docker-compose.yaml

version: "3.8"

name: marble
services:
  db:
    container_name: marble-postgres
    image: postgres:15
    restart: always
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: ${PG_PASSWORD:-marble}
      POSTGRES_DB: marble
      PGDATA: /data/postgres
      PGPORT: ${PG_PORT:-5432}
    ports:
      - ${PG_PORT:-5432}:${PG_PORT:-5432}
    volumes:
      - marble-db:/data/postgres
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 2s
      timeout: 1s
      retries: 5
  api:
    container_name: marble-api
    image: europe-west1-docker.pkg.dev/marble-infra/marble/marble-backend:v0.37.0
    platform: linux/amd64
    restart: always
    depends_on:
      - db
      - yente
    entrypoint: ["./app", "--server", "--migrations"]
    healthcheck:
      test: wget --no-verbose --tries=1 --spider http://localhost:${API_PORT:-8080}/liveness || exit 1
      interval: 10s
      timeout: 60s
      retries: 1
      start_period: 30s
    ports:
      - ${HOST_API_PORT:-8080}:${API_PORT:-8080}
    volumes:
      - marble-tempfiles:/tempFiles
      # - ./local_shared:/shared # uncomment and adapt this line if you need to inject a service account key into the container
    environment:
      ENV: ${ENV:-}
      LICENSE_KEY: ${LICENSE_KEY:-LICENSE_KEY}
      PORT: ${API_PORT:-}
      PG_HOSTNAME: ${PG_HOSTNAME:-}
      PG_PORT: ${PG_PORT:-}
      PG_USER: postgres
      PG_PASSWORD: ${PG_PASSWORD:-}
      AUTHENTICATION_JWT_SIGNING_KEY: ${AUTHENTICATION_JWT_SIGNING_KEY:-}
      INGESTION_BUCKET_URL: ${INGESTION_BUCKET_URL:-}
      CASE_MANAGER_BUCKET_URL: ${CASE_MANAGER_BUCKET_URL:-}
      FIREBASE_AUTH_EMULATOR_HOST: ${FIREBASE_AUTH_EMULATOR_HOST_SERVER:-}
      MARBLE_APP_HOST: ${MARBLE_APP_HOST:-localhost:${HOST_APP_PORT:-3000}}
      # default value of GOOGLE_CLOUD_PROJECT must be kept if working with the emulator (and the emulator is running in the docker image below)
      GOOGLE_CLOUD_PROJECT: ${GOOGLE_CLOUD_PROJECT:-test-project}
      GOOGLE_APPLICATION_CREDENTIALS: ${GOOGLE_APPLICATION_CREDENTIALS:-}
      REQUEST_LOGGING_LEVEL: ${REQUEST_LOGGING_LEVEL:-}
      LOGGING_FORMAT: ${LOGGING_FORMAT:-}
      CREATE_GLOBAL_ADMIN_EMAIL: ${CREATE_GLOBAL_ADMIN_EMAIL:-}
      CREATE_ORG_NAME: ${CREATE_ORG_NAME:-}
      CREATE_ORG_ADMIN_EMAIL: ${CREATE_ORG_ADMIN_EMAIL:-}
      SEGMENT_WRITE_KEY: ${SEGMENT_WRITE_KEY_BACKEND:-UgkImFmHmBZAWh5fxIKBY3QtvlcBrhqQ}
      METABASE_SITE_URL: ${METABASE_SITE_URL:-}
      METABASE_JWT_SIGNING_KEY: ${METABASE_JWT_SIGNING_KEY:-}
      METABASE_GLOBAL_DASHBOARD_ID: ${METABASE_GLOBAL_DASHBOARD_ID:-}
  cron:
    container_name: marble-api-cron
    image: europe-west1-docker.pkg.dev/marble-infra/marble/marble-backend:v0.37.0
    platform: linux/amd64
    restart: always
    depends_on:
      - api
    entrypoint: ["./app", "--worker"]
    volumes:
      - marble-tempfiles:/tempFiles
    environment:
      ENV: ${ENV:-}
      PG_HOSTNAME: ${PG_HOSTNAME:-}
      PG_PORT: ${PG_PORT:-}
      PG_USER: postgres
      PG_PASSWORD: ${PG_PASSWORD:-}
      INGESTION_BUCKET_URL: ${INGESTION_BUCKET_URL:-}
      REQUEST_LOGGING_LEVEL: ${REQUEST_LOGGING_LEVEL:-}
      LOGGING_FORMAT: ${LOGGING_FORMAT:-}
  app:
    container_name: marble-app
    image: europe-west1-docker.pkg.dev/marble-infra/marble/marble-frontend:v0.37.0
    platform: linux/amd64
    restart: always
    depends_on:
      - api
      - firebase_auth
    healthcheck:
      test: curl --fail http://localhost:${APP_PORT:-8080}/healthcheck || exit 1
      interval: 10s
      timeout: 60s
      retries: 1
      start_period: 30s
    ports:
      - ${HOST_APP_PORT:-3000}:8080
    environment:
      ENV: ${ENV:-development}
      NODE_ENV: ${NODE_ENV:-production}
      SESSION_SECRET: ${SESSION_SECRET:-placeholder}
      SESSION_MAX_AGE: ${SESSION_MAX_AGE:-43200}
      MARBLE_API_DOMAIN_CLIENT: ${MARBLE_API_DOMAIN_CLIENT:-http://localhost:8080}
      MARBLE_API_DOMAIN_SERVER: ${MARBLE_API_DOMAIN_SERVER:-http://api:8080}
      MARBLE_APP_DOMAIN: ${MARBLE_APP_DOMAIN:-http://localhost:${HOST_APP_PORT:-8080}}
      FIREBASE_AUTH_EMULATOR_HOST: ${FIREBASE_AUTH_EMULATOR_HOST_CLIENT:-}
      FIREBASE_API_KEY: ${FIREBASE_API_KEY:-placeholder}
      FIREBASE_AUTH_DOMAIN: ${FIREBASE_AUTH_DOMAIN:-placeholder}
      FIREBASE_PROJECT_ID: ${GOOGLE_CLOUD_PROJECT:-placeholder}
      FIREBASE_APP_ID: ${FIREBASE_APP_ID:-placeholder}
      SEGMENT_WRITE_KEY: ${SEGMENT_WRITE_KEY:-hC8qrY2OLhUpl1Xycw523tbuClxlQR6u}
  firebase_auth:
    container_name: firebase-auth
    image: europe-west1-docker.pkg.dev/marble-infra/marble/firebase-emulator:latest
    restart: always
    ports:
      - ${FIREBASE_AUTH_EMULATOR_PORT:-9099}:9099
      - 4000:4000
  elasticsearch:
    container_name: marble-es
    image: docker.elastic.co/elasticsearch/elasticsearch:8.14.3
    ports:
      - ${ES_PORT:-9200}:${ES_PORT:-9200}
    environment:
      - node.name=es
      - cluster.name=marble-es
      - discovery.type=single-node
      - bootstrap.memory_lock=true
      - xpack.security.enabled=false
      - "ES_JAVA_OPTS=-Xms2g -Xmx2g"
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - marble-es:/usr/share/elasticsearch/data
  yente:
    container_name: marble-yente
    image: ghcr.io/opensanctions/yente:4.2.1
    depends_on:
      - elasticsearch
    ports:
      - ${YENTE_PORT:-8000}:${YENTE_PORT:-8000}
    volumes:
      - ./contrib/yente-datasets.yml:/app/manifests/default.yml
    environment:
      YENTE_INDEX_TYPE: elasticsearch
      YENTE_INDEX_URL: "${YENTE_ELASTICSEARCH_HOST:-http://marble-es:9200}"
      YENTE_UPDATE_TOKEN: ""

volumes:
  marble-db:
    driver: local
  marble-es:
    driver: local
  marble-tempfiles: