docker-compose.yml

version: "3.7"

services:
  db:
    container_name: ${PROJECT_NAME:-openimis}-db
    image: ghcr.io/openimis/openimis-pgsql:${DB_TAG:-develop}
    environment:
      - POSTGRES_PASSWORD=$PSQL_DB_PASSWORD
      - POSTGRES_DB=$PSQL_DB_NAME
      - POSTGRES_USER=$PSQL_DB_USER
    healthcheck:
      test: ['CMD', 'pg_isready', '-U', "$PSQL_DB_USER", '-d', "test_imis"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
    volumes:
      - database:/var/lib/postgresql/data
    restart: always
    ports:
      - 5432:5432
  db-mssql:
    container_name: ${PROJECT_NAME:-openimis}-mssql
    image: ghcr.io/openimis/openimis-mssql:${DB_TAG:-develop}
    restart: always
    user: root
    environment:
      - DB_PASSWORD=$MSSQL_DB_PASSWORD
      - SA_PASSWORD=$MSSQL_DB_PASSWORD
      - DB_NAME=$MSSQL_DB_NAME
      - DB_USER=$MSSQL_DB_USER
      - ACCEPT_EULA=Y
      - INIT_MODE=demo
    healthcheck:
      test: "bash /app/healthcheck.sh"
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 100s
    volumes:
      - database-mssql:/var/opt/mssql/data
    ports:
      - 1433:1433
  opensearch:
    image: opensearchproject/opensearch:3.8.0
    env_file:
      - ".env.openSearch"
    environment:
      - "discovery.type=single-node"
      - "cluster.name=${CLUSTER_NAME:-my_opensearch_local}"
      # opensearch-dashboards addresses the node as opensearch:9200.
      - "http.port=9200"
      - "plugins.security.ssl.http.enabled=${SLL_HTTP_ENABLED:-false}"
      - "plugins.security.disabled=${OPENSEARCH_SECURITY_DISABLED:-true}"
      # The demo installer runs before the node reads plugins.security.disabled
      # and aborts on an empty password. Set false when enabling security.
      - "DISABLE_INSTALL_DEMO_CONFIG=${OPENSEARCH_DISABLE_DEMO_CONFIG:-true}"
      - "OPENSEARCH_INITIAL_ADMIN_PASSWORD=${OPENSEARCH_PASSWORD}"
    # Loopback: with security disabled the cluster must not be reachable off-host.
    ports:
      - "127.0.0.1:${OPEN_SEARCH_HTTP_PORT:-9200}:9200"
    volumes:
      - "opensearch-data:/usr/share/opensearch/data"

  opensearch-dashboards:
    image: opensearchproject/opensearch-dashboards:3.8.0
    environment:
      - 'OPENSEARCH_HOSTS=["http://opensearch:9200"]'
      # Tracks the node: the plugin must be off here too when it is off there.
      - "DISABLE_SECURITY_DASHBOARDS_PLUGIN=${OPENSEARCH_SECURITY_DISABLED:-true}"
      # Must match the path the proxy serves Dashboards under.
      - "SERVER_BASEPATH=/opensearch"
      - "SERVER_REWRITEBASEPATH=true"
    depends_on:
      - opensearch
    # Not published: reachable only through the nginx that checks openIMIS rights.
    expose:
      - "5601"

volumes:
  database:
  database-mssql:
  opensearch-data: