docker-compose.yml

services:
  next-app:
    container_name: next-app
    build:
      context: src/client/
      dockerfile: web.Dockerfile

    environment:
      NBS_API_BASE_URL: http://api:80
      AUTH_HOST: http://localhost:7071
      CLIENT_BASE_PATH: /manage-your-appointments
      BUILD_NUMBER: ${BUILD_NUMBER:-local}
      OTEL_EXPORTER_OTLP_ENDPOINT: http://splunk-otel-collector:4318
      OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: http://splunk-otel-collector:4318/v1/traces
      OTEL_EXPORTER_OTLP_METRICS_ENDPOINT: http://splunk-otel-collector:4318/v1/metrics
      APP_INSIGHTS_CONNECTION_STRING: InstrumentationKey=00000000-0000-0000-0000-000000000000
      TZ: UTC

    volumes:
      - ./src/client/src:/app/src
      - ./src/client/public:/app/public
    restart: always
    ports:
      - 3000:3000

  azurite:
    image: mcr.microsoft.com/azure-storage/azurite
    container_name: azurite
    ports:
      - "10000:10000"
      - "10001:10001"
      - "10002:10002"

  api:
    container_name: api
    build:
      context: src/api/
      dockerfile: api.Dockerfile
    ports:
      - 7071:80
    environment:
      - AzureWebJobsStorage="UseDevelopmentStorage=true"
      - AzureWebJobs.NotifyUserRolesChanged.Disabled=true
      - AzureWebJobs.NotifyOktaUserRolesChanged.Disabled=true
      - AzureWebJobs.NotifyBookingMade.Disabled=true
      - AzureWebJobs.NotifyBookingRescheduled.Disabled=true
      - AzureWebJobs.NotifyBookingCancelled.Disabled=true
      - AzureWebJobs.NotifyBookingAutoCancelled.Disabled=true
      - AzureWebJobs.SendBookingReminders.Disabled=true
      - AzureWebJobs.NotifyBookingReminder.Disabled=true
      - AzureWebJobs.DailySiteSummaryAggregation.Disabled=true
      - AzureWebJobs.AggregateDailySiteSummary.Disabled=true
      - AzureWebJobs.RemoveUnconfirmedProvisionalBookings.Disabled=true
      - FUNCTIONS_WORKER_RUNTIME=dotnet-isolated
      - COSMOS_ENDPOINT=${COSMOS_ENDPOINT:-https://host.docker.internal:8081}
      - COSMOS_TOKEN=${COSMOS_TOKEN:-C2y6yDjf5/R+ob0N8A7Cgv30VRDJIWEHLM+4QDU5DE2nQ9nDuVTqobD4b8mGGyPMbIZnqyMsEcaGQy67XIw/Jw==}
      - COSMOS_IGNORE_SSL_CERT=true
      - APP_CONFIG_CONNECTION=${APP_CONFIG_CONNECTION:-local}
      - LEASE_MANAGER_CONNECTION=local
      - Auth__Providers__0__Name=nhs-mail
      - Auth__Providers__0__Issuer=http://oidc-server
      - Auth__Providers__0__AuthorizeUri=http://localhost:8020/connect/authorize
      - Auth__Providers__0__TokenUri=http://oidc-server/connect/token
      - Auth__Providers__0__JwksUri=http://oidc-server/.well-known/openid-configuration/jwks
      - Auth__Providers__0__ChallengePhrase=ThisIsntRandomButItNeedsToBe43CharactersLong
      - Auth__Providers__0__ClientId=nhs-appts-local
      - Auth__Providers__0__ReturnUri=http://localhost:7071/api/auth-return?provider=nhs-mail
      - Auth__Providers__0__ClientCodeExchangeUri=http://localhost:3000/manage-your-appointments/auth/set-cookie?provider=nhs-mail
      - Auth__Providers__1__Name=okta
      - Auth__Providers__1__Issuer=https://dev-08802788.okta.com
      - Auth__Providers__1__AuthorizeUri=https://dev-08802788.okta.com/oauth2/v1/authorize
      - Auth__Providers__1__TokenUri=https://dev-08802788.okta.com/oauth2/v1/token
      - Auth__Providers__1__JwksUri=https://dev-08802788.okta.com/oauth2/v1/keys
      - Auth__Providers__1__ChallengePhrase=ThisIsntRandomButItNeedsToBe43CharactersLong
      - Auth__Providers__1__ClientId=0oamv7oihgsHveIZm5d7
      - Auth__Providers__1__ReturnUri=http://localhost:7071/api/auth-return?provider=okta
      - Auth__Providers__1__ClientCodeExchangeUri=http://localhost:3000/manage-your-appointments/auth/set-cookie?provider=okta
      - Auth__Providers__1__RequiresStateForAuthorize=true
      - Auth__Providers__1__ClientSecret=local
      - Okta__Domain=https://local.okta.com
      - Okta__ManagementId=local
      - Okta__PrivateKeyKid=local
      - Okta__PEM=local
      - Notifications_Provider=local
      - BookingRemindersCronSchedule=0 0 8 * * *
      - UnconfirmedProvisionalBookingsCronSchedule=*/5 * * * *
      - DailySiteSummaryAggregationCronSchedule=*/5 * * * *
      - SPLUNK_HOST_URL=http://splunk:8088/services/collector/raw
      - SPLUNK_HEC_TOKEN=e2c421cf-9228-4ab2-a6e8-877741df569a
      - SITE_SUMMARY_DAYS_FORWARD=30
      - SITE_SUMMARY_DAYS_CHUNK_SIZE=365
      - SITE_SUMMARY_FIRST_RUN_DATE=2025-06-01
      - SITE_SUMMARY_MINIMUM_PARALLELIZATION=500
      - DISABLE_SITE_CACHE=true
      - SITE_SUPPORTS_SERVICE_SLIDING_CACHE_ABSOLUTE_EXPIRATION_SECONDS=1000
      - SITE_SUPPORTS_SERVICE_SLIDING_CACHE_SLIDE_THRESHOLD_SECONDS=10
      - SITE_SUPPORTS_SERVICE_BATCH_MULTIPLIER=2
      - APPLICATION_NAME=mya_local_docker
      - ContainerRetry__Configurations__0__ContainerName=booking_data
      - ContainerRetry__Configurations__0__BackoffRetryType=2
      - ContainerRetry__Configurations__0__InitialValueMs=200
      - ContainerRetry__Configurations__0__CutoffRetryMs=10000
      - ContainerRetry__Configurations__1__ContainerName=core_data
      - ContainerRetry__Configurations__1__BackoffRetryType=2
      - ContainerRetry__Configurations__1__InitialValueMs=200
      - ContainerRetry__Configurations__1__CutoffRetryMs=10000
      - ContainerRetry__Configurations__2__ContainerName=client_data
      - ContainerRetry__Configurations__2__BackoffRetryType=2
      - ContainerRetry__Configurations__2__InitialValueMs=200
      - ContainerRetry__Configurations__2__CutoffRetryMs=10000
      - ContainerRetry__Configurations__3__ContainerName=audit_data
      - ContainerRetry__Configurations__3__BackoffRetryType=2
      - ContainerRetry__Configurations__3__InitialValueMs=200
      - ContainerRetry__Configurations__3__CutoffRetryMs=10000
      - ContainerRetry__Configurations__4__ContainerName=index_data
      - ContainerRetry__Configurations__4__BackoffRetryType=2
      - ContainerRetry__Configurations__4__InitialValueMs=200
      - ContainerRetry__Configurations__4__CutoffRetryMs=10000
      - ContainerRetry__Configurations__5__ContainerName=aggregated_data
      - ContainerRetry__Configurations__5__BackoffRetryType=2
      - ContainerRetry__Configurations__5__InitialValueMs=200
      - ContainerRetry__Configurations__5__CutoffRetryMs=10000
      - CANCEL_A_DATE_RANGE_MAXIMUM_DAYS=90
      - TZ=UTC
  splunk:
    image: splunk/splunk:9.3
    container_name: splunk
    environment:
      - SPLUNK_START_ARGS=--accept-license
      - SPLUNK_GENERAL_TERMS=--accept-sgt-current-at-splunk-com
      - SPLUNK_PASSWORD=Password1!
      - SPLUNK_HEC_SSL=false
      - SPLUNK_HEC_TOKEN=e2c421cf-9228-4ab2-a6e8-877741df569a
    ports:
      - "8000:8000" # Splunk Web UI
      - "8088:8088" # Splunk HEC
    volumes:
      - splunk-data:/opt/splunk/var

  splunk-otel-collector:
    container_name: "open-telemetry-collector-for-splunk"
    build:
      context: otel/
      dockerfile: splunkotel.Dockerfile
    environment:
      - SPLUNK_HOST_URL=http://splunk:8088/services/collector
      - SPLUNK_HEC_TOKEN=611b0183-df4f-4f97-aa99-936f98609d5f
      - SPLUNK_LOGS_INDEX=mya-logs
      - SPLUNK_TRACES_INDEX=mya-traces
      - SPLUNK_METICS_INDEX=mya-metrics
      - SPLUNK_DATA_CHANNEL=ABEFC3F8-F6B4-411B-A3AD-99C01067AB8F
      - SPLUNK_SKIP_VERIFY_INSECURE=true
    ports:
      - "4317:4317" # OTLP gRPC receiver
      - "4318:4318" # OTLP HTTP receiver

  oidc-server:
    container_name: mock-oidc-server
    image: ghcr.io/soluto/oidc-server-mock:latest
    ports:
      - "8010:443"
      - "8020:80"
    environment:
      ASPNETCORE_ENVIRONMENT: Development
      ASPNETCORE_URLS: https://+:443;http://+80
      ASPNETCORE_HTTPS_PORT: 8010
      ASPNETCORE_Kestrel__Certificates__Default__Password: password
      ASPNETCORE_Kestrel__Certificates__Default__Path: /https/aspnetapp.pfx
      AUTHENTICATION:ISSUER: https://localhost:8010
      SERVER_OPTIONS_INLINE: |
        {
          "Authentication": {
            "CookieSameSiteMode": "Lax",
            "CheckSessionCookieSameSiteMode": "Lax"
          }
        }
      USERS_CONFIGURATION_PATH: /tmp/config/users.json
      CLIENTS_CONFIGURATION_PATH: /tmp/config/config.json

    volumes:
      - ./mock-oidc:/tmp/config:ro
      - ${PFX_CERT_PATH:-~/.aspnet/https}:/https:ro

  cosmos-auditor:
    container_name: cosmos-auditor
    build:
      context: ./
      dockerfile: CosmosAuditorDockerfile
    environment:
      - Application_Name=docker-auditor
      - COSMOS_ENDPOINT=${COSMOS_ENDPOINT:-https://host.docker.internal:8081}
      - COSMOS_TOKEN=${COSMOS_TOKEN:-C2y6yDjf5/R+ob0N8A7Cgv30VRDJIWEHLM+4QDU5DE2nQ9nDuVTqobD4b8mGGyPMbIZnqyMsEcaGQy67XIw/Jw==}
      - BLOB_STORAGE_CONNECTION_STRING=${BLOB_STORAGE_CONNECTION_STRING:-DefaultEndpointsProtocol=http;AccountName=devstoreaccount1;AccountKey=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==;BlobEndpoint=http://host.docker.internal:10000/devstoreaccount1;QueueEndpoint=http://host.docker.internal:10001/devstoreaccount1;TableEndpoint=http://host.docker.internal:10002/devstoreaccount1;}
      - AuditWorkerConfigurations__0__ContainerName=audit_data
      - AuditWorkerConfigurations__0__PollingIntervalSeconds=2
      - AuditWorkerConfigurations__0__LeaseContainerName=audit_data_lease
      - AuditWorkerConfigurations__1__ContainerName=booking_data
      - AuditWorkerConfigurations__1__PollingIntervalSeconds=2
      - AuditWorkerConfigurations__1__LeaseContainerName=audit_data_lease
      - AuditWorkerConfigurations__2__ContainerName=core_data
      - AuditWorkerConfigurations__2__PollingIntervalSeconds=2
      - AuditWorkerConfigurations__2__LeaseContainerName=audit_data_lease
      - AuditWorkerConfigurations__3__ContainerName=index_data
      - AuditWorkerConfigurations__3__PollingIntervalSeconds=2
      - AuditWorkerConfigurations__3__LeaseContainerName=audit_data_lease
      - SinkExclusions__0__Source=booking_data
      - SinkExclusions__0__ExcludedPaths__0=contactDetails
      - SinkExclusions__0__ExcludedPaths__1=attendeeDetails.firstName
      - SinkExclusions__0__ExcludedPaths__2=attendeeDetails.lastName
      - SinkExclusions__0__ExcludedPaths__3=attendeeDetails.dateOfBirth
      - SPLUNK_HOST_URL=http://splunk:8088/services/collector/raw
      - SPLUNK_HEC_TOKEN=e2c421cf-9228-4ab2-a6e8-877741df569a
      - DataFilterOptions__Sites__0=562348bf-3509-45f2-887c-4f9651501f06
  cosmos-aggregator:
    container_name: cosmos-aggregator
    build:
      context: ./
      dockerfile: CosmosAggregatorDockerfile
    environment:
      - Application_Name=docker-aggregator
      - COSMOS_ENDPOINT=${COSMOS_ENDPOINT:-https://host.docker.internal:8081}
      - COSMOS_TOKEN=${COSMOS_TOKEN:-C2y6yDjf5/R+ob0N8A7Cgv30VRDJIWEHLM+4QDU5DE2nQ9nDuVTqobD4b8mGGyPMbIZnqyMsEcaGQy67XIw/Jw==}
      - SPLUNK_HOST_URL=http://splunk:8088/services/collector/raw
      - SPLUNK_HEC_TOKEN=e2c421cf-9228-4ab2-a6e8-877741df569a
      - CosmosTransactionOptions__MaxRetry=50
      - CosmosTransactionOptions__DefaultWaitSeconds=30
      - ChangeFeedPollingIntervalSeconds=2
      - DataFilterOptions__DocumentTypes__0=daily_availability
      - DataFilterOptions__DocumentTypes__1=booking
      - DataFilterOptions__Sites__0=6e3348bf-3509-45f2-887c-4f9651501f06
      - DataFilterOptions__Sites__1=6e3348bf-3509-45f2-887c-4f9651501f05
      - DataFilterOptions__Sites__2=6e3348bf-3509-45f2-887c-4f9651501f04
      - DataFilterOptions__Sites__3=6e3348bf-3509-45f2-887c-4f9651501f03
      - DataFilterOptions__Sites__4=6e3348bf-3509-45f2-887c-4f9651501f02
      - DataFilterOptions__Sites__5=6e3348bf-3509-45f2-887c-4f9651501f01
      - DataFilterOptions__Sites__6=6e3348bf-3509-45f2-887c-4f9651501f00
volumes:
  splunk-data: