docker-compose.yml

version: "3.3"

services:
  data_init:
    image: i2incommon/midpoint:${tag:-4.4.1}
    command: >
        bash -c "
        chmod 777 /opt/mp-pw/ ;
        touch /opt/mp-pw/db_init_in_progress ;
        echo -e '#!/bin/sh\ntouch /opt/mp-pw/db_init' >/opt/db-init/000-start.sh ;
        echo -e '#!/bin/sh\necho DB structure init process has finished...\nrm -f /opt/mp-pw/db_init_in_progress /opt/mp-pw/db_init' > /opt/db-init/999-finish.sh ;
        /opt/midpoint/bin/midpoint.sh init-native
        "
    environment:
     - MP_INIT_CFG=/opt/mp-home
     - MP_INIT_DB_CONCAT=/opt/db-init/init.sql
     - MP_DB_PW=/opt/mp-pw/dbpassword
     - MP_PW_DEF=/opt/mp-pw/keystorepw
    volumes:
     - db_init:/opt/db-init
     - mp_pw:/opt/mp-pw
     - midpoint_home:/opt/mp-home

  midpoint_data:
    image: postgres:13-alpine
    command: >
        bash -c "
        rm -f /var/lib/postgresql/data/postmaster.pid ;
        while [ ! -s /opt/mp-pw/dbpassword -o -e /opt/mp-pw/init_in_progress ] ; do
         echo 'Waiting to the end of the init process...';
         sleep 1;
        done ;
        {
         sleep 2 ;
         if [ ! -e /opt/mp-pw/db_init -a -e /opt/mp-pw/db_init_in_progress ] ;
          then echo 'DB init did not start...' ;
          rm -f /opt/mp-pw/db_ini*;
          echo 'The lock files has been removed...';
         fi ;
        } &
        docker-entrypoint.sh postgres
        "
    user: "70:70"
    depends_on:
     - data_init
    environment:
     - POSTGRES_PASSWORD_FILE=/opt/mp-pw/dbpassword
     - POSTGRES_USER=midpoint
     - POSTGRES_INITDB_ARGS=--lc-collate=en_US.utf8 --lc-ctype=en_US.utf8
    ports:
     - 5432:5432
    networks:
     - net
    volumes:
     - midpoint_data:/var/lib/postgresql/data
     - db_init:/docker-entrypoint-initdb.d/
     - mp_pw:/opt/mp-pw

  midpoint_server:
    image: i2incommon/midpoint:${tag:-4.4.1}
    depends_on:
     - data_init
     - midpoint_data
    ports:
     - 8443:443
    environment:
     - ENV
     - USERTOKEN
     - MP_SET_midpoint_repository_jdbcUsername=midpoint
     - MP_SET_midpoint_repository_jdbcPassword_FILE=/opt/mp-pw/dbpassword
     - MP_SET_midpoint_repository_jdbcUrl=jdbc:postgresql://midpoint_data:5432/midpoint
     - MP_SET_midpoint_keystore_keyStorePassword_FILE=/opt/mp-pw/keystorepw
     - MP_SET_server_tomcat_ajp_enabled=true
     - MP_SET_server_tomcat_ajp_port=9090
     - MP_SET_server_tomcat_ajp_secret=s3cr3t
     - MP_SET_logging_path=/tmp/logtomcat
     - MP_UNSET_midpoint_repository_hibernateHbm2ddl=1
     - MP_NO_ENV_COMPAT=1
     - MP_MEM_MAX
     - MP_MEM_INIT
     - MP_JAVA_OPTS
     - TIER_BEACON_OPT_OUT
     - TIMEZONE
    networks:
      net:
        aliases:
         - midpoint-server
    secrets:
     - mp_host-key.pem
    volumes:
     - midpoint_home:/opt/midpoint/var
     - type: bind
       source: ./configs-and-secrets/midpoint/httpd/host-cert.pem
       target: /etc/pki/tls/certs/host-cert.pem
     - type: bind
       source: ./configs-and-secrets/midpoint/httpd/host-cert.pem
       target: /etc/pki/tls/certs/cachain.pem
     - mp_pw:/opt/mp-pw

networks:
  net:
    driver: bridge

secrets:
  mp_host-key.pem:
    file: ./configs-and-secrets/midpoint/httpd/host-key.pem
    
volumes:
  db_init:
  mp_pw:
  midpoint_data:
  midpoint_home: