docker-compose.yml

services:
  sshagent:
    image: ${DOCKER_REGISTRY-}sshagent
    build:
      context: .
      dockerfile: SshAgent/Dockerfile
    restart: unless-stopped
    volumes:
      - app_volume:/app/shared
    environment:
      TZ: "Europe/Prague" 
      SSH_AUTH_SOCK: "/app/shared/agentsocket" 
    networks:
      - sshagent_internal_network
    profiles:
      - sshagent

  mssql:
    image: mcr.microsoft.com/mssql/server:2022-latest
    restart: unless-stopped
    volumes:
      - sql_volume:/var/opt/mssql
    environment:
      ACCEPT_EULA: "Y"
      MSSQL_PID: "Express"
      TZ: "Europe/Prague" 
    networks:
      - db_internal_network
      - external_network
    profiles:
      - db

  datastagingapi:
    image: ${DOCKER_REGISTRY-}datastagingapi
    build:
      context: .
      dockerfile: DataStagingAPI/Dockerfile
    restart: unless-stopped
    volumes:
      - app_sftp_temp_volume:/sftp
      - app_volume:/app/shared
    environment:
      ASPNETCORE_RUNTYPE_ENVIRONMENT: "Docker"
      TZ: "Europe/Prague" 
    networks:
      - db_internal_network
      - external_network
    profiles:
      - staging

  heappe:
    image: ${DOCKER_REGISTRY-}heappe
    build:
      context: .
      dockerfile: RestApi/Dockerfile
    restart: unless-stopped
    volumes:
      - app_sftp_temp_volume:/sftp
      - app_volume:/app/shared
    environment:
      ASPNETCORE_RUNTYPE_ENVIRONMENT: "Docker"
      SSH_AUTH_SOCK: "/app/shared/agentsocket"
      TZ: "Europe/Prague" 
    networks:
      - sshagent_internal_network
      - db_internal_network
      - external_network
      - vaultNet
    extra_hosts:
      - "host.docker.internal:host-gateway"

  vault:
    image: hashicorp/vault:latest
    container_name: heappe-vault
    expose:
      - 8200:8200
    environment:
      - VAULT_ADDR=http://localhost:8200
    volumes:
      - vault-volume:/vault
      - ../app/confs/vault/vault:/vault/config
    healthcheck:
      retries: 5
    command: server 
    cap_add:
      - IPC_LOCK
    networks:
      - vaultNet

  vaultagent:
    image: hashicorp/vault:latest
    container_name: vaultagent
    expose:
      - 8100:8100
    volumes:
      - vault-agent-volume:/vault/agent
      - ../app/confs/vault/agent:/vault/config
      - ../app/logs/Vault/:/vault/logs
    command: proxy -config=/vault/config/vault-agent.hcl -log-level debug -log-file=/vault/logs/vault-agent.log
    cap_add:
      - IPC_LOCK
    networks:
      - vaultNet
    depends_on:
      - vault

volumes:
# Shared volumes
  app_volume:
  app_sftp_temp_volume:
# Invidual volumes
  sql_volume:
  vault-volume:
  vault-agent-volume:

networks:
  external_network:
  sshagent_internal_network:
    internal: true
  db_internal_network:
    internal: true
  vaultNet:
    internal: true