30 lines
937 B
Text
30 lines
937 B
Text
---
|
|
services:
|
|
eidas-proxy:
|
|
image: docker.sunet.se/eidas-proxy:<%= @version %>
|
|
container_name: eidas-proxy
|
|
environment:
|
|
- PROXY_SERVICE_DOMAIN_PREFIX=https://<%= @service_name %>/eidas-ps
|
|
- SPRING_PROFILES_ACTIVE=<%= @country %>
|
|
- CERTNAME=<%= @server_fqdn %>_infra
|
|
- <%= @spring_config_param %>=<%= @proxy_directory %>/<%= @country %>/cfg/
|
|
- PROXY_SERVICE_COOKIEENCRYPTPW=<%= @proxy_service_cookie_encrypt_pw %>
|
|
<% if @use_hsm -%>
|
|
- PKCS11_PIN=<%= @pkcs11_pin %>
|
|
<% end -%>
|
|
|
|
hostname: <%= @server_fqdn %>
|
|
|
|
volumes:
|
|
- '/var/log/eidas-proxy:/var/log/eidas-proxy'
|
|
- '<%= @proxy_directory %>:<%= @proxy_directory %>'
|
|
- '/dev/log:/dev/log'
|
|
- '/etc/ssl:/etc/ssl'
|
|
<% if @use_hsm -%>
|
|
- '/etc/luna/cert:/usr/safenet/lunaclient/cert'
|
|
- '/etc/Chrystoki.conf.d:/etc/Chrystoki.conf.d'
|
|
<% end -%>
|
|
|
|
ports:
|
|
- "443:8443"
|
|
- "127.0.0.1:444:8444"
|