirect-urls "http://127.0.0.1:13337/callback, http://localhost:3000/callback"
    environment:
      - URLS_SELF_ISSUER=http://localhost:4444/
      - URLS_CONSENT=http://localhost:5001/consent
      - URLS_LOGIN=http://localhost:5000/login
      - URLS_LOGOUT=http://localhost:5000/logout
      - URLS_POST_LOGOUT_REDIRECT=http://localhost:5000/
      - DSN=memory
      - SECRETS_SYSTEM=youReallyNeedToChangeThis
      - OIDC_SUBJECT_TYPES_SUPPORTED=public,pairwise
      - OIDC_SUBJECT_TYPE_PAIRWISE_SALT=youReallyNeedToChangeThis
      - SERVE_PUBLIC_CORS_DEBUG=true
      - LOG_LEVEL="debug"
    restart: unless-stopped
  consent:
    build: consent_provider/
    environment:
      - HYDRA_ADMIN_URL=http://hydra:4445
      - GRAPHQL_URL=http://backend:5000/graphql
      - FLASK_ENV=development
    ports:
      - "5001:5001"
    restart: unless-stopped
  login:
    build: login_provider/
    environment:
      - HYDRA_ADMIN_URL=http://hydra:4445
      - GRAPHQL_URL=http://backend:5000/graphql
      - FLASK_ENV=development
    ports:
      - "5000:5000"
    restart: unless-stopped
  backend:
    build: user-panel/backend/
    environment:
      - DEBUG=True
      - HYDRA_ADMIN_URL=http://hydra:4445
      - DATABASE_USER=postgres
      - DATABASE_PASSWORD=secret
      - DATABASE_NAME=postgres
      - DATABASE_HOST=psql
    ports:
      - "5002:5000"
    restart: unless-stopped
  psql:
    image: postgres:11
    environment:
      - POSTGRES_PASSWORD=secret
    ports:
      - "5432:5432"
  oauth:
    build: ./test/login_logout
    environment:
      - BASE_URL=http://localhost:4444/
      - ACCESS_TOKEN_URL=http://hydra:4444/oauth2/token
      - LOGOUT_URL=http://localhost:4444/oauth2/sessions/logout
      - AUTHORIZE_URL=http://localhost:4444/oauth2/auth
      - USERINFO_URL=http://hydra:4444/userinfo
      - KEY=testapp
      - SECRET=secret
      - OAUTHLIB_INSECURE_TRANSPORT=true
      - FLASK_ENV=development
    # with this settings run:
    # `bash test/create-127.0.0.1-client.bash testapp clientsecret http://localhost:4445 http://127.0.0.1:13337/callback
    # to register a corresponding oauth client with hydra
    ports:
      - "13337:13337"
    command: flask run --port 13337 --host "0.0.0.0"
    restart: unless-stopped