b0txec
39fcb3ed6b
Confirmed via git history it's not a separate vendor: the very first commit (2023-04-13) included real sample CSVs from it with a Latvian header identical to the LVGMC/open-data fields — same underlying LVĢMC data, just an earlier delivery mechanism superseded by the FTP feed and never removed. Never wired into anything that runs (Server.scala's import was already commented out).
84 lines
2.5 KiB
YAML
84 lines
2.5 KiB
YAML
name: weathertool-uat
|
|
|
|
services:
|
|
postgres:
|
|
image: postgres:16.1
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_DB: ${POSTGRES_DB:?set POSTGRES_DB in .env.staging}
|
|
POSTGRES_USER: ${POSTGRES_USER:?set POSTGRES_USER in .env.staging}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD in .env.staging}
|
|
volumes:
|
|
- ./data/postgres:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
networks:
|
|
- backend
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
|
|
app:
|
|
image: ${WEATHERTOOL_IMAGE:?set WEATHERTOOL_IMAGE in .env.staging}
|
|
restart: unless-stopped
|
|
depends_on:
|
|
postgres:
|
|
condition: service_healthy
|
|
environment:
|
|
POSTGRES_DB: ${POSTGRES_DB}
|
|
POSTGRES_USER: ${POSTGRES_USER}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
POSTGRES_HOST: postgres
|
|
ENABLE_SCHEDULED_JOBS: "false"
|
|
ENABLE_LEGACY_PROVIDER_JOBS: "false"
|
|
DEBUG: "false"
|
|
# Provider services are currently constructed at startup even with jobs
|
|
# disabled, so inert values are required for synthetic-data UAT.
|
|
LVGMC_USER: disabled
|
|
LVGMC_PASSWORD: disabled
|
|
LVGMC_URL: https://invalid.local/
|
|
HARMONIE_EDR_API_KEY: disabled
|
|
HARMONIE_EDR_URL: https://invalid.local/
|
|
HARMONIE_STAC_API_KEY: disabled
|
|
HARMONIE_STAC_URL: https://invalid.local/
|
|
ports:
|
|
- "127.0.0.1:${WEATHERTOOL_PORT:-8002}:8080"
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp:size=64m,mode=1777
|
|
- /app/data:size=256m,mode=0770,uid=100,gid=101
|
|
networks:
|
|
- backend
|
|
- edge
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
|
|
authelia:
|
|
image: authelia/authelia:4.39.20
|
|
restart: unless-stopped
|
|
environment:
|
|
AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE: /run/secrets/jwt_secret
|
|
AUTHELIA_SESSION_SECRET_FILE: /run/secrets/session_secret
|
|
AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: /run/secrets/storage_encryption_key
|
|
ports:
|
|
- "127.0.0.1:${AUTHELIA_PORT:-9091}:9091"
|
|
volumes:
|
|
- ./config/authelia:/config:ro
|
|
- ./data/authelia:/var/lib/authelia
|
|
- ./secrets/jwt_secret:/run/secrets/jwt_secret:ro
|
|
- ./secrets/session_secret:/run/secrets/session_secret:ro
|
|
- ./secrets/storage_encryption_key:/run/secrets/storage_encryption_key:ro
|
|
networks:
|
|
- edge
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
|
|
networks:
|
|
backend:
|
|
driver: bridge
|
|
internal: true
|
|
edge:
|
|
driver: bridge
|