spurin/rest-labspace:latest

##################################################################################################
# This Compose file is intended to run a Labspace. It can be run with the following:
#
# CONTENT_REPO_URL=https://github.com/username/labspace-content-repo docker compose -f compose.run.yaml up
##################################################################################################

services:
  configurator:
    image: dockersamples/labspace-configurator:v0.26.0
    use_api_socket: true
    volumes:
      - labspace-content:/project
      - labspace-instructions:/instructions
      - docker-creds:/docker-creds
      - labspace-support:/etc/labspace-support

  interface:
    image: dockersamples/labspace-interface:v0.26.0
    ports:
      - "3030:3030"
    volumes:
      - labspace-instructions:/labspace/instructions:ro
      - type: volume
        source: labspace-support
        target: /etc/labspace-support/private-key
        volume:
          subpath: private-key
      - type: volume
        source: labspace-support
        target: /etc/labspace-support/socket
        volume:
          subpath: socket
      - type: volume
        source: labspace-support
        target: /etc/labspace-support/metadata
        volume:
          subpath: metadata
    depends_on:
      workspace:
        condition: service_started
      configurator:
        condition: service_completed_successfully
    restart: unless-stopped

  workspace:
    image: dockersamples/labspace-workspace-node:v0.26.0
    depends_on:
      configurator:
        condition: service_completed_successfully
      socket-proxy:
        condition: service_started
    ports:
      - 8085:8085 # For the IDE itself
      - 3000:3000 # For the Node application running in the IDE
    volumes:
      - socket-proxy:/var/run
      - labspace-content:/home/coder/project
      - docker-creds:/docker-creds
      - type: volume
        source: labspace-support
        target: /etc/labspace-support/public-key
        volume:
          subpath: public-key
      - type: volume
        source: labspace-support
        target: /etc/labspace-support/socket
        volume:
          subpath: socket


  host-republisher:
    image: dockersamples/labspace-host-port-republisher:v0.26.0
    pull_policy: always
    restart: always
    volumes:
      - socket-proxy:/var/run
    network_mode: service:workspace
    environment:
      LABEL_FILTER: labspace-resource=true
    depends_on:
      - workspace
      - socket-proxy

  workspace-cleaner:
    image: dockersamples/labspace-cleaner:v0.26.0
    pull_policy: always
    volumes:
      - socket-proxy:/var/run
    environment:
      LABEL_FILTER: labspace-resource=true
    depends_on:
      - socket-proxy

  socket-proxy:
    image: mikesir87/docker-socket-proxy:v1.3.1
    volumes:
      - socket-proxy:/tmp/proxy
      - /var/run/docker.sock:/var/run/docker.sock
    configs:
      - source: docker-proxy-config-labels
        target: /etc/docker-socket-proxy/config.d/add-and-require-labels.yaml
      - source: docker-proxy-mount-remap
        target: /etc/docker-socket-proxy/config.d/mount-path-remap.yaml
      - source: docker-proxy-mount-allowlist
        target: /etc/docker-socket-proxy/config.d/mount-path-allowlist.yaml
      - source: docker-proxy-forward-proxied-socket
        target: /etc/docker-socket-proxy/config.d/forward-proxied-socket.yaml
      - source: docker-proxy-add-to-labspace-network
        target: /etc/docker-socket-proxy/config.d/add-to-labspace-network.yaml
    environment:
      DEBUG_LOGS: "true"
      LISTEN_SOCKET_PATH: /tmp/proxy/docker.sock

volumes:
  socket-proxy:
    name: labspace-socket-proxy
  labspace-content:
    name: labspace-content
  labspace-instructions:
  docker-creds:
  labspace-support:

networks:
  default:
    name: labspace

configs:
  docker-proxy-config-labels:
    content: |
      mutators:
        # Add labels to all newly created objects
        - type: addLabels
          labels:
            labspace-resource: "true"
      responseFilters:
        # Only return objects with the labels we mutated on
        - type: labelFilter
          objectsToFilter:
            - containers
            - volumes
            - networks
          requiredLabels:
            labspace-resource: "true"
  docker-proxy-mount-remap:
    content: |
      # Remap the project directory to the labspace content volume, since the project
      # is running out of a volume.
      mutators:
        - type: mountPath
          from: /home/coder/project
          to: labspace-content
  docker-proxy-mount-allowlist:
    content: |
      gates:
        - type: mountSource
          allowedSources:
            - labspace-content
            - labspace-socket-proxy
            - buildx_buildkit_default_state
            - label:labspace-resource=true
  docker-proxy-forward-proxied-socket:
    content: |
      # If requests to use the Docker Socket are used (such as Testcontainers),
      # use the proxied one to ensure permissions, remappings, etc. are applied
      mutators:
        - type: mountPath
          from: /var/run/docker.sock
          to: labspace-socket-proxy/docker.sock
  docker-proxy-add-to-labspace-network:
    content: |
      mutators:
        - type: addToNetwork
          networks:
            - labspace
services:
  backend:
    image: spurin/rest-labspace-backend:latest
    pull_policy: always
    container_name: rest-labspace-backend
    ports:
      - "8000:8000"
    environment:
      CORS_ORIGINS: "*"
    labels:
      labspace-resource: "true"

  frontend:
    image: spurin/rest-labspace-frontend:latest
    pull_policy: always
    container_name: rest-labspace-frontend
    ports:
      - "3031:80"
    depends_on:
      - backend
    labels:
      labspace-resource: "true"
configs:
  labspace-content:
    content: "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"

services:
  configurator:
    configs:
      - source: labspace-content
        target: /etc/labspace-support/content.tar.base64
    environment:
      PROJECT_TAR_PATH: /etc/labspace-support/content.tar.base64
      PROJECT_CLONE_URL: https://github.com/spurin/rest-labspace