mysql8.docker-compose.yml

services:
  keycloak_db:
    image: postgres:9.6-alpine
    environment:
      POSTGRES_USER: keycloak
      POSTGRES_PASSWORD: keycloak
    volumes:
      - "./.docker/keycloak-db/data:/var/lib/postgresql/data"
  keycloak:
    build: ./keycloak-storage-provider
    image: "local/keycloak-sts-adapter:latest"
    environment:
      KEYCLOAK_PASSWORD: admin123
      KEYCLOAK_USER: admin
      POSTGRES_USER: keycloak
      POSTGRES_PASSWORD: keycloak
      POSTGRES_PORT_5432_TCP_ADDR: keycloak_db
    ports:
      - "8080:8080"
      - "8787:8787"
    volumes:
      - "./.docker/keycloak/data:/opt/jboss/keycloak/standalone/data"
    links:
      - keycloak_db
    networks:
      - sts_network
    command:
      - "-b"
      - "0.0.0.0"
      - "--debug"
  post_process:
    image: adorsys/keycloak-config-cli:v0.6.6-6.0.1
    depends_on:
      - keycloak
    networks:
      - sts_network
    volumes:
      - ./keycloak-config/docker:/tmp/keycloak-config-cli/configs
    environment:
      - KEYCLOAK_URL=http://keycloak:8080/auth
      - KEYCLOAK_ADMIN=admin
      - KEYCLOAK_ADMIN_PASSWORD=admin123
      - WAIT_TIME_IN_SECONDS=300
      - SPRING_PROFILES_INCLUDE=debug
    command: config-cli
  sts-db:
    image: mysql:8.0
    container_name: sts_db
    environment:
      MYSQL_ROOT_PASSWORD: db_root@123
      MYSQL_USER: db_user
      MYSQL_PASSWORD: db_user@123
      MYSQL_DATABASE: sts
    volumes:
      - "./.docker/sts-db/mysql8:/var/lib/mysql"
    ports:
      - 3306:3306
    networks:
      - sts_network
  sts:
    build: ./sts-example
    image: "local/sts-example:latest"
    depends_on:
      - sts-db
    networks:
      - sts_network
    environment:
      - SPRING_PROFILES_ACTIVE=mysql
      - SPRING_DATASOURCE_URL=jdbc:mysql://sts-db:3306/sts
      - logging_level_de_adorsys_sts_keyrotation_KeyRotationSchedule=debug
      - sts_secret-server-client_audience=moped-client
      - sts_secret-server-client_secret-server-uri=http://sts-secret-server:8080/secret-server/token-exchange
      - sts_secret-server-client_cache_enabled=true
      - sts_secret-server-client_cache_maximum-size=1000
      - sts_secret-server-client_cache_expire-after-access=10
      - sts_authservers_0_name=local keycloak
      - sts_authservers_0_iss-url=http://localhost:8080/auth/realms/moped
      - sts_authservers_0_jwks-url=http://keycloak:8080/auth/realms/moped/protocol/openid-connect/certs
      - sts_authservers_1_name=secret-server
      - sts_authservers_1_iss-url=http://sts-secret-server:8080
      - sts_authservers_1_jwks-url=http://sts-secret-server:8080/pop
      - sts_resource-server-management_resource-retriever_http-connect-timeout=10000
      - sts_resource-server-management_resource-retriever_http-read-timeout=60000
      - sts_resource-server-management_resource-retriever_http-size-limit=512000
      - sts_resource-server-management_resource-servers_0_audience=sts
      - sts_resource-server-management_resource-servers_0_jwks-url=http://localhost:8888/pop
      - sts_resource-server-management_resource-servers_1_audience=sts-service-component
      - sts_resource-server-management_resource-servers_1_jwks-url=http://sts-service-component:8887/pop
    ports:
      - "8888:8888"
  sts-service-component:
    build: ./sts-service-component-example
    image: "local/sts-service-component-example:latest"
    ports:
      - "8887:8887"
    environment:
      - sts_audience_name=sts-service-component
      - SPRING_PROFILES_ACTIVE=mysql
      - SPRING_DATASOURCE_URL=jdbc:mysql://sts-db:3306/sts
      - logging_level_de_adorsys_sts_keyrotation_KeyRotationSchedule=debug
      - sts_authservers_0_name=local keycloak
      - sts_authservers_0_iss-url=http://localhost:8080/auth/realms/moped
      - sts_authservers_0_jwks-url=http://keycloak:8080/auth/realms/moped/protocol/openid-connect/certs
    depends_on:
      - sts-db
    networks:
      - sts_network
  sts-service-component_2:
    build: ./sts-service-component-example
    image: "local/sts-service-component-example:latest"
    ports:
      - "8886:8887"
    environment:
      - sts_audience_name=sts-service-component
      - SPRING_PROFILES_ACTIVE=mysql
      - SPRING_DATASOURCE_URL=jdbc:mysql://sts-db:3306/sts
      - logging_level_de_adorsys_sts_keyrotation_KeyRotationSchedule=debug
      - sts_authservers_0_name=local keycloak
      - sts_authservers_0_iss-url=http://localhost:8080/auth/realms/moped
      - sts_authservers_0_jwks-url=http://keycloak:8080/auth/realms/moped/protocol/openid-connect/certs
    depends_on:
      - sts-db
    networks:
      - sts_network
  sts-client:
    build: ./sts-client-example
    image: local/sts-client-example:latest
    environment:
      - "NG_KEYCLOAK_AUTH_URL=http://localhost:8080/auth"
      - NG_KEYCLOAK_REALM=moped
      - NG_KEYCLOAK_CLIENT_ID=moped-client
      - NG_KEYCLOAK_SCOPE=sts-service-component
      - NG_SERVICE_URL=http://localhost:8887/helloworld
      - NG_SECRET_URL=http://localhost:8888/secret
    networks:
      - sts_network
    ports:
      - 8090:8080
  sts-secret-server:
    build: ./sts-secret-server
    image: "local/sts-secret-server:latest"
    depends_on:
      - sts-db
    networks:
      - sts_network
    environment:
      - SPRING_PROFILES_ACTIVE=mysql
      - SPRING_DATASOURCE_URL=jdbc:mysql://sts-db:3306/sts
      - sts_secret-server_secret-length=8192
      - sts_secret-server_endpoint=/secret-server/token-exchange
      - sts_secret-server_encryption_enabled=true
      - sts_secret-server_encryption_algorithm=A256GCMKW
      - sts_secret-server_encryption_encryption-method=A256GCM
      - sts_secret-server_encryption_key={"kty":"oct","k":"7KmFL-k9Sib6Llt4CZnwHfxjIfAgbAbOdwbemIGhO6U"}
      - sts_authservers_0_name=local keycloak
      - sts_authservers_0_iss-url=http://localhost:8080/auth/realms/moped
      - sts_authservers_0_jwks-url=http://keycloak:8080/auth/realms/moped/protocol/openid-connect/certs
      - sts_resource-server-management_resource-retriever_http-read-timeout=60000
      - sts_resource-server-management_resource-retriever_http-size-limit=512000
      - sts_resource-server-management_resource-retriever_cache_enabled=true
      - sts_resource-server-management_resource-retriever_cache_maximum-size=1000
      - sts_resource-server-management_resource-retriever_cache_expire-after-access=10
      - sts_resource-server-management_resourceservers_0_audience=moped-client
      - sts_resource-server-management_resourceservers_0_jwks-url=http://sts:8888/pop
      - sts_keymanagement_keystore_password=NiPae6AiOoto2Eeyaode9LeeOhngi4Ao
    ports:
      - "8885:8080"

networks:
  sts_network: