deploy.spryker-staging.yml

version: "0.1"

x-real-ip: &real-ip
    real-ip:
        from:
            - 10.0.0.0/8 # AWS VPC network
            - 103.21.244.0/22 # Cloudflare
            - 103.22.200.0/22 # Cloudflare
            - 103.31.4.0/22 # Cloudflare
            - 104.16.0.0/12 # Cloudflare
            - 108.162.192.0/18 # Cloudflare
            - 131.0.72.0/22 # Cloudflare
            - 141.101.64.0/18 # Cloudflare
            - 162.158.0.0/15 # Cloudflare
            - 172.64.0.0/13 # Cloudflare
            - 173.245.48.0/20 # Cloudflare
            - 188.114.96.0/20 # Cloudflare
            - 190.93.240.0/20 # Cloudflare
            - 197.234.240.0/22 # Cloudflare
            - 198.41.128.0/17 # Cloudflare
            - 2400:cb00::/32 # Cloudflare
            - 2606:4700::/32 # Cloudflare
            - 2803:f800::/32 # Cloudflare
            - 2405:b500::/32 # Cloudflare
            - 2405:8100::/32 # Cloudflare
            - 2c0f:f248::/32 # Cloudflare
            - 2a06:98c0::/29 # Cloudflare

x-frontend-auth: &frontend-auth
    <<: *real-ip
    auth:
        engine: basic
        users:
            - username: cloud
              password: cloud
        exclude:
            - '${ALLOWED_IP}' # AWS gateway
            - 185.60.20.0/24 # PayOne
            - 77.122.97.254/32 # Olena Krivtsova

namespace: spryker-cloud
tag: '1.0'

environment: docker.staging
image:
    tag: spryker/php:7.3
    environment:
      SPRYKER_HOOK_BEFORE_DEPLOY: "vendor/bin/install -r pre-deploy -vvv"
      SPRYKER_HOOK_AFTER_DEPLOY: "true"
      SPRYKER_HOOK_INSTALL: "vendor/bin/install -r production --no-ansi -vvv"
      SPRYKER_HOOK_DESTRUCTIVE_INSTALL: "vendor/bin/install -r destructive --no-ansi -vvv"
    php:
        enabled-extensions:
            - blackfire
            - newrelic

composer:
    mode: --no-dev
    autoload: --classmap-authoritative

assets:
    image: fholzer/nginx-brotli:v1.18.0
    mode: production
    compression:
        brotli:
            static: only
        gzip:
            static: true
            level: 5

regions:
    DE:
        services:
            mail:
                sender:
                    name: Spryker No-Reply
                    email: no-reply@staging.cloud.spryker.toys
            database:
                database: spryker_staging
                username: spryker
                password: secret

        stores:
            DE:
                services:
                    broker:
                        namespace: de_queue
                    key_value_store:
                        namespace: 1
                    search:
                        namespace: de_search
                    session:
                        namespace: 2
            AT:
                services:
                    broker:
                        namespace: at_queue
                    key_value_store:
                        namespace: 1
                    search:
                        namespace: at_search
                    session:
                        namespace: 2
            US:
                services:
                    broker:
                        namespace: us_queue
                    key_value_store:
                        namespace: 1
                    search:
                        namespace: us_search
                    session:
                        namespace: 2

groups:
    DE-1:
        region: DE
        applications:
            Yves:
                application: yves
                endpoints:
                    www.de.staging.cloud.spryker.toys:
                        store: DE
                        <<: *frontend-auth
                    de.staging.cloud.spryker.toys:
                        store: DE
                        <<: *frontend-auth
                    www.at.staging.cloud.spryker.toys:
                        store: AT
                        <<: *frontend-auth
                    at.staging.cloud.spryker.toys:
                        store: AT
                        <<: *frontend-auth
                    www.us.staging.cloud.spryker.toys:
                        store: US
                        <<: *frontend-auth
                    us.staging.cloud.spryker.toys:
                        store: US
                        <<: *frontend-auth
            Zed:
                application: zed
                endpoints:
                    zed.de.staging.cloud.spryker.toys:
                        store: DE
                    zed.at.staging.cloud.spryker.toys:
                        store: AT
                    zed.us.staging.cloud.spryker.toys:
                        store: US
            Glue:
                application: glue
                endpoints:
                    glue.de.staging.cloud.spryker.toys:
                        store: DE
                    glue.at.staging.cloud.spryker.toys:
                        store: AT
                    glue.us.staging.cloud.spryker.toys:
                        store: US
services:
    database:
        engine: mysql
        version: mariadb-10.4
        root:
            username: "root"
            password: "secret"
        endpoints:
            localhost:3306:
                protocol: tcp
    broker:
        engine: rabbitmq
        api:
            username: "spryker"
            password: "secret"
        endpoints:
            queue.staging.cloud.spryker.toys:
            localhost:5672:
                protocol: tcp
    session:
        engine: redis
    key_value_store:
        engine: redis
        endpoints:
            localhost:16379:
                protocol: tcp
    search:
        engine: elastic
        version: 7.6
        endpoints:
            localhost:9200:
                protocol: tcp
    scheduler:
        engine: jenkins
        endpoints:
            scheduler.staging.cloud.spryker.toys:
    mail_catcher:
        engine: mailhog
        endpoints:
            mail.staging.cloud.spryker.toys:

docker:

    blackfire:
        enabled: true

    ssl:
        enabled: true

    debug:
        enabled: false
        xdebug:
            enabled: false

    testing:
        store: DE

    mount:
        baked: