docker-compose-keto.yml

version: "3.3"

services:
  keto-migrate:
    image: "oryd/keto:v0.5.6"
    container_name: "hydra-keto-migrate"
    links:
      - postgresd_keto:postgresd_keto
    environment:
      - LOG_LEVEL=debug
    networks:
      - traefik-tower
    command:
      migrate sql postgres://keto:password@postgresd_keto:5432/keto
    restart: on-failure

  hydra-migrate:
    image: "oryd/hydra:v1.7.4"
    container_name: "hydra-migrate"
    command: "migrate sql --yes postgres://hydra:secret@postgresd:5432/hydra?sslmode=disable"
    networks:
      - traefik-tower

  hydra:
    image: "oryd/hydra:v1.7.4"
    container_name: "hydra"
    command: "serve all --skip-tls-verify --dangerous-force-http"
    links:
      - postgresd:postgresd
    volumes:
      - "./docker-config/hydra/config.yaml:/.hydra.yml"
      - hydravolume:/root
    networks:
      - traefik-tower
    ports:
      - "4444:4444"
      - "4445:4445"
    environment:
      - LOG_LEVEL=info
      - SYSTEM_SECRET=system-secret-pwd
      - FORCE_ROOT_CLIENT_CREDENTIALS=admin:demo-password
      - ACCESS_TOKEN_LIFESPAN=access_token_lifespan
      - ID_TOKEN_LIFESPAN=id_token_lifespan
      - AUTHORIZE_CODE_LIFESPAN=authorize_code_lifespan
    restart: unless-stopped

  postgresd:
    container_name: "postgresd"
    image: postgres:9.6
    ports:
      - "15432:5432"
    networks:
      - traefik-tower
    volumes:
      - hydrapostgresd:/var/lib/postgresql/data
    environment:
      - POSTGRES_USER=hydra
      - POSTGRES_PASSWORD=secret
      - POSTGRES_DB=hydra

  postgresd_keto:
    container_name: "postgresd_keto"
    image: postgres:9.6
    ports:
      - "25432:5432"
    networks:
      - traefik-tower
    volumes:
      - hydrapostgresdketo:/var/lib/postgresql/data
    environment:
      - POSTGRES_USER=keto
      - POSTGRES_PASSWORD=password
      - POSTGRES_DB=keto

  keto:
    image: "oryd/keto:v0.5.6"
    container_name: "hydra-keto"
    command: "serve --config /.keto/config.yaml"
    depends_on:
      - keto-migrate
    links:
      - postgresd_keto:postgresd_keto
    ports:
      - "4466:4466"
    environment:
      - dsn=postgres://keto:password@postgresd_keto:5432/keto
    volumes:
      - "./docker-config/keto/config.yaml:/.keto/config.yaml:rw"
    networks:
      - traefik-tower

networks:
  traefik-tower:

volumes:
  hydravolume:
    driver: local
  hydrapostgresd:
    driver: local
  hydrapostgresdketo:
    driver: local