saml-demoapp-java/compose.yaml at main · Identicum/saml-demoapp-java · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
services:
    idp:
        container_name: idp
        image: ghcr.io/identicum/keycloak:26.1
        restart: always
        pull_policy: always
        environment:
            KEYCLOAK_ADMIN: admin
            KEYCLOAK_ADMIN_PASSWORD: admin
        ports:
            - 8080:8080

    idp_setup:
        container_name: idp_setup
        image: ghcr.io/identicum/sherpa-deploy:latest
        pull_policy: always
        volumes:
            - ./keycloak/terraform-objects/:/usr/home/
        command: "./apply.sh"
        depends_on:
            idp:
                condition: service_healthy

    demoapp:
        container_name: demoapp
        image: ghcr.io/identicum/saml-demoapp-java:latest
        restart: always
        # pull_policy: always
        environment:
            - ONELOGIN_SAML2_SP_ENTITYID=http://demoapp1/
            - ONELOGIN_SAML2_SP_ASSERTION_CONSUMER_SERVICE_URL=http://demoapp1/acs.jsp
            - ONELOGIN_SAML2_SP_SINGLE_LOGOUT_SERVICE_URL=http://demoapp1/sls.jsp
            - ONELOGIN_SAML2_IDP_ENTITYID=http://idp:8080/realms/demorealm/protocol/saml/descriptor
            - ONELOGIN_SAML2_SECURITY_AUTHNREQUEST_SIGNED=false
            - ONELOGIN_SAML2_SECURITY_LOGOUTREQUEST_SIGNED=false
            - ONELOGIN_SAML2_SECURITY_LOGOUTRESPONSE_SIGNED=true
            - ONELOGIN_SAML2_SECURITY_WANT_MESSAGES_SIGNED=true
            - ONELOGIN_SAML2_SECURITY_WANT_ASSERTIONS_SIGNED=true
            - ONELOGIN_SAML2_SECURITY_WANT_ASSERTIONS_ENCRYPTED=true
            - ONELOGIN_SAML2_SECURITY_SIGNATURE_ALGORITHM=http://www.w3.org/2000/09/xmldsig#rsa-sha1
            - ONELOGIN_SAML2_SECURITY_DIGEST_ALGORITHM=http://www.w3.org/2000/09/xmldsig#rsa-sha1
        volumes:
            - ./src/main/webapp/acs.jsp:/usr/local/tomcat/webapps/ROOT/acs.jsp
            - ./src/main/webapp/attrs.jsp:/usr/local/tomcat/webapps/ROOT/attrs.jsp
        depends_on:
            idp_setup:
                condition: service_completed_successfully
    nginx:
        container_name: nginx
        image: ghcr.io/identicum/nginx:latest
        pull_policy: always
        restart: always
        ports:
            - 80:80
        volumes:
            - ./nginx/nginx.conf:/etc/nginx/nginx.conf
        depends_on:
            demoapp:
                condition: service_healthy