ansible-playbook-gcore-enabling-services/roles/resource-manager/templates/docker-compose.yml.j2

version: '3.6'

networks:
  {{ resource_manager_docker_network }}:
  {{ resource_manager_haproxy_public_net }}:
    external: true

secrets:
  {{ service_prefix }}-ghn-config-{{ scope_name }}:
    external: true
  {{ service_prefix }}-jndi-config-{{ scope_name }}:
    external: true  
  {{ service_prefix }}-server-config-{{ scope_name }}:
    external: true
  gcube-legacy-security-key:
    external: true
{% for item in gcube_security_keys %}
  {{ item.name }}:
    external: true
{% endfor %}

volumes:
  gcore_persisted:
    driver: local
    driver_opts:
      type: nfs4
      # o: "nfsvers=4,addr=192.168.1.222,rw,nolock,soft"
      o: "nfsvers=4,addr={{ nfs_server_ip }},rw"
      device: ":/nfs_{{ service_prefix | replace("-", "_") }}_{{ scope_name }}"

services:
  {{ resource_manager_docker_service_server_name }}:
    image: {{ resource_manager_docker_server_image }}
    networks:
      - {{ resource_manager_docker_network }}
      - {{ resource_manager_haproxy_public_net }}
    volumes:
      - gcore_persisted:/gcube-data
    environment:
      - NFS_GCORE_PATH=/gcube-data/states/{{ gcore_host }}
    secrets:
      - source: {{ service_prefix }}-ghn-config-{{ scope_name }}
        target: /home/gcube/gCore/config/GHNConfig.xml
        uid: "333"
        gid: "333"
        mode: 0440
      - source: {{ service_prefix }}-jndi-config-{{ scope_name }}
        target: /home/gcube/gCore/{{ config_dir }}/jndi-config.xml
        uid: "333"
        gid: "333"
        mode: 0444
      - source: {{ service_prefix }}-server-config-{{ scope_name }}
        target: /home/gcube/gCore/etc/globus_wsrf_core/server-config.wsdd
        uid: "333"
        gid: "333"
        mode: 0440
      - source: gcube-legacy-security-key
        target: /home/gcube/gCore/config/symm.key
        uid: "333"
        gid: "333"
        mode: 0440
{% for item in gcube_security_keys %}
      - source: {{ item.name }}
        target: /home/gcube/gCore/config/{{ item.name }}
        uid: "333"
        gid: "333"
        mode: 0440
{% endfor %}
    deploy:
      mode: replicated
      replicas: 1
      endpoint_mode: dnsrr
      placement:
        constraints: [node.role == worker]
      restart_policy:
        condition: none
        delay: 5s
        max_attempts: 5
        window: 120s
    logging:
      driver: 'journald'