docker-compose.yaml

services:
  postgres:
    image: postgres:15-alpine
    command: ["postgres", "-c", "log_statement=all", "-c", "log_destination=stderr"]
    ports:
      - "4002:5432"
    environment:
      POSTGRES_USER: v13s
      POSTGRES_PASSWORD: v13s
      POSTGRES_DB: v13s
    volumes:
      - pgdata:/var/lib/postgresql/data

  adminer:
    depends_on:
      - postgres
    image: adminer:latest
    ports:
      - "4003:8080"
    environment:
      ADMINER_DEFAULT_SERVER: postgres

  swagger:
    image: swaggerapi/swagger-ui
    environment:
      SWAGGER_JSON_URL: http://localhost:9001/api/swagger.json
    volumes:
      - ./swagger.json:/swagger.json
    ports:
      - '9002:8080'

  dtrack-apiserver:
    image: dependencytrack/apiserver:4.11.7
    deploy:
      resources:
        limits:
          memory: 12288m
        reservations:
          memory: 8192m
      restart_policy:
        condition: on-failure
    ports:
      - '9010:8080'
    environment:
      - LOGGING_LEVEL=INFO
    healthcheck:
      test: wget --no-verbose --tries=1 --spider http://localhost:8080 || exit 1
      interval: 10s
      retries: 5
      start_period: 20s
      timeout: 10s
    volumes:
      # Optional volume mount to override default notification publisher templates
      # - "/host/path/to/template/base/dir:/data/templates"
      - 'dependency-track:/data'
    restart: unless-stopped

  dtrack-frontend:
    image: dependencytrack/frontend:4.11.7
    depends_on:
      - dtrack-apiserver
    environment:
      - API_BASE_URL=http://localhost:9010
    ports:
      - "9020:8080"
    restart: unless-stopped

  bootstrap:
    platform: linux/amd64
    image: europe-north1-docker.pkg.dev/nais-io/nais/images/dependencytrack-bootstrap:latest
    environment:
      - BASE_URL=http://dtrack-apiserver:8080/
      - DEFAULT_ADMIN_PASSWORD=admin
      - ADMIN_PASSWORD=yolo
      - TRIVY_API_TOKEN=my-token
      - USERS_FILE=users.yaml
      - TRIVY_BASE_URL=http://trivy:4005
    depends_on:
      dtrack-apiserver:
        condition: service_healthy
    volumes:
      - ./local/users.yaml:/app/users.yaml

  registry:
    image: registry:latest
    ports:
      - '4004:5000'
    volumes:
      - ./local/registry-data:/var/lib/registry

  trivy:
    image: aquasec/trivy:0.55.0
    command:
      - server
      - --listen
      - :4005
      - --token
      - my-token
    volumes:
      - "trivy-cache:/root/.cache/trivy"
    restart: unless-stopped

volumes:
  pgdata:
  dependency-track:
  trivy-cache: { }