docker-compose.yml

services:
  fides:
    container_name: fides
    image: ethyca/fides:local
    command: uvicorn --host 0.0.0.0 --port 8080 --reload --reload-dir src --reload-dir data --reload-include='*.yml' fides.api.main:app
    healthcheck:
      test: ["CMD", "curl", "-f", "http://0.0.0.0:8080/health"]
      interval: 20s
      timeout: 5s
      retries: 10
    ports:
      - "8080:8080"
    depends_on:
      fides-db:
        condition: service_healthy
      redis:
        condition: service_started
    expose:
      - 8080
    env_file:
      - .env
    environment:
      FIDES__CONFIG_PATH: ${FIDES__CONFIG_PATH:-/fides/.fides/fides.toml}
      FIDES__CLI__ANALYTICS_ID: ${FIDES__CLI__ANALYTICS_ID-}
      FIDES__CLI__SERVER_HOST: "fides"
      FIDES__CLI__SERVER_PORT: "8080"
      FIDES__DATABASE__SERVER: "fides-db"
      FIDES__DEV_MODE: "True"
      FIDES__LOGGING__COLORIZE: "True"
      FIDES__USER__ANALYTICS_OPT_OUT: "True"
      FIDES__SECURITY__BASTION_SERVER_HOST: ${FIDES__SECURITY__BASTION_SERVER_HOST-}
      FIDES__SECURITY__BASTION_SERVER_SSH_USERNAME: ${FIDES__SECURITY__BASTION_SERVER_SSH_USERNAME-}
      FIDES__SECURITY__BASTION_SERVER_SSH_PRIVATE_KEY: ${FIDES__SECURITY__BASTION_SERVER_SSH_PRIVATE_KEY-}
      VAULT_ADDR: ${VAULT_ADDR-}
      VAULT_NAMESPACE: ${VAULT_NAMESPACE-}
      VAULT_TOKEN: ${VAULT_TOKEN-}
    volumes:
      - type: bind
        source: .
        target: /fides
        read_only: False

  fides-ui:
    image: ethyca/fides:local-ui
    command: npm run dev-admin-ui
    expose:
      - 3000
    ports:
      - "3000:3000"
    volumes:
      - type: bind
        source: .
        target: /fides
        read_only: False
      # do not volume mount over the node_modules
      - /fides/clients/node_modules
      - /fides/clients/admin-ui/node_modules
    environment:
      - NEXT_PUBLIC_FIDESCTL_API_SERVER=http://fides:8080

  fides-pc:
    image: ethyca/fides:local-pc
    command: npm run dev-pc
    expose:
      - 3001
    ports:
      - "3001:3001"
    volumes:
      - type: bind
        source: .
        target: /fides
        read_only: False
      # do not volume mount over the node_modules
      - /fides/clients/node_modules
      - /fides/clients/privacy-center/node_modules

  fides-db:
    image: postgres:12
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 15s
      timeout: 5s
      retries: 5
    volumes:
      - postgres:/var/lib/postgresql/data
    expose:
      - 5432
    ports:
      - "5432:5432"
    environment:
      POSTGRES_USER: "postgres"
      POSTGRES_PASSWORD: "fides"
      POSTGRES_DB: "fides"
    deploy:
      placement:
        constraints:
          - node.labels.fides.app-db-data == true

  docs:
    build:
      context: .
      dockerfile: docs/fides/Dockerfile
    volumes:
      - ./docs/fides:/docs
      - ./:/fides
    expose:
      - 8000
    ports:
      - "8000:8000"
    environment:
      FIDES__DEV_MODE: True
      FIDES__CLI__ANALYTICS_ID: ${FIDES__CLI__ANALYTICS_ID-}

      # Required security env vars
      FIDES__SECURITY__APP_ENCRYPTION_KEY: OLMkv91j8DHiDAULnK5Lxx3kSCov30b3
      FIDES__SECURITY__OAUTH_ROOT_CLIENT_ID: fidesadmin
      FIDES__SECURITY__OAUTH_ROOT_CLIENT_SECRET: fidesadminsecret
      FIDES__SECURITY__DRP_JWT_SECRET: secret

  worker:
    image: ethyca/fides:local
    command: fides worker
    depends_on:
      redis:
        condition: service_started
    restart: always
    environment:
      FIDES__CONFIG_PATH: ${FIDES__CONFIG_PATH:-/fides/.fides/fides.toml}
      FIDES__LOGGING__COLORIZE: "True"
      FIDES__USER__ANALYTICS_OPT_OUT: "True"
    volumes:
      - type: bind
        source: ./
        target: /fides
        read_only: False
      - /fides/src/fides.egg-info

  redis:
    image: "redis:6.2.5-alpine"
    # AUTH option #1: no authentication at all
    # command: redis-server
    # AUTH option #2: require password
    command: redis-server --requirepass redispassword
    # AUTH option #3: Redis ACL defined in redis.conf
    # command: redis-server /usr/local/etc/redis/redis.conf
    expose:
      - 6379
    ports:
      - "0.0.0.0:6379:6379"
    volumes:
      # Mount a redis.conf file for configuration
      # NOTE: Only used by "AUTH option #3" above!
      - type: bind
        source: ./docker/redis
        target: /usr/local/etc/redis
        read_only: False

volumes:
  postgres: null

networks:
  fides_network: