From df670aef05b36fed0c1ffe601894205d6001f486 Mon Sep 17 00:00:00 2001 From: Paul-Christian Volkmer Date: Fri, 28 Nov 2025 11:51:32 +0100 Subject: chore: cleanup dev settings and examples (#200) --- examples/deploy/docker-compose.yaml | 60 +++++++++++++++++++++++++++++++++++++ examples/deploy/env-sample.env | 47 +++++++++++++++++++++++++++++ 2 files changed, 107 insertions(+) create mode 100644 examples/deploy/docker-compose.yaml create mode 100644 examples/deploy/env-sample.env (limited to 'examples/deploy') diff --git a/examples/deploy/docker-compose.yaml b/examples/deploy/docker-compose.yaml new file mode 100644 index 0000000..754bb23 --- /dev/null +++ b/examples/deploy/docker-compose.yaml @@ -0,0 +1,60 @@ + + +services: + dnpm-etl-processor: + image: ghcr.io/ccc-mf/etl-processor:latest + environment: + LOGGING_LEVEL_DEV: ${DNPM_LOG_LEVEL:-INFO} + SPRING_KAFKA_SECURITY_PROTOCOL: ${DNPM_KAFKA_SECURITY_PROTOCOL:-SSL} + SPRING_KAFKA_SSL_TRUST-STORE-TYPE: PKCS12 + SPRING_KAFKA_SSL_TRUST-STORE-LOCATION: /opt/dnpm-processor/ssl/truststore.jks + SPRING_KAFKA_SSL_TRUST-STORE-PASSWORD: ${KAFKA_TRUST_STORE_PASSWORD} + SPRING_KAFKA_SSL_KEY-STORE-TYPE: PKCS12 + SPRING_KAFKA_SSL_KEY-STORE-LOCATION: /opt/dnpm-processor/ssl/keystore.jks + SPRING_KAFKA_SSL_KEY-STORE-PASSWORD: ${DNPM_PROCESSOR_KEY_STORE_PASSWORD} + SPRING_KAFKA_PRODUCER_COMPRESSION-TYPE: gzip + APP_KAFKA_TOPIC: ${DNPM_KAFKA_TOPIC} + APP_KAFKA_SERVERS: ${KAFKA_BROKERS} + APP_KAFKA_GROUP_ID: ${DNPM_KAFKA_GROUP_ID} + APP_KAFKA_RESPONSE_TOPIC: ${DNPM_KAFKA_RESPONSE_TOPIC} + APP_REST_URI: ${DNPM_BWHC_REST_URI} + APP_REST_USERNAME: ${DNPM_BWHC_REST_USERNAME} + APP_REST_PASSWORD: ${DNPM_BWHC_REST_PASSWORD} + APP_REST_IS_BWHC: ${DNPM_BWHC_REST_IS_BWHC} + APP_SECURITY_ADMIN_USER: ${DNPM_ADMIN_USER} + APP_SECURITY_ADMIN_PASSWORD: ${DNPM_ADMIN_PASSWORD} + SPRING_DATASOURCE_URL: ${DNPM_DATASOURCE_URL} + SPRING_DATASOURCE_PASSWORD: ${DNPM_MARIADB_USER_PW} + SPRING_DATASOURCE_USERNAME: ${DNPM_MARIADB_DB} + APP_PSEUDONYMIZE_GPAS_SSLCALOCATION: /workspace/opt/dnpm-processor/ssl/mosaic.crt + APP_PSEUDONYMIZE_GPAS_PASSWORD: ${DNPM_PSEUDONYMIZE_GPAS_PASSWORD} + APP_PSEUDONYMIZE_GPAS_USERNAME: ${DNPM_PSEUDONYMIZE_GPAS_USERNAME} + APP_PSEUDONYMIZE_GPAS_TARGET: ${DNPM_PSEUDONYMIZE_GPAS_TARGET} + APP_PSEUDONYMIZE_GPAS_URI: ${DNPM_PSEUDONYMIZE_GPAS_URI} + APP_PSEUDONYMIZE_PREFIX: ${DNPM_APP_PSEUDONYMIZE_PREFIX} + APP_PSEUDONYMIZER: ${DNPM_PSEUDONYMIZE_GENERATOR} + volumes: + - /etc/localtime:/etc/localtime:ro + - /etc/timezone:/etc/timezone:ro + #- ${DNPM_TO_SSL_KEYSTORE_LOCATION}:/workspace/opt/dnpm-processor/ssl/keystore.jks:ro + #- ${KAFKA_TRUST_STORE_LOCATION}:/workspace/opt/dnpm-processor/ssl/truststore.jks:ro + #- ${DNPM_PSEUDONYMIZE_GPAS_SSLCALOCATION}:/workspace/opt/dnpm-processor/ssl/mosaic.crt + + depends_on: + - dnpm-monitor-db + ports: + - "${DNPM_MONITORING_HTTP_PORT:-8080}:8080" + + # todo add volume + dnpm-monitor-db: + image: mariadb:10 + environment: + MARIADB_DATABASE: ${DNPM_MARIADB_DB} + MARIADB_USER: ${DNPM_MARIADB_USER} + MARIADB_PASSWORD: ${DNPM_MARIADB_USER_PW} + MARIADB_ROOT_PASSWORD: ${DNPM_MARIADB_ROOT_PW} + expose: + - "3306" + + + diff --git a/examples/deploy/env-sample.env b/examples/deploy/env-sample.env new file mode 100644 index 0000000..4888474 --- /dev/null +++ b/examples/deploy/env-sample.env @@ -0,0 +1,47 @@ +# monitoring access port +DNPM_MONITORING_HTTP_PORT=8088 +DNPM_LOG_LEVEL=INFO + +# ADMIN USER CREDENTIALS +DNPM_ADMIN_USER=admin +DNPM_ADMIN_PASSWORD= + +# GPAS or BUILDIN +DNPM_PSEUDONYMIZE_GENERATOR=BUILDIN +DNPM_APP_PSEUDONYMIZE_PREFIX=ANONYM +DNPM_PSEUDONYMIZE_GPAS_URI= +DNPM_PSEUDONYMIZE_GPAS_TARGET= +DNPM_PSEUDONYMIZE_GPAS_USERNAME= +DNPM_PSEUDONYMIZE_GPAS_PASSWORD= + +# path to ca root cert if needed +DNPM_PSEUDONYMIZE_GPAS_SSLCALOCATION= + +DNPM_MARIADB_DB=dnpm_monitoring +DNPM_MARIADB_USER=$DNPM_MARIADB_DB +DNPM_MARIADB_USER_PW=MySuperSecurePassword111 +DNPM_MARIADB_ROOT_PW=MySuperDuperSecurePassword111 + +# monitoring data db +DNPM_DATASOURCE_URL=jdbc:mariadb://dnpm-monitor-db:3306/$DNPM_MARIADB_DB + +## TARGET SYSTEMS CONFIG +# in case of direct access to bwhc enter endpoint url here +DNPM_BWHC_REST_URI= +DNPM_BWHC_REST_USERNAME= +DNPM_BWHC_REST_PASSWORD= +DNPM_BWHC_REST_IS_BWHC=false + +# produce mtb files to this topic - values 'false' disabling kafka processing +DNPM_KAFKA_TOPIC=false +KAFKA_BROKERS=false +DNPM_KAFKA_SECURITY_PROTOCOL=PLAINTEXT + +# here we receive responses from bwhc +DNPM_KAFKA_RESPONSE_TOPIC=dnpm-response +DNPM_KAFKA_GROUP_ID=dnpm + +# SSL or PLAINTEXT +DNPM_PROCESSOR_KEY_STORE_PASSWORD= +DNPM_TO_SSL_KEYSTORE_LOCATION= + -- cgit v1.2.3