docker-compose.yml

version: '3.3'
services:
    certs:
        container_name: oe-certs 
        image: ghcr.io/i-tech-uw/certgen:main
        restart: always
        environment:
            - KEYSTORE_PW="kspass"
            - TRUSTSTORE_PW="tspass"
        networks:
            - default
        volumes:
            -  cert-volume:/etc/openelis-global
    database:
        container_name: openelisglobal-database 
        image: postgres:9.5
        ports:
            - "15432:5432"
        restart: always
        env_file:
            - ./volume/database/database.env
        volumes:
              # preserves the database between containers
             - db-data:/var/lib/postgresql/data                
              # files here will run on install
             - ./volume/database/dbInit:/docker-entrypoint-initdb.d
        networks:
            - default
        healthcheck:
            test: [ "CMD", "pg_isready", "-q", "-d", "clinlims", "-U", "clinlims" ]
            timeout: 45s
            interval: 10s
            retries: 10 
            
    oe.openelis.org:
        build:
          context: .
        container_name: openelisglobal-webapp 
        image: openelisglobal-webapp.build     
        depends_on:
            - database
        ports:
            - "8080:8080"
            - "8443:8443"
        restart: always
        networks:
          default:
              ipv4_address: 172.20.1.121

        restart: always
        environment:
            - DEFAULT_PW=adminADMIN! 
            - TZ=Africa/Nairobi
              # context.xml doesn't seem to be able to pick up environment variables directly, so we are passing them in as CATALINA_OPTS
            - CATALINA_OPTS= -Ddatasource.url=jdbc:postgresql://database:5432/clinlims -Ddatasource.username=clinlims
        volumes:
            -  cert-volume:/etc/openelis-global
            - ./volume/plugins/:/var/lib/openelis-global/plugins
            - ./volume/tomcat/oe_server.xml:/usr/local/tomcat/conf/server.xml
        secrets:
            - source: datasource.password
            - source: common.properties
            
    fhir.openelis.org:
        container_name: external-fhir-api
        image: hapiproject/hapi:v5.4.0
        ports:
            - "8081:8080"
            - "8444:8443"
        networks:
            - default
        restart: always
        environment:
          TZ: Africa/Nairobi

          JAVA_OPTS: "-Djavax.net.ssl.trustStore=/etc/openelis-global/truststore 
                      -Djavax.net.ssl.trustStorePassword=tspass
                      -Djavax.net.ssl.trustStoreType=pkcs12 
                      -Djavax.net.ssl.keyStore=/etc/openelis-global/keystore 
                      -Djavax.net.ssl.keyStorePassword=kspass 
                      -Djavax.net.ssl.keyStoreType=pkcs12"            
        
        volumes:
            -  cert-volume:/etc/openelis-global
            - ./volume/tomcat/hapi_server.xml:/usr/local/tomcat/conf/server.xml
        secrets:
            - source: common.properties
                
secrets:
  datasource.password:
    file: ./volume/properties/datasource.password  
  common.properties:
    file:  ./volume/properties/common.properties  

networks:
  default:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.1.0/24  
        
volumes:
  db-data:
  cert-volume: