skilja/validationservice repository overview

docker pull skilja/validationservice:<Major>.<Minor>

services:
  validationservice:
    build:
      image: skilja/validationservice:6.1.1
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.validationservice.rule=Host(`validationservice.docker.local`)"    # routes requests to this url (be aware of certificates and host registration)
      - "traefik.http.services.validationservice.loadbalancer.server.port=8080"                 # we want this service only reachable via https (traefik does SSL offloading)
      - "traefik.http.routers.validationservice.entrypoints=websecure"                          # binding to websecure port
      - "traefik.http.routers.validationservice.tls=true"
    env_file:
      ./validationservice.env
    extra_hosts:
      # Important! The design time host needs to be found from inside the container. If the design time machine has no full qualified name,
      # and is only reachable by its host name, the dns of the container only finds it, when it's configured here.
      - "platform-server:192.168.xx.xx"
    deploy:
      replicas: 3 # the number of instances of the validation service
    networks:
      - web

  traefik:
    image: traefik:v3.1
    command:
      - "--configFile=/etc/traefik/traefik.yml" # static config file
    ports:
      - "8081:8081"   # web endpoint
      - "8181:8181"   # web secure
      - "8080:8080"   # traefik endpoint
      - "8082:8082"   # metrics entry point
      - "9100:9100"   # prometheus endpoint
    volumes:
      - type: bind
        source: ./traefik.yml
        target: /etc/traefik/traefik.yml
      - "/var/run/docker.sock:/var/run/docker.sock"
      - ./certs:/etc/traefik/certs    # ssl certificates - with these the load balancer exposes the service endpoints
      - ./traefik:/config             # dynamic config files
    networks:
      - web
    labels:
      - "traefik.http.routers.traefik.rule=Host(`traefik.docker.local`)"     # routes requests to this url (be aware of certificates and host registration)
      - "traefik.http.services.traefik.loadbalancer.server.port=8080"

# Prometheus is providing a metrics user interface with graphs
# Detailed configuration is done in the prometheus/prometheus.yml
  prometheus:
    image: prom/prometheus
    volumes:
      - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
    command:
      - "--config.file=/etc/prometheus/prometheus.yml"
    ports:
      - "9090:9090"
    networks:
      - web

networks:
  web:
    driver: bridge

# the service endpoint is 8080 by default, you can change it here if necessary
# VCPV_SERVICEENDPOINT=http://+:8047

# The database server configuration - the database types are: SQLServer, PostgreSQL, OracleDB
VCPV_DATABASESERVER=mySqlServer
VCPV_DATABASETYPE=SQLServer
VCPV_DATABASENAME=Validationservice4docker
VCPV_USEINTEGRATEDSECURITY=false
VCPV_SQLUSER=sa
VCPV_SQLPASSWORD=saPassword
VCPV_TRUSTSERVERCERTIFICATE=true
VCPV_USESSL=false

# If the ValidationDesigner requires authentication for review configurations that are not linked to a process.
# The default is true
VCPV_REQUIREAUTHFORDESIGNER=false

# The url of the process designer application, and you can give it a name
VCPV_PLATFORMDESIGNERURL=https://vm-sam1/ProcessEditor

# The client id for the authentication server of the designer
VCPV_CLIENTID=ValidationService
# The name of the log file inside the container stored in the /app/Log folder
VCPV_LOGFILE=_validationService.log
# The available log levels are: Verbose, Debug, Information, Warning, Error
VCPV_LOGLEVEL=Debug

# Use forwarded headers in the ValidationService when it runs behind ssl offloading, the default is false.
VCPV_USEFORWARDEDHEADERS=true

# If you use self signed certificates, e.g. for your ProcessEditor, you need to register the thumbprints of the certificates here.
# To register multiple certificates, you can write them comma-separated.
VCPV_TRUSTEDCERTIFICATES=7e37487bb806a88254a393a1952167b13c86c90f

# By default dataprotection is secured with a default certificate. To use a custom one please give the path to the certificate here.
# Please make sure to use the same certificate for all ValidationServices that run behind the same load balancer or that access the same database.
# Otherwise, authentication will not persist across multiple instances of the service.
# VCPV_DATAPROTECTIONCERTIFICATEPATH=/app/certificates/default-cert.pfx
# VCPV_DATAPROTECTIONCERTIFICATEPASSWORD=

entryPoints:
  web:
    address: ":8081"
  websecure:
    address: ":8181"
  metrics:
    address: ":8082"

# Configures the forwarding of the header contents.
# Necessary as ssl offloading changes the schema of the request and calls
# to the oidc auth server can then lead to the wrong return url.
http:
  middlewares:
    add-headers:
      headers:
        customRequestHeaders:
          X-Forwarded-Proto: "https"

metrics:
  prometheus:
    entrypoint: "metrics"

api:
  dashboard: true
  insecure: true

providers:
  docker:
    exposedByDefault: false
  file:
    directory: /config # Reference to the dynamic config file
    watch: true

## Sample tls configuration file

This is a sample for tls configuration file

```yml
tls:
  stores:
    default:
      defaultCertificate:
        certFile: /etc/traefik/certs/traefik.crt
        keyFile: /etc/traefik/certs/traefik.key
  certificates:
    - certFile: /etc/traefik/certs/traefik.crt
      keyFile: /etc/traefik/certs/traefik.key

global:
  scrape_interval: 15s

scrape_configs:
  - job_name: 'traefik'
    static_configs:
      - targets: ['traefik:8082']  # Target the metrics endpoint defined in Traefik