docker-compose.yml

services:

  # webserver to handle all traffic. This can use let's encrypt to generate a SSL cert.
  traefik:
    image: "traefik:v2.9"
    command:
      - --log.level=INFO
      - --api=true
      - --api.dashboard=true
      # Entrypoints
      - --entrypoints.web.address=:80
      # Docker setup
      - --providers.docker=true
      - --providers.docker.endpoint=unix:///var/run/docker.sock
      - --providers.docker.exposedbydefault=false
      - --providers.docker.watch=true
    restart: "unless-stopped"
    networks:
      - pecan
    security_opt:
      - no-new-privileges:true
    ports:
      - "${TRAEFIK_HTTP_PORT-80}:80"
    volumes:
      - "traefik:/config"
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.entrypoints=web"
      - "traefik.http.routers.traefik.rule=Host(`traefik.pecan.localhost`)"
      - "traefik.http.routers.traefik.service=api@internal"

  # ----------------------------------------------------------------------
  # Job management system. Jobs are distributed through the message
  # system. PEcAn uses this to distribute the work/load across multiple
  # containers.
  # ----------------------------------------------------------------------

  # rabbitmq to connect to extractors
  rabbitmq:
    image: rabbitmq:3.8-management
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_DEFAULT_USER=${RABBITMQ_DEFAULT_USER:-guest}
      - RABBITMQ_DEFAULT_PASS=${RABBITMQ_DEFAULT_PASS:-guest}
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.rabbitmq.loadbalancer.server.port=15672"
      - "traefik.http.routers.rabbitmq.entrypoints=web"
      - "traefik.http.routers.rabbitmq.rule=Host(`rabbitmq.pecan.localhost`)"
    volumes:
      - rabbitmq:/var/lib/rabbitmq
    healthcheck:
      test: rabbitmqctl ping
      interval: 10s
      timeout: 5s
      retries: 5

  # ----------------------------------------------------------------------
  # Database to hold the data from PEcAn and BETY.
  # ----------------------------------------------------------------------

  # postgresql + postgis to hold all the data
  postgres:
    image: mdillon/postgis:9.5
    restart: unless-stopped
    networks:
      - pecan
    volumes:
      - postgres:/var/lib/postgresql/data
    healthcheck:
      test: pg_isready -U postgres
      interval: 10s
      timeout: 5s
      retries: 5

  # ----------------------------------------------------------------------
  # BETY rails frontend to the database
  # ----------------------------------------------------------------------
  bety:
    image: pecan/bety:${BETY_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - UNICORN_WORKER_PROCESSES=1
      - SECRET_KEY_BASE=${BETY_SECRET_KEY:-notasecret}
      - RAILS_RELATIVE_URL_ROOT=/bety
      - LOCAL_SERVER=${BETY_LOCAL_SERVER:-99}
    volumes:
      - bety:/home/bety/log
    depends_on:
      postgres:
        condition: service_healthy
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.bety.loadbalancer.server.port=8000"
      - "traefik.http.routers.bety.rule=Host(`${TRAEFIK_HOST:-pecan.localhost}`) && PathPrefix(`/bety/`)"
    healthcheck:
      test: "curl --silent --fail http://localhost:8000/${RAILS_RELATIVE_URL_ROOT} > /dev/null || exit 1"
      interval: 10s
      timeout: 5s
      retries: 5

  # ----------------------------------------------------------------------
  # RStudio
  # ----------------------------------------------------------------------
  rstudio:
    image: pecan/base:${PECAN_VERSION:-latest}
    command: /work/rstudio.sh
    restart: unless-stopped
    networks:
      - pecan
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    environment:
      - KEEP_ENV=RABBITMQ_URI RABBITMQ_PREFIX RABBITMQ_PORT FQDN NAME
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
      - RABBITMQ_PREFIX=/
      - RABBITMQ_PORT=15672
      - FQDN=${PECAN_FQDN:-docker}
      - NAME=${PECAN_NAME:-docker}
      - USER=${PECAN_RSTUDIO_USER:-carya}
      - PASSWORD=${PECAN_RSTUDIO_PASS:-illinois}
      - USERID=${UID:-1001}
      - GROUPID=${GID:-1001}
    volumes:
      - pecan:/data
      - rstudio:/home
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.rstudio.rule=Host(`${TRAEFIK_HOST:-pecan.localhost}`) && PathPrefix(`/rstudio/`)"
      - "traefik.http.routers.rstudio.service=rstudio"
      - "traefik.http.routers.rstudio.middlewares=rstudio-stripprefix,rstudio-headers"
      - "traefik.http.services.rstudio.loadbalancer.server.port=8787"
      - "traefik.http.middlewares.rstudio-headers.headers.customrequestheaders.X-RStudio-Root-Path=/rstudio"
      - "traefik.http.middlewares.rstudio-stripprefix.stripprefix.prefixes=/rstudio"
      - "traefik.http.routers.rstudio-local.entrypoints=web"
      - "traefik.http.routers.rstudio-local.rule=Host(`rstudio.pecan.localhost`)"
      - "traefik.http.routers.rstudio-local.service=rstudio-local"
      - "traefik.http.services.rstudio-local.loadbalancer.server.port=8787"

  # ----------------------------------------------------------------------
  # PEcAn application
  # ----------------------------------------------------------------------

  # PEcAn documentation as well as PEcAn home page
  docs:
    image: pecan/docs:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.docs.loadbalancer.server.port=80"
      - "traefik.http.routers.docs.rule=Host(`${TRAEFIK_HOST:-pecan.localhost}`) && PathPrefix(`/`)"
    healthcheck:
      test: "curl --silent --fail http://localhost/ > /dev/null || exit 1"
      interval: 10s
      timeout: 5s
      retries: 5

  # PEcAn web front end, this is just the PHP code
  pecan:
    user: "${UID:-1001}:${GID:-1001}"
    image: pecan/web:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
      - FQDN=${PECAN_FQDN:-docker}
      - NAME=${PECAN_NAME:-docker}
      - SECRET_KEY_BASE=${BETY_SECRET_KEY:-thisisnotasecret}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.pecan.loadbalancer.server.port=8080"
      - "traefik.http.routers.pecan.rule=Host(`${TRAEFIK_HOST:-pecan.localhost}`) && PathPrefix(`/pecan/`)"
    volumes:
      - pecan:/data
      - pecan:/var/www/html/pecan/data
    healthcheck:
      test: "curl --silent --fail http://localhost/pecan/ > /dev/null || exit 1"
      interval: 10s
      timeout: 5s
      retries: 5

  # PEcAn model monitor
  monitor:
    user: "${UID:-1001}:${GID:-1001}"
    image: pecan/monitor:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
      - FQDN=${PECAN_FQDN:-docker}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.monitor.rule=Host(`${TRAEFIK_HOST:-pecan.localhost}`) && PathPrefix(`/monitor/`)"
      - "traefik.http.routers.monitor.middlewares=monitor-stripprefix"
      - "traefik.http.middlewares.monitor-stripprefix.stripprefix.prefixes=/monitor"
    volumes:
      - pecan:/data
    healthcheck:
      test: "curl --silent --fail http://localhost:9999/monitor/ > /dev/null || exit 1"
      interval: 10s
      timeout: 5s
      retries: 5

  # PEcAn executor, executes jobs. Does not the actual models
  executor:
    user: "${UID:-1001}:${GID:-1001}"
    image: pecan/executor:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
      - RABBITMQ_PREFIX=/
      - RABBITMQ_PORT=15672
      - FQDN=${PECAN_FQDN:-docker}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    volumes:
      - pecan:/data

  # ----------------------------------------------------------------------
  # PEcAn models, list each model you want to run below
  # ----------------------------------------------------------------------
  # PEcAn FATES model runner
  fates:
    user: "${UID:-1001}:${GID:-1001}"
    image: ghcr.io/noresmhub/ctsm-api:latest
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
    depends_on:
      rabbitmq:
        condition: service_healthy
    volumes:
      - pecan:/data

  # PEcAn basgra model runner
  basgra:
    user: "${UID:-1001}:${GID:-1001}"
    image: pecan/model-basgra-basgra_n_v1.0:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
    depends_on:
      rabbitmq:
        condition: service_healthy
    volumes:
      - pecan:/data

  # PEcAn sipnet model runner
  sipnet:
    user: "${UID:-1001}:${GID:-1001}"
    image: pecan/model-sipnet-git:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
    depends_on:
      rabbitmq:
        condition: service_healthy
    volumes:
      - pecan:/data

  # PEcAn ED model runner
  ed2:
    user: "${UID:-1001}:${GID:-1001}"
    image: pecan/model-ed2-2.2.0:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
    depends_on:
      rabbitmq:
        condition: service_healthy
    volumes:
      - pecan:/data

  # PEcAn MAESPA model runner
  maespa:
    user: "${UID:-1001}:${GID:-1001}"
    image: pecan/model-maespa-git:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
    depends_on:
      rabbitmq:
        condition: service_healthy
    volumes:
      - pecan:/data

  # PEcAn BioCro model runner
  biocro:
    user: "${UID:-1001}:${GID:-1001}"
    image: pecan/model-biocro-0.95:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
    depends_on:
      rabbitmq:
        condition: service_healthy
    volumes:
      - pecan:/data

  # ----------------------------------------------------------------------
  # Shiny Apps
  # ----------------------------------------------------------------------
  # PEcAn DB Sync visualization
  dbsync:
    image: pecan/shiny-dbsync:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    depends_on:
      postgres:
        condition: service_healthy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.dbsync.rule=Host(`${TRAEFIK_HOST:-pecan.localhost}`) && PathPrefix(`/dbsync/`)"
      - "traefik.http.routers.dbsync.middlewares=dbsync-stripprefix"
      - "traefik.http.middlewares.dbsync-stripprefix.stripprefix.prefixes=/monitor"
    healthcheck:
      test: "curl --silent --fail http://localhost/dbsync/ > /dev/null || exit 1"
      interval: 10s
      timeout: 5s
      retries: 5

  # ----------------------------------------------------------------------
  # PEcAn API
  # ----------------------------------------------------------------------
  api:
    user: "${UID:-1001}:${GID:-1001}"
    image: pecan/api:${PECAN_VERSION:-latest}
    restart: unless-stopped
    networks:
      - pecan
    environment:
      - PGHOST=${PGHOST:-postgres}
      - HOST_ONLY=${HOST_ONLY:-FALSE}
      - AUTH_REQ=${AUTH_REQ:-FALSE}
      - RABBITMQ_URI=${RABBITMQ_URI:-amqp://guest:guest@rabbitmq/%2F}
      - DATA_DIR=${DATA_DIR:-/data/}
      - DBFILES_DIR=${DBFILES_DIR:-/data/dbfiles/}
      - SECRET_KEY_BASE=${BETY_SECRET_KEY:-thisisnotasecret}
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.api.rule=Host(`${TRAEFIK_HOST:-pecan.localhost}`) && PathPrefix(`/api/`)"
      - "traefik.http.services.api.loadbalancer.server.port=8000"
    depends_on:
      postgres:
        condition: service_healthy
    volumes:
      - pecan:/data/
    healthcheck:
      test: "curl --silent --fail http://localhost/api/ping > /dev/null || exit 1"
      interval: 10s
      timeout: 5s
      retries: 5

# ----------------------------------------------------------------------
# Name of network to be used by all containers
# ----------------------------------------------------------------------
networks:
  pecan:

# ----------------------------------------------------------------------
# Volumes used by the PEcAn stack. These volumes are used to make sure
# we have persistent data. You can use add the commented section to your
# docker-compose.override.yml to have the docker volumes placed at a
# specific location.
# ----------------------------------------------------------------------
volumes:
  traefik:
  postgres:
  bety:
  rabbitmq:
  pecan:
  rstudio: