docker-compose.yml

services:
  next-app:
    container_name: next-app
    build:
      context: src/client/
      dockerfile: web.Dockerfile

    environment:
      NBS_API_BASE_URL: http://api:80
      AUTH_HOST: http://localhost:7071
      CLIENT_BASE_PATH: /manage-your-appointments

    volumes:
      - ./src/client/src:/app/src
      - ./src/client/public:/app/public
    restart: always
    ports:
      - 3000:3000

  api:
    container_name: api
    build:
      context: src/api/
      dockerfile: api.Dockerfile
    ports:
      - 7071:80
    environment:
      - AzureWebJobsStorage="UseDevelopmentStorage=true"
      - AzureWebJobs.NotifyUserRolesChanged.Disabled=true
      - AzureWebJobs.NotifyBookingMade.Disabled=true
      - AzureWebJobs.NotifyBookingRescheduled.Disabled=true
      - AzureWebJobs.NotifyBookingCancelled.Disabled = true
      - AzureWebJobs.SendBookingReminders.Disabled=true
      - AzureWebJobs.NotifyBookingReminder.Disabled=true
      - AzureWebJobs.RemoveUnconfirmedProvisionalBookings.Disabled=true
      - FUNCTIONS_WORKER_RUNTIME=dotnet-isolated
      - COSMOS_ENDPOINT=${COSMOS_ENDPOINT:-https://host.docker.internal:8081}
      - COSMOS_TOKEN=${COSMOS_TOKEN:-C2y6yDjf5/R+ob0N8A7Cgv30VRDJIWEHLM+4QDU5DE2nQ9nDuVTqobD4b8mGGyPMbIZnqyMsEcaGQy67XIw/Jw==}
      - COSMOS_IGNORE_SSL_CERT=true
      - LEASE_MANAGER_CONNECTION=local
      - AuthProvider_Issuer=http://oidc-server
      - AuthProvider_AuthorizeUri=http://localhost:8020/connect/authorize
      - AuthProvider_TokenUri=http://oidc-server/connect/token
      - AuthProvider_JwksUri=http://oidc-server/.well-known/openid-configuration/jwks
      - AuthProvider_ChallengePhrase=ThisIsntRandomButItNeedsToBe43CharactersLong
      - AuthProvider_ClientId=nhs-appts-local
      - AuthProvider_ReturnUri=http://localhost:7071/api/auth-return
      - AuthProvider_ClientCodeExchangeUri=http://localhost:3000/manage-your-appointments/auth/set-cookie
      - Notifications_Provider=local
      - BookingRemindersCronSchedule=0 0 8 * * *
      - UnconfirmedProvisionalBookingsCronSchedule=*/5 * * * *
      - SPLUNK_HOST_URL=http://splunk:8088/services/collector/raw
      - SPLUNK_HEC_TOKEN=e2c421cf-9228-4ab2-a6e8-877741df569a

  splunk:
    image: splunk/splunk:latest
    container_name: splunk
    environment:
      - SPLUNK_START_ARGS=--accept-license
      - SPLUNK_PASSWORD=Password1!
      - SPLUNK_HEC_SSL=false
    ports:
      - "8000:8000" # Splunk Web UI
      - "8088:8088" # Splunk HEC
    volumes:
      - splunk-data:/opt/splunk/var

  oidc-server:
    image: soluto/oidc-server-mock:latest
    ports:
      - "8010:443"
      - "8020:80"
    environment:
      ASPNETCORE_ENVIRONMENT: Development
      ASPNETCORE_URLS: https://+:443;http://+80
      ASPNETCORE_HTTPS_PORT: 8010
      ASPNETCORE_Kestrel__Certificates__Default__Password: password
      ASPNETCORE_Kestrel__Certificates__Default__Path: /https/aspnetapp.pfx
      AUTHENTICATION:ISSUER: https://localhost:8010
      SERVER_OPTIONS_INLINE: |
        {
          "Authentication": {
            "CookieSameSiteMode": "Lax",
            "CheckSessionCookieSameSiteMode": "Lax"
          }
        }
      USERS_CONFIGURATION_PATH: /tmp/config/users.json
      CLIENTS_CONFIGURATION_PATH: /tmp/config/config.json

    volumes:
      - ./mock-oidc:/tmp/config:ro
      - ${PFX_CERT_PATH:-~/.aspnet/https}:/https:ro

volumes:
  splunk-data: