First full release

docker-compose.prod.yml

@@ -21,16 +21,23 @@ services:
       PGDATABASE: term_portal
       SMTP_HOST: "${SMTP_HOST:?}"
       SMTP_PORT: "${SMTP_PORT:?}"
-      SMTP_TLS_REJECT_UNAUTHORIZED: "${SMTP_TLS_REJECT_UNAUTHORIZED:?}"
+      SMTP_USER: "${SMTP_USER?}"
+      SMTP_PASSWORD: "${SMTP_PASSWORD?}"
+      SMTP_SECURE: "${SMTP_SECURE:?}"
+      SMTP_REQUIRE_TLS: "${SMTP_REQUIRE_TLS:?}"
+      SMTP_TLS_ALLOW_INVALID_CERTS: "${SMTP_TLS_ALLOW_INVALID_CERTS:?}"
       SMTP_FROM: "${SMTP_FROM:?}"
       ORIGIN: "${URL_ORIGIN:?}"
+      PORTAL_ADMIN_INITIAL_EMAIL: "${PORTAL_ADMIN_INITIAL_EMAIL:?}"
+      PORTAL_ADMIN_INITIAL_PASSWORD: "${PORTAL_ADMIN_INITIAL_PASSWORD:?}"
+      EXTRACTION_API_ORIGIN: "${EXTRACTION_API_ORIGIN:?}"
     volumes:
       - express-data:/usr/src/app/data_files
     ports:
       - "127.0.0.1:${EXPRESS_LISTEN_PORT:?}:3000"
 
   postgres:
-    image: postgres:15-alpine
+    image: postgres:15.1-alpine3.17
     restart: always
     environment:
       POSTGRES_PASSWORD: "${POSTGRES_ADMIN_PASSWORD:?}"
@@ -58,18 +65,18 @@ services:
     environment:
       - cluster.name=term-portal
       - node.name=node-1
-      # - bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
-      # - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM
+      - bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
+      - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM
       - "DISABLE_INSTALL_DEMO_CONFIG=true" # disables execution of install_demo_configuration.sh bundled with security plugin, which installs demo certificates and security configurations to OpenSearch
       - "DISABLE_SECURITY_PLUGIN=true" # disables security plugin entirely in OpenSearch by setting plugins.security.disabled: true in opensearch.yml
       - "discovery.type=single-node" # disables bootstrap checks that are enabled when network.host is set to a non-loopback address
-    # ulimits:
-    #   memlock:
-    #     soft: -1
-    #     hard: -1
-    #   nofile:
-    #     soft: 65536 # maximum number of open files for the OpenSearch user, set to at least 65536 on modern systems
-    #     hard: 65536
+    ulimits:
+      memlock:
+        soft: -1
+        hard: -1
+      nofile:
+        soft: 65536 # maximum number of open files for the OpenSearch user, set to at least 65536 on modern systems
+        hard: 65536
     volumes:
       - opensearch-data:/usr/share/opensearch/data
 
@@ -88,8 +95,10 @@ services:
       - "127.0.0.1:${OS_DASHBOARDS_LISTEN_PORT:?}:5601"
 
   concordancer:
-    # image: ghcr.io/clarinsi/rsdo-concordancer-api:v1.0.0
-    build: concordancer
+    # image: ghcr.io/clarinsi/rsdo-concordancer-api-term-portal:v1.0.3
+    build:
+      context: concordancer
+      dockerfile: Dockerfile.prod
     depends_on:
       - postgres
       - opensearch
@@ -106,7 +115,7 @@ services:
 
   # Disabled by default. Enable if needed.
   concordancer-manager:
-    image: ghcr.io/clarinsi/rsdo-concordancer-systemmanager:v1.0.0
+    image: ghcr.io/clarinsi/rsdo-concordancer-systemmanager:v1.0.3
     profiles:
       - concordancer-manager
     depends_on:
@@ -137,7 +146,11 @@ services:
       PGDATABASE: term_portal
       SMTP_HOST: "${SMTP_HOST:?}"
       SMTP_PORT: "${SMTP_PORT:?}"
-      SMTP_TLS_REJECT_UNAUTHORIZED: "${SMTP_TLS_REJECT_UNAUTHORIZED:?}"
+      SMTP_USER: "${SMTP_USER?}"
+      SMTP_PASSWORD: "${SMTP_PASSWORD?}"
+      SMTP_SECURE: "${SMTP_SECURE:?}"
+      SMTP_REQUIRE_TLS: "${SMTP_REQUIRE_TLS:?}"
+      SMTP_TLS_ALLOW_INVALID_CERTS: "${SMTP_TLS_ALLOW_INVALID_CERTS:?}"
       SMTP_FROM: "${SMTP_FROM:?}"
     entrypoint: ["scheduled/entrypoint.sh"]
     command: ["crond", "-f", "-l", "2"]