docker-compose.yml

version: "2.3"
services:
  nginx:
    image: atomgraph/nginx
    command: /bin/bash -c "envsubst '$$UPSTREAM_SERVER $$UPSTREAM_HTTPS_PORT $$UPSTREAM_HTTP_PORT $$SERVER_NAME $$SERVER_HTTPS_PORT $$SERVER_HTTP_PORT' < /etc/nginx/nginx.conf.template > /etc/nginx/nginx.conf && nginx -g 'daemon off;'"
    ports:
      - ${HTTP_PORT}:${HTTP_PORT} # allow Tomcat to do HTTP to HTTPS redirect
      - ${HTTPS_PORT}:${HTTPS_PORT} # HTTPS
    environment:
      - UPSTREAM_SERVER=linkeddatahub
      - UPSTREAM_HTTPS_PORT=8443
      - UPSTREAM_HTTP_PORT=8080
      - SERVER_NAME=${HOST}
      - SERVER_HTTPS_PORT=${HTTPS_PORT}
      - SERVER_HTTP_PORT=${HTTP_PORT}
    volumes:
      - ./platform/nginx.conf.template:/etc/nginx/nginx.conf.template:ro
  linkeddatahub:
    image: atomgraph/linkeddatahub:latest
    ports:
      - 8001:8000 # debugger
    environment:
      - JPDA_ADDRESS=8000 # debugger port
      - ATOMGRAPH_UPLOAD_ROOT=/var/www/linkeddatahub/uploads/
      - TZ="Europe/Copenhagen"
      #- CATALINA_OPTS="-Duser.timezone=Europe/Copenhagen"
      - PROXY_HOST=nginx
      - PROTOCOL=${PROTOCOL}
      - HOST=${HOST}
      - ABS_PATH=${ABS_PATH}
      - PROXY_HTTP_PORT=${HTTP_PORT}
      - HTTP_REDIRECT_PORT=${HTTPS_PORT}
      - PROXY_HTTPS_PORT=${HTTPS_PORT}
      - HTTPS_CLIENT_AUTH=want
      - PKCS12_KEY_PASSWORD=R4#?CWaY#ZET\ncZ
      - PKCS12_STORE_PASSWORD=R4#?CWaY#ZET\ncZ
      - CLIENT_KEYSTORE_PASSWORD=LinkedDataHub
      - CLIENT_TRUSTSTORE_PASSWORD=LinkedDataHub
      - SELF_SIGNED_CERT=true # only on localhost
      - SIGN_UP_CERT_VALIDITY=180
      - CONTEXT_DATASET=/WEB-INF/classes/com/atomgraph/linkeddatahub/system.trig
      - MAIL_SMTP_HOST=email-server
      - MAIL_SMTP_PORT=25
      - MAIL_USER=linkeddatahub@localhost
      - OWNER_MBOX=${OWNER_MBOX}
      - OWNER_GIVEN_NAME=${OWNER_GIVEN_NAME}
      - OWNER_FAMILY_NAME=${OWNER_FAMILY_NAME}
      - OWNER_ORG_UNIT=${OWNER_ORG_UNIT}
      - OWNER_ORGANIZATION=${OWNER_ORGANIZATION}
      - OWNER_LOCALITY=${OWNER_LOCALITY}
      - OWNER_STATE_OR_PROVINCE=${OWNER_STATE_OR_PROVINCE}
      - OWNER_COUNTRY_NAME=${OWNER_COUNTRY_NAME}
      - OWNER_KEY_PASSWORD=${OWNER_KEY_PASSWORD}
    volumes:
      - ./certs:/usr/local/tomcat/webapps/ROOT/certs
      - ./uploads:/var/www/linkeddatahub/uploads
      - ./config/prod.log4j.properties:/usr/local/tomcat/webapps/ROOT/WEB-INF/classes/log4j.properties:ro
      - ./config/system.trig:/usr/local/tomcat/webapps/ROOT/WEB-INF/classes/com/atomgraph/linkeddatahub/system.trig:ro
  fuseki-admin:
    image: atomgraph/fuseki
    ports:
      - 3030:3030
    volumes:
      - ./config/fuseki/admin.ttl:/var/fuseki/config.ttl:ro
      - ./data/admin:/var/fuseki/data
    command: [ "--config", "/var/fuseki/config.ttl" ]
  fuseki-end-user:
    image: atomgraph/fuseki
    ports:
      - 3031:3030
    volumes:
      - ./config/fuseki/end-user.ttl:/var/fuseki/config.ttl:ro
      - ./data/end-user:/var/fuseki/data
    command: [ "--config", "/var/fuseki/config.ttl" ]
  varnish-end-user:
    image: atomgraph/varnish
    environment:
      - BACKEND_HOST=fuseki-end-user
      - BACKEND_PORT=3030
      - CLIENT_HOST=linkeddatahub
      - VARNISH_TTL=86400
    privileged: true
    entrypoint: /bin/sh -c "envsubst < /etc/varnish/default.vcl.template > /etc/varnish/default.vcl && /bin/sh ./entrypoint.sh"
    volumes:
      - ./platform/varnish.vcl.template:/etc/varnish/default.vcl.template:ro
  email-server:
    image: namshi/smtp
    environment:
      - DISABLE_IPV6=true