compose.yaml

x-db_healthcheck: &db_healthcheck
  healthcheck:
    test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
    start_period: 10s
    interval: 10s
    timeout: 5s
    retries: 3

x-http_healthcheck: &http_healthcheck
  healthcheck:
    test: curl --connect-timeout 5 http://localhost:80/
    start_period: 1s
    interval: 1s
    timeout: 3s
    retries: 10

services:
  db:
    image: mariadb:10
    volumes:
      - ./db/certs:/certs:ro
      - ./db/db.cnf:/etc/mysql/conf.d/my.cnf:ro
    ports:
      - "3306"
    environment:
      MYSQL_ROOT_PASSWORD: r00tp@ss!
      MYSQL_DATABASE: silauth
      MYSQL_USER: silauth
      MYSQL_PASSWORD: silauth
    <<: *db_healthcheck

  dbadmin:
    image: phpmyadmin
    ports:
      - "8080:80"
    environment:
      PMA_HOST: db
      PMA_USER: silauth
      PMA_PASSWORD: silauth
      PMA_SSL: 1

  test:
    build:
      context: .
      args:
        UID: ${UID:-1001}
        GID: ${GID:-1001}
        COMPOSER_FLAGS: "--no-interaction --no-progress"
    depends_on:
      ssp-hub.local:
        condition: service_healthy
      ssp-idp1.local:
        condition: service_healthy
      ssp-idp2.local:
        condition: service_healthy
      ssp-idp3.local:
        condition: service_healthy
      ssp-idp4.local:
        condition: service_healthy
      ssp-sp1.local:
        condition: service_healthy
      ssp-sp2.local:
        condition: service_healthy
      ssp-sp3.local:
        condition: service_healthy
      pwmanager.local:
        condition: service_healthy
      test-browser:
        condition: service_started
    environment:
      MYSQL_HOST: db
      MYSQL_DATABASE: silauth
      MYSQL_USER: silauth
      MYSQL_PASSWORD: silauth
      PROFILE_URL_FOR_TESTS: http://pwmanager.local/module.php/core/authenticate.php?as=ssp-hub
      ADMIN_PASS: b
      SECRET_SALT: abc123
      MFA_RECOVERY_CONTACTS_API: "http://api-mock.local/recovery-contacts"
      MFA_RECOVERY_CONTACTS_API_KEY: "dummy-key"
      MFA_RECOVERY_CONTACTS_FALLBACK_NAME: "Dummy Name"
      MFA_RECOVERY_CONTACTS_FALLBACK_EMAIL: "dummy@example.com"
    env_file:
      - ./db/certs/test.env
    volumes:
      - ./dockerbuild/run-integration-tests.sh:/data/run-integration-tests.sh
      - ./dockerbuild/run-metadata-tests.sh:/data/run-metadata-tests.sh
      - ./dockerbuild/run-tests.sh:/data/run-tests.sh
      - ./dockerbuild/apply-dictionaries-overrides.php:/data/apply-dictionaries-overrides.php
      - ./features:/data/features
      - ./behat.yml:/data/behat.yml
      - ./tests:/data/tests
      - ./modules/mfa:/data/vendor/simplesamlphp/simplesamlphp/modules/mfa
      - ./modules/expirychecker:/data/vendor/simplesamlphp/simplesamlphp/modules/expirychecker
      - ./modules/profilereview:/data/vendor/simplesamlphp/simplesamlphp/modules/profilereview
      - ./modules/silauth:/data/vendor/simplesamlphp/simplesamlphp/modules/silauth
      - ./modules/sildisco:/data/vendor/simplesamlphp/simplesamlphp/modules/sildisco
      - ./modules/material:/data/vendor/simplesamlphp/simplesamlphp/modules/material
    command: ["/data/run-tests.sh"]

  test-browser:
    image: justinribeiro/chrome-headless:stable
    platform: linux/amd64
    ports:
      - "9222:9222"
    cap_add:
      - SYS_ADMIN

  composer:
    build:
      context: .
      args:
        UID: ${UID:-1001}
        GID: ${GID:-1001}
    volumes:
      - ./composer.json:/data/composer.json
      - ./composer.lock:/data/composer.lock
      - ./installed-packages.json:/data/installed-packages.json
      - ./development/update-composer-deps.sh:/data/update-composer-deps.sh
      - ./vendor:/data/vendor
      - composer-cache:/composer
    env_file:
      - ./local.env
    environment:
      COMPOSER_CACHE_DIR: /composer

  ssp-hub.local:
    build:
      context: .
      args:
        UID: ${UID:-1001}
        GID: ${GID:-1001}
    volumes:
      # Utilize custom certs
      - ./development/hub/cert:/data/vendor/simplesamlphp/simplesamlphp/cert

      # Utilize custom configs
      - ./development/hub/config/authsources.php:/data/vendor/simplesamlphp/simplesamlphp/config/authsources.php
      - ./dockerbuild/config/config.php:/data/vendor/simplesamlphp/simplesamlphp/config/config.php
      - ./development/announcement.php:/data/vendor/simplesamlphp/simplesamlphp/announcement/announcement.php

      # Utilize custom metadata
      - ./development/hub/metadata:/data/vendor/simplesamlphp/simplesamlphp/metadata

      # Enable checking our test metadata
      - ./dockerbuild/run-metadata-tests.sh:/data/run-metadata-tests.sh

      # Local modules
      - ./modules/mfa:/data/vendor/simplesamlphp/simplesamlphp/modules/mfa
      - ./modules/expirychecker:/data/vendor/simplesamlphp/simplesamlphp/modules/expirychecker
      - ./modules/profilereview:/data/vendor/simplesamlphp/simplesamlphp/modules/profilereview
      - ./modules/silauth:/data/vendor/simplesamlphp/simplesamlphp/modules/silauth
      - ./modules/sildisco:/data/vendor/simplesamlphp/simplesamlphp/modules/sildisco
      - ./modules/material:/data/vendor/simplesamlphp/simplesamlphp/modules/material
    ports:
      - "80:80"
      - "443:443"
    environment:
      ADMIN_PASS: "abc123"
      SECRET_SALT: "not-secret-h57fjemb&dn^nsJFGNjweJ"
      SECURE_COOKIE: "false"
      SHOW_SAML_ERRORS: "true"
      THEME_COLOR_SCHEME: "orange-light_blue"
      HUB_MODE: "true"
      HELP_CENTER_URL: "https://example.org/help"
      LOGGING_LEVEL: INFO
      ENABLE_DEBUG: "false"
    <<: *http_healthcheck

  ssp-idp1.local: # using a database session store type ("sql")
    build:
      context: .
      args:
        UID: ${UID:-1001}
        GID: ${GID:-1001}
    depends_on:
      db:
        condition: service_healthy
    volumes:
      # Utilize custom certs
      - ./development/idp-local/cert:/data/vendor/simplesamlphp/simplesamlphp/cert

      # Utilize custom configs
      - ./development/idp-local/config/authsources.php:/data/vendor/simplesamlphp/simplesamlphp/config/authsources.php
      - ./development/announcement.php:/data/vendor/simplesamlphp/simplesamlphp/announcement/announcement.php
      - ./development/enable-exampleauth.sh:/data/enable-exampleauth.sh
      - ./development/logo_idp1.png:/data/vendor/simplesamlphp/simplesamlphp/public/logo.png

      # Utilize custom metadata
      - ./development/idp-local/metadata:/data/vendor/simplesamlphp/simplesamlphp/metadata

      # Customized SSP code -- TODO: make a better solution that doesn't require hacking SSP code
      - ./development/UserPass.php:/data/vendor/simplesamlphp/simplesamlphp/modules/exampleauth/src/Auth/Source/UserPass.php

      # Enable checking our test metadata
      - ./dockerbuild/run-metadata-tests.sh:/data/run-metadata-tests.sh

      # Include the features folder (for the FakeIdBrokerClient class)
      - ./features:/data/features

      # Local modules
      - ./modules/mfa:/data/vendor/simplesamlphp/simplesamlphp/modules/mfa
      - ./modules/expirychecker:/data/vendor/simplesamlphp/simplesamlphp/modules/expirychecker
      - ./modules/profilereview:/data/vendor/simplesamlphp/simplesamlphp/modules/profilereview
      - ./modules/silauth:/data/vendor/simplesamlphp/simplesamlphp/modules/silauth
      - ./modules/sildisco:/data/vendor/simplesamlphp/simplesamlphp/modules/sildisco
      - ./modules/material:/data/vendor/simplesamlphp/simplesamlphp/modules/material
    command: >
      bash -c "/data/enable-exampleauth.sh && /data/run-idp.sh"
    ports:
      - "8085:80"
    environment:
      ADMIN_PASS: "a"
      SECRET_SALT: "not-secret-h57fjemb&dn^nsJFGNjweJ"
      IDP_DOMAIN_NAME: "mfaidp"
      ID_BROKER_ACCESS_TOKEN: "dummy"
      ID_BROKER_ASSERT_VALID_IP: "false"
      ID_BROKER_BASE_URI: "dummy"
      ID_BROKER_TRUSTED_IP_RANGES: "192.168.0.1/8"
      MFA_SETUP_URL: "http://pwmanager.local/module.php/core/authenticate.php?as=ssp-hub-custom-port"
      REMEMBER_ME_SECRET: "12345"
      PROFILE_URL: "http://pwmanager.local/module.php/core/authenticate.php?as=ssp-hub-custom-port"
      PROFILE_URL_FOR_TESTS: "http://pwmanager.local/module.php/core/authenticate.php?as=ssp-hub"
      SECURE_COOKIE: "false"
      SHOW_SAML_ERRORS: "true"
      SESSION_STORE_TYPE: "sql"
      MYSQL_HOST: "db"
      MYSQL_DATABASE: "silauth"
      MYSQL_USER: "silauth"
      MYSQL_PASSWORD: "silauth"
      BASE_URL_PATH: "http://ssp-idp1.local/" # for automated tests
      #BASE_URL_PATH: "http://ssp-idp1.local:8085" # for manual browser testing
      HELP_CENTER_URL: "https://example.org/help"
      THEME_COLOR_SCHEME: "blue_grey-teal"
      HUB_MODE: "false"
      LOGGING_LEVEL: INFO
      ENABLE_DEBUG: "false"
    env_file:
      - ./db/certs/test.env
    <<: *http_healthcheck

  ssp-idp2.local:
    build:
      context: .
      args:
        UID: ${UID:-1001}
        GID: ${GID:-1001}
    depends_on:
      db:
        condition: service_healthy
      broker:
        condition: service_healthy
    volumes:
      # Utilize custom certs
      - ./development/idp2-local/cert:/data/vendor/simplesamlphp/simplesamlphp/cert

      # Utilize custom configs
      - ./development/idp2-local/config/authsources.php:/data/vendor/simplesamlphp/simplesamlphp/config/authsources.php
      - ./development/enable-exampleauth.sh:/data/enable-exampleauth.sh
      - ./development/logo_idp2.png:/data/vendor/simplesamlphp/simplesamlphp/public/logo.png

      # Utilize custom metadata
      - ./development/idp2-local/metadata:/data/vendor/simplesamlphp/simplesamlphp/metadata

      # Customized SSP code -- TODO: make a better solution that doesn't require hacking SSP code
      - ./development/UserPass.php:/data/vendor/simplesamlphp/simplesamlphp/modules/exampleauth/src/Auth/Source/UserPass.php

      # Local modules
      - ./modules/mfa:/data/vendor/simplesamlphp/simplesamlphp/modules/mfa
      - ./modules/expirychecker:/data/vendor/simplesamlphp/simplesamlphp/modules/expirychecker
      - ./modules/profilereview:/data/vendor/simplesamlphp/simplesamlphp/modules/profilereview
      - ./modules/silauth:/data/vendor/simplesamlphp/simplesamlphp/modules/silauth
      - ./modules/sildisco:/data/vendor/simplesamlphp/simplesamlphp/modules/sildisco
      - ./modules/material:/data/vendor/simplesamlphp/simplesamlphp/modules/material
    command: bash -c "/data/enable-exampleauth.sh && /data/run.sh"
    ports:
      - "8086:80"
    environment:
      ADMIN_PASS: "b"
      SECRET_SALT: "h57fjemb&dn^nsJFGNjweJ"
      IDP_DOMAIN_NAME: "ssp-idp2.local"
      ID_BROKER_ACCESS_TOKEN: "test-cli-abc123"
      ID_BROKER_ASSERT_VALID_IP: "true"
      ID_BROKER_BASE_URI: "http://broker"
      ID_BROKER_TRUSTED_IP_RANGES: "10.20.38.0/24"
      MYSQL_HOST: "db"
      MYSQL_DATABASE: "silauth"
      MYSQL_USER: "silauth"
      MYSQL_PASSWORD: "silauth"
      SECURE_COOKIE: "false"
      SHOW_SAML_ERRORS: "true"
      THEME_COLOR_SCHEME: "red-teal"
      HUB_MODE: "false"
      LOGGING_LEVEL: INFO
      ENABLE_DEBUG: "false"
    env_file:
      - ./db/certs/test.env
    <<: *http_healthcheck

  ssp-idp3.local:
    build:
      context: .
      args:
        UID: ${UID:-1001}
        GID: ${GID:-1001}
    volumes:
      # Utilize custom certs
      - ./development/idp3-local/cert:/data/vendor/simplesamlphp/simplesamlphp/cert

      # Utilize custom configs
      - ./development/idp3-local/config/authsources.php:/data/vendor/simplesamlphp/simplesamlphp/config/authsources.php
      - ./development/logo_idp3.png:/data/vendor/simplesamlphp/simplesamlphp/public/logo.png

      # Utilize custom metadata
      - ./development/idp3-local/metadata:/data/vendor/simplesamlphp/simplesamlphp/metadata

      # Local modules
      - ./modules/mfa:/data/vendor/simplesamlphp/simplesamlphp/modules/mfa
      - ./modules/expirychecker:/data/vendor/simplesamlphp/simplesamlphp/modules/expirychecker
      - ./modules/profilereview:/data/vendor/simplesamlphp/simplesamlphp/modules/profilereview
      - ./modules/silauth:/data/vendor/simplesamlphp/simplesamlphp/modules/silauth
      - ./modules/sildisco:/data/vendor/simplesamlphp/simplesamlphp/modules/sildisco
      - ./modules/material:/data/vendor/simplesamlphp/simplesamlphp/modules/material
    ports:
      - "8087:80"
    env_file:
      - local.env
    environment:
      ADMIN_PASS: "c"
      SECRET_SALT: "h57fjem34fh*nsJFGNjweJ"
      SECURE_COOKIE: "false"
      SHOW_SAML_ERRORS: "true"
      THEME_COLOR_SCHEME: "orange-light_blue"
      HUB_MODE: "false"
      LOGGING_LEVEL: INFO
      ENABLE_DEBUG: "false"
    <<: *http_healthcheck

  ssp-idp4.local:
    build:
      context: .
      args:
        UID: ${UID:-1001}
        GID: ${GID:-1001}
    volumes:
      # Utilize custom certs
      - ./development/idp4-local/cert:/data/vendor/simplesamlphp/simplesamlphp/cert

      # Utilize custom configs
      - ./development/idp4-local/config/authsources.php:/data/vendor/simplesamlphp/simplesamlphp/config/authsources.php
      - ./development/enable-exampleauth.sh:/data/enable-exampleauth.sh

      # Utilize custom metadata
      - ./development/idp4-local/metadata:/data/vendor/simplesamlphp/simplesamlphp/metadata

      # Customized SSP code -- TODO: make a better solution that doesn't require hacking SSP code
      - ./development/UserPass.php:/data/vendor/simplesamlphp/simplesamlphp/modules/exampleauth/src/Auth/Source/UserPass.php

      # Include the features folder (for the FakeIdBrokerClient class)
      - ./features:/data/features

      # Local modules
      - ./modules/mfa:/data/vendor/simplesamlphp/simplesamlphp/modules/mfa
      - ./modules/expirychecker:/data/vendor/simplesamlphp/simplesamlphp/modules/expirychecker
      - ./modules/profilereview:/data/vendor/simplesamlphp/simplesamlphp/modules/profilereview
      - ./modules/silauth:/data/vendor/simplesamlphp/simplesamlphp/modules/silauth
      - ./modules/sildisco:/data/vendor/simplesamlphp/simplesamlphp/modules/sildisco
      - ./modules/material:/data/vendor/simplesamlphp/simplesamlphp/modules/material
    command: bash -c "/data/enable-exampleauth.sh && /data/run.sh"
    depends_on:
      - api-mock.local
    ports:
      - "8088:80"
    environment:
      ADMIN_PASS: "d"
      ID_BROKER_ACCESS_TOKEN: "dummy"
      ID_BROKER_ASSERT_VALID_IP: "false"
      ID_BROKER_BASE_URI: "dummy"
      ID_BROKER_TRUSTED_IP_RANGES: "192.168.0.1/8"
      IDP_DOMAIN_NAME: "idp4"
      MFA_SETUP_URL: "http://pwmanager.local/module.php/core/authenticate.php?as=ssp-hub-custom-port"
      PROFILE_URL: "http://pwmanager.local/module.php/core/authenticate.php?as=ssp-hub-custom-port"
      REMEMBER_ME_SECRET: "not-realy-secret-67890"
      SECRET_SALT: "not-really-secret-UyxPqwWQZZmJq3Ve"
      SECURE_COOKIE: "false"
      SHOW_SAML_ERRORS: "true"
      THEME_COLOR_SCHEME: "orange-light_blue"
      HUB_MODE: "false"
      BASE_URL_PATH: "http://ssp-idp4.local/" # for automated tests
      #BASE_URL_PATH: "http://ssp-idp4.local:8088" # for manual browser testing
      MFA_RECOVERY_CONTACTS_API: "http://api-mock.local/recovery-contacts"
      MFA_RECOVERY_CONTACTS_API_KEY: "dummy-key"
      MFA_RECOVERY_CONTACTS_FALLBACK_NAME: "Dummy Name"
      MFA_RECOVERY_CONTACTS_FALLBACK_EMAIL: "dummy@example.com"
      LOGGING_LEVEL: INFO
      ENABLE_DEBUG: "false"
    <<: *http_healthcheck

  ssp-sp1.local:
    image: ghcr.io/sil-org/ssp-base:11
    platform: linux/amd64
    volumes:
      # Utilize custom certs
      - ./development/sp-local/cert:/data/vendor/simplesamlphp/simplesamlphp/cert

      # Utilize custom configs
      - ./development/sp-local/config/authsources.php:/data/vendor/simplesamlphp/simplesamlphp/config/authsources.php

      # Utilize custom metadata
      - ./development/sp-local/metadata/saml20-idp-remote.php:/data/vendor/simplesamlphp/simplesamlphp/metadata/saml20-idp-remote.php

      # Enable checking our test metadata
      - ./dockerbuild/run-metadata-tests.sh:/data/run-metadata-tests.sh
    ports:
      - "8081:80"
    environment:
      ADMIN_EMAIL: "john_doe@there.com"
      ADMIN_PASS: "sp1"
      IDP_NAME: "NA"
      SECRET_SALT: "not-secret-h57fjemb&dn^nsJFGNjweJz1"
      SECURE_COOKIE: "false"
      SHOW_SAML_ERRORS: "true"
      SAML20_IDP_ENABLE: "false"
      ADMIN_PROTECT_INDEX_PAGE: "false"
      LOGGING_LEVEL: INFO
      ENABLE_DEBUG: "false"
    <<: *http_healthcheck

  ssp-sp2.local:
    image: ghcr.io/sil-org/ssp-base:11
    platform: linux/amd64
    volumes:
      # Utilize custom certs
      - ./development/sp2-local/cert:/data/vendor/simplesamlphp/simplesamlphp/cert

      # Utilize custom configs
      - ./development/sp2-local/config/authsources.php:/data/vendor/simplesamlphp/simplesamlphp/config/authsources.php

      # Utilize custom metadata
      - ./development/sp2-local/metadata/saml20-idp-remote.php:/data/vendor/simplesamlphp/simplesamlphp/metadata/saml20-idp-remote.php
    ports:
      - "8082:80"
    environment:
      ADMIN_EMAIL: "john_doe@there.com"
      ADMIN_PASS: "sp2"
      IDP_NAME: "NA"
      SECRET_SALT: "h57fjemb&dn^nsJFGNjweJz2"
      SECURE_COOKIE: "false"
      SHOW_SAML_ERRORS: "true"
      SAML20_IDP_ENABLE: "false"
      ADMIN_PROTECT_INDEX_PAGE: "false"
    <<: *http_healthcheck

  ssp-sp3.local:
    image: ghcr.io/sil-org/ssp-base:11
    platform: linux/amd64
    volumes:
      # Utilize custom certs
      - ./development/sp3-local/cert:/data/vendor/simplesamlphp/simplesamlphp/cert

      # Utilize custom configs
      - ./development/sp3-local/config/authsources.php:/data/vendor/simplesamlphp/simplesamlphp/config/authsources.php

      # Utilize custom metadata
      - ./development/sp3-local/metadata/saml20-idp-remote.php:/data/vendor/simplesamlphp/simplesamlphp/metadata/saml20-idp-remote.php
    ports:
      - "8083:80"
    env_file:
      - local.env
    environment:
      ADMIN_EMAIL: "john_doe@there.com"
      ADMIN_PASS: sp3
      IDP_NAME: "NA"
      SECRET_SALT: h57fjemb&dn^nsJFGNjweJz3
      SECURE_COOKIE: "false"
      SHOW_SAML_ERRORS: "true"
      SAML20_IDP_ENABLE: "false"
      ADMIN_PROTECT_INDEX_PAGE: "false"
    <<: *http_healthcheck

  pwmanager.local:
    image: ghcr.io/sil-org/ssp-base:11
    platform: linux/amd64
    volumes:
      # Utilize custom certs
      - ./development/sp-local/cert:/data/vendor/simplesamlphp/simplesamlphp/cert

      # Utilize custom configs
      - ./development/sp-local/config/authsources-pwmanager.php:/data/vendor/simplesamlphp/simplesamlphp/config/authsources.php

      # Utilize custom metadata
      - ./development/sp-local/metadata/saml20-idp-remote.php:/data/vendor/simplesamlphp/simplesamlphp/metadata/saml20-idp-remote.php
    environment:
      ADMIN_EMAIL: "john_doe@there.com"
      ADMIN_PASS: sp1
      IDP_NAME: THIS VARIABLE IS REQUIRED BUT PROBABLY NOT USED
      SECRET_SALT: NOT-a-secret-k49fjfkw73hjf9t87wjiw
      SECURE_COOKIE: "false"
      SHOW_SAML_ERRORS: "true"
      SAML20_IDP_ENABLE: "false"
      ADMIN_PROTECT_INDEX_PAGE: "false"
    <<: *http_healthcheck

  # the broker and brokerDb containers are used by the silauth module
  broker:
    image: ghcr.io/sil-org/idp-id-broker:8
    platform: linux/amd64
    ports:
      - "80"
    depends_on:
      brokerDb:
        condition: service_healthy
    env_file:
      - ./local.broker.env
    environment:
      IDP_NAME: "idp"
      IDP_DISPLAY_NAME: "Our App"
      MYSQL_HOST: "brokerDb"
      MYSQL_DATABASE: "broker"
      MYSQL_USER: "user"
      MYSQL_PASSWORD: "pass"
      EMAILER_CLASS: Sil\SilIdBroker\Behat\Context\fakes\FakeEmailer
      HELP_CENTER_URL: "https://example.org/help"
      PASSWORD_FORGOT_URL: "https://example.org/forgot"
      PASSWORD_PROFILE_URL: "https://example.org/profile"
      SUPPORT_EMAIL: "support@example.org"
      EMAIL_SIGNATURE: "one red pill, please"
      API_ACCESS_KEYS: "test-cli-abc123"
      APP_ENV: "prod"
      RP_ORIGINS: "https://ssp-idp1.local,https://ssp-idp2.local,https://ssp-idp3.local,https://ssp-idp4.local"
      HIBP_CHECK_ON_LOGIN: "false"
      MFA_TOTP_apiBaseUrl: "dummy/"
      MFA_API_KEY: 10345678-1234-1234-1234-123456789012
      MFA_API_SECRET: 11345678-1234-1234-1234-12345678
      MFA_WEBAUTHN_apiBaseUrl: "dummy/"
      MFA_WEBAUTHN_rpId: http://app99
    volumes:
      - ./development/m991231_235959_insert_test_users.php:/app/console/migrations/m991231_235959_insert_test_users.php
    command: ["bash", "-c", "./yii migrate --interactive=0 && ./run.sh"]
    healthcheck:
      test: ["CMD", "curl", "--fail", "localhost/site/status"]
      start_period: 10s
      interval: 10s
      timeout: 5s
      retries: 3

  brokerDb:
    image: mariadb:10
    ports:
      - "3306"
    environment:
      MYSQL_ROOT_PASSWORD: "r00tp@ss!"
      MYSQL_DATABASE: "broker"
      MYSQL_USER: "user"
      MYSQL_PASSWORD: "pass"
    <<: *db_healthcheck

  brokerpma:
    image: phpmyadmin
    ports:
      - "8090:80"
    environment:
      PMA_HOST: brokerDb
      PMA_USER: user
      PMA_PASSWORD: pass

  dynamo:
    image: cnadiminti/dynamodb-local
    platform: linux/amd64
    command: "-sharedDb -inMemory"
    hostname: dynamo
    ports:
      - "8000:8000"
    environment:
      reschedule: on-node-failure

  init-dynamo:
    image: garland/aws-cli-docker
    platform: linux/amd64
    command: "/init-dynamodb.sh"
    volumes:
      - ./development/init-dynamodb.sh:/init-dynamodb.sh
    depends_on:
      - dynamo
    environment:
      AWS_ACCESS_KEY_ID: 0
      AWS_SECRET_ACCESS_KEY: 0
      AWS_DEFAULT_REGION: us-east-1
      AWS_DYNAMODB_ENDPOINT: http://dynamo:8000

  api-mock.local:
    image: mockoon/cli:9
    command: ["--data", "data", "--port", "80"]
    volumes:
      - ./development/api-mock/mfa-recovery-contacts.json:/data:readonly

  node:
    image: node:lts-alpine
    volumes:
      - ./package.json:/data/package.json
      - ./package-lock.json:/data/package-lock.json
      - ./node_modules:/data/node_modules
    working_dir: /data

networks:
  default:
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 10.20.38.0/24
          gateway: 10.20.38.1

volumes:
  composer-cache: {}