Camunda 8.7 self managed docker compose with standalone gateway and broker problem
I have tried a lot for building and running a Camunda 8.7 self managed docker compose with just a standalone gateway and a standalone broker with one partition. Following is my latest try:
# While the Docker images themselves are supported for production usage,
# this docker-compose.yaml is designed to be used by developers to run
# an environment locally. It is not designed to be used in production.
# We recommend to use Kubernetes in production with our Helm Charts:
# https://docs.camunda.io/docs/self-managed/setup/install/
# For local development, we recommend using KIND instead of `docker-compose`:
# https://docs.camunda.io/docs/self-managed/platform-deployment/helm-kubernetes/guides/local-kubernetes-cluster/
# This is a full configuration with Zeebe Gateway, 3 Zeebe Brokers, Operate, Tasklist, Optimize, Identity, Keycloak, Elasticsearch and Web Modeler.
#version: '3.8'
services:
# ========== ZEEBE GATEWAY ==========
gateway:
image: camunda/zeebe:${CAMUNDA_ZEEBE_VERSION}
container_name: gateway
ports:
- "26500:26500" # gRPC port for client connections
- "9600:9600" # Monitoring/health endpoint
- "8088:8080" # REST API endpoint
environment:
- ZEEBE_STANDALONE_GATEWAY=true
# Network Configuration
- ZEEBE_GATEWAY_NETWORK_HOST=0.0.0.0
- ZEEBE_GATEWAY_NETWORK_PORT=26500
- ZEEBE_GATEWAY_NETWORK_MINKEEPALIVEINTERVAL=30s
- ZEEBE_GATEWAY_NETWORK_MAXMESSAGESIZE=4MB
# Cluster Configuration
#- ZEEBE_GATEWAY_CLUSTER_CLUSTERNAME=zeebe-cluster #Should be same for brokers too
- ZEEBE_GATEWAY_CLUSTER_INITIALCONTACTPOINTS=broker-1:26502
#- ZEEBE_GATEWAY_CLUSTER_REQUESTTIMEOUT=15s
#- ZEEBE_GATEWAY_CLUSTER_HOST=gateway
#- ZEEBE_GATEWAY_CLUSTER_PORT=26502
#- ZEEBE_GATEWAY_CLUSTER_MEMBER_ID=gateway
# Security Configuration
#- ZEEBE_GATEWAY_CLUSTER_SECURITY_ENABLED=false
- ZEEBE_GATEWAY_SECURITY_AUTHENTICATION_MODE=${ZEEBE_AUTHENTICATION_MODE}
#Threads configuration
- ZEEBE_GATEWAY_THREADS_MANAGEMENTTHREADS=1 #This could be increased
env_file:
- path: .env
required: true
restart: always
healthcheck:
test: ["CMD-SHELL", "timeout 10s bash -c ':> /dev/tcp/127.0.0.1/9600' || exit 1"]
interval: 30s
timeout: 5s
retries: 5
start_period: 30s
networks:
- camunda-platform
depends_on:
broker-1:
condition: service_healthy
# ========== ZEEBE BROKER 1 ==========
broker-1:
image: camunda/zeebe:${CAMUNDA_ZEEBE_VERSION}
container_name: broker-1
ports:
- "26502:26502"
- "9700:9600"
environment:
- SPRING_PROFILES_ACTIVE=broker
# Network Configuration
- ZEEBE_BROKER_NETWORK_HOST=0.0.0.0
- ZEEBE_BROKER_NETWORK_SECURITY_ENABLED=false
#- ZEEBE_BROKER_NETWORK_MAXMESSAGESIZE=4MB
- ZEEBE_BROKER_NETWORK_COMMANDAPI_HOST=0.0.0.0
#- ZEEBE_BROKER_NETWORK_COMMANDAPI_PORT=26501 #Priviously: 26501
- ZEEBE_BROKER_NETWORK_INTERNALAPI_HOST=broker-1
- ZEEBE_BROKER_NETWORK_INTERNALAPI_PORT=26502
- ZEEBE_BROKER_NETWORK_MONITORINGAPI_PORT=9600
# Cluster Configuration
- ZEEBE_BROKER_CLUSTER_CLUSTERNAME=zeebe-cluster
- ZEEBE_BROKER_CLUSTER_NODEID=1
- ZEEBE_BROKER_CLUSTER_PARTITIONSCOUNT=1
- ZEEBE_BROKER_CLUSTER_CLUSTERSIZE=1
- ZEEBE_BROKER_CLUSTER_REPLICATIONFACTOR=1
- ZEEBE_BROKER_CLUSTER_RAFT_SNAPSHOTPERIOD=5m
- ZEEBE_BROKER_CLUSTER_INITIALCONTACTPOINTS=broker-1:26502
# Disable Gateway on Brokers
- ZEEBE_BROKER_GATEWAY_ENABLE=false
# Exporters Configuration
- ZEEBE_BROKER_EXPORTERS_ELASTICSEARCH_CLASSNAME=io.camunda.zeebe.exporter.ElasticsearchExporter
- ZEEBE_BROKER_EXPORTERS_ELASTICSEARCH_ARGS_URL=http://elasticsearch:9200
- ZEEBE_BROKER_EXPORTERS_ELASTICSEARCH_ARGS_BULK_SIZE=1000
# Kafka Exporter Configuration
#- ZEEBE_BROKER_EXPORTERS_KAFKA_CLASSNAME=io.zeebe.exporters.kafka.KafkaExporter
#- SPRING_CONFIG_ADDITIONAL_LOCATION=/usr/local/zeebe/config/exporter.yml
#- ZEEBE_BROKER_EXPORTERS_KAFKA_ARGS_PRODUCER_SERVERS=192.168.60.26:9092,192.168.60.26:9093,192.168.60.26:9094
#- ZEEBE_BROKER_EXPORTERS_KAFKA_ARGS_PRODUCER_REQUESTTIMEOUTMS=5000
#- ZEEBE_BROKER_EXPORTERS_KAFKA_ARGS_ALLOWEDTOPICS=all
#- ZEEBE_BROKER_EXPORTERS_KAFKA_ARGS_RECORDS_DEFAULTS_TOPIC=zeebe-216
# Resource Management
- "JAVA_TOOL_OPTIONS=-Xms512m"
# Monitoring
- management.endpoints.web.exposure.include=health,info,metrics,prometheus,configprops
- MANAGEMENT_ENDPOINT_CONFIGPROPS_SHOW_VALUES=ALWAYS
env_file:
- path: .env
required: true
restart: always
healthcheck:
test: ["CMD-SHELL", "true"]
interval: 30s
timeout: 5s
retries: 5
start_period: 30s
volumes:
- broker1_data:/usr/local/zeebe/data
- ./exporters/exporter.yml:/usr/local/zeebe/config/exporter.yml
- ./exporters/zeebe-kafka-exporter.jar:/usr/local/zeebe/lib/zeebe-kafka-exporter.jar
networks:
- camunda-platform
depends_on:
- elasticsearch
# ========== OPERATE ==========
operate:
image: camunda/operate:${CAMUNDA_OPERATE_VERSION}
container_name: operate
ports:
- "8081:8080"
environment:
- CAMUNDA_OPERATE_ZEEBE_GATEWAYADDRESS=gateway:26500
- ZEEBE_CLIENT_ID=${ZEEBE_CLIENT_ID}
- ZEEBE_CLIENT_SECRET=${ZEEBE_CLIENT_SECRET}
- ZEEBE_TOKEN_AUDIENCE=zeebe-api
- ZEEBE_AUTHORIZATION_SERVER_URL=http://keycloak:18080/auth/realms/camunda-platform/protocol/openid-connect/token
- CAMUNDA_OPERATE_ELASTICSEARCH_URL=http://elasticsearch:9200
- CAMUNDA_OPERATE_ZEEBEELASTICSEARCH_URL=http://elasticsearch:9200
- SPRING_PROFILES_ACTIVE=identity-auth
- CAMUNDA_OPERATE_IDENTITY_BASEURL=http://identity:8084
- CAMUNDA_OPERATE_IDENTITY_ISSUER_URL=http://localhost:18080/auth/realms/camunda-platform
- CAMUNDA_OPERATE_IDENTITY_ISSUER_BACKEND_URL=http://keycloak:18080/auth/realms/camunda-platform
- CAMUNDA_OPERATE_IDENTITY_CLIENTID=operate
- CAMUNDA_OPERATE_IDENTITY_CLIENTSECRET=XALaRPl5qwTEItdwCMiPS62nVpKs7dL7
- CAMUNDA_OPERATE_IDENTITY_AUDIENCE=operate-api
- CAMUNDA_OPERATE_MULTITENANCY_ENABLED=${MULTI_TENANCY_ENABLED}
- SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_ISSUER_URI=http://keycloak:18080/auth/realms/camunda-platform
- SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_JWK_SET_URI=http://keycloak:18080/auth/realms/camunda-platform/protocol/openid-connect/certs
- CAMUNDA_OPERATE_IDENTITY_RESOURCEPERMISSIONSENABLED=${RESOURCE_AUTHORIZATIONS_ENABLED}
- CAMUNDA_DATABASE_URL=http://elasticsearch:9200
- management.endpoints.web.exposure.include=health,info,metrics,prometheus,configprops
- MANAGEMENT_ENDPOINT_CONFIGPROPS_SHOW_VALUES=ALWAYS
- management.endpoint.health.probes.enabled=true
- ZEEBE_CLIENT_CONFIG_PATH=/tmp/zeebe_auth_cache
healthcheck:
test: ["CMD-SHELL", "wget -O - -q 'http://localhost:9600/actuator/health/readiness'"]
interval: 30s
timeout: 1s
retries: 5
start_period: 30s
volumes:
- operate_tmp:/tmp
networks:
- camunda-platform
depends_on:
- gateway
- broker-1
- identity
- elasticsearch
# ========== TASKLIST ==========
tasklist:
image: camunda/tasklist:${CAMUNDA_TASKLIST_VERSION}
container_name: tasklist
ports:
- "8082:8080"
environment:
- CAMUNDA_TASKLIST_ZEEBE_GATEWAYADDRESS=gateway:26500
- CAMUNDA_TASKLIST_ZEEBE_RESTADDRESS=http://gateway:8080
- ZEEBE_CLIENT_ID=${ZEEBE_CLIENT_ID}
- ZEEBE_CLIENT_SECRET=${ZEEBE_CLIENT_SECRET}
- ZEEBE_CLIENT_CONFIG_PATH=/tmp/zeebe_auth_cache
- ZEEBE_TOKEN_AUDIENCE=zeebe-api
- ZEEBE_AUTHORIZATION_SERVER_URL=http://keycloak:18080/auth/realms/camunda-platform/protocol/openid-connect/token
- CAMUNDA_TASKLIST_ELASTICSEARCH_URL=http://elasticsearch:9200
- CAMUNDA_TASKLIST_ZEEBEELASTICSEARCH_URL=http://elasticsearch:9200
- SPRING_PROFILES_ACTIVE=identity-auth
- CAMUNDA_TASKLIST_IDENTITY_BASEURL=http://identity:8084
- CAMUNDA_TASKLIST_IDENTITY_ISSUER_URL=http://localhost:18080/auth/realms/camunda-platform
- CAMUNDA_TASKLIST_IDENTITY_ISSUER_BACKEND_URL=http://keycloak:18080/auth/realms/camunda-platform
- CAMUNDA_TASKLIST_IDENTITY_CLIENTID=tasklist
- CAMUNDA_TASKLIST_IDENTITY_CLIENTSECRET=XALaRPl5qwTEItdwCMiPS62nVpKs7dL7
- CAMUNDA_TASKLIST_IDENTITY_AUDIENCE=tasklist-api
- CAMUNDA_TASKLIST_MULTITENANCY_ENABLED=${MULTI_TENANCY_ENABLED}
- SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_ISSUER_URI=http://keycloak:18080/auth/realms/camunda-platform
- SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_JWK_SET_URI=http://keycloak:18080/auth/realms/camunda-platform/protocol/openid-connect/certs
- CAMUNDA_TASKLIST_IDENTITY_RESOURCE_PERMISSIONS_ENABLED=${RESOURCE_AUTHORIZATIONS_ENABLED}
- CAMUNDA_DATABASE_URL=http://elasticsearch:9200
- management.endpoints.web.exposure.include=health,info,metrics,prometheus,configprops
- MANAGEMENT_ENDPOINT_CONFIGPROPS_SHOW_VALUES=ALWAYS
- management.endpoint.health.probes.enabled=true
env_file:
- path: .env
required: true
healthcheck:
test: ["CMD-SHELL", "wget -O - -q 'http://localhost:9600/actuator/health/readiness'"]
interval: 30s
timeout: 1s
retries: 5
start_period: 30s
volumes:
- tasklist_tmp:/tmp
networks:
- camunda-platform
depends_on:
gateway:
condition: service_started
elasticsearch:
condition: service_healthy
identity:
condition: service_healthy
# ========== CONNECTORS ==========
connectors:
image: camunda/connectors-bundle:${CAMUNDA_CONNECTORS_VERSION}
container_name: connectors
ports:
- "8085:8080"
environment:
# Zeebe connection
- CAMUNDA_CLIENT_MODE=self-managed
- CAMUNDA_CLIENT_ZEEBE_RESTADDRESS=http://gateway:8080
- CAMUNDA_CLIENT_ZEEBE_GRPCADDRESS=http://gateway:26500
- CAMUNDA_CLIENT_AUTH_ISSUER=http://keycloak:18080/auth/realms/camunda-platform/protocol/openid-connect/token
- CAMUNDA_CLIENT_AUTH_CLIENTID=${ZEEBE_CLIENT_ID}
- CAMUNDA_CLIENT_AUTH_CLIENTSECRET=${ZEEBE_CLIENT_SECRET}
- CAMUNDA_CLIENT_AUTH_CREDENTIALSCACHEPATH=/tmp/zeebe_auth_cache
- CAMUNDA_CLIENT_ZEEBE_AUDIENCE=zeebe-api
# Operate connection
- OPERATE_CLIENT_BASEURL=http://operate:8080
- OPERATE_CLIENT_AUTHURL=http://keycloak:18080/auth/realms/camunda-platform/protocol/openid-connect/token
- OPERATE_CLIENT_AUDIENCE=operate-api
- OPERATE_CLIENT_PROFILE=oidc
- OPERATE_CLIENT_CLIENTID=connectors
- OPERATE_CLIENT_CLIENTSECRET=XALaRPl5qwTEItdwCMiPS62nVpKs7dL7
# management configuration
- management.endpoints.web.exposure.include=health,info,metrics,prometheus,configprops
- MANAGEMENT_ENDPOINT_CONFIGPROPS_SHOW_VALUES=ALWAYS
- management.endpoint.health.probes.enabled=true
env_file: connector-secrets.txt
healthcheck:
test: ["CMD-SHELL", "curl -f http://localhost:8080/actuator/health/readiness"]
interval: 30s
timeout: 1s
retries: 5
start_period: 30s
networks:
- camunda-platform
depends_on:
- gateway
- operate
- identity
# ========== IDENTITY ==========
identity:
container_name: identity
image: camunda/identity:${CAMUNDA_IDENTITY_VERSION}
ports:
- "8084:8084"
environment:
SERVER_PORT: 8084
IDENTITY_RETRY_DELAY_SECONDS: 30
IDENTITY_URL: http://localhost:8084
KEYCLOAK_URL: http://keycloak:18080/auth
IDENTITY_AUTH_PROVIDER_ISSUER_URL: http://localhost:18080/auth/realms/camunda-platform
IDENTITY_AUTH_PROVIDER_BACKEND_URL: http://keycloak:18080/auth/realms/camunda-platform
IDENTITY_DATABASE_HOST: postgres
IDENTITY_DATABASE_PORT: 5432
IDENTITY_DATABASE_NAME: bitnami_keycloak
IDENTITY_DATABASE_USERNAME: bn_keycloak
IDENTITY_DATABASE_PASSWORD: "#3]O?4RGj)DE7Z!9SA5"
KEYCLOAK_INIT_OPERATE_SECRET: XALaRPl5qwTEItdwCMiPS62nVpKs7dL7
KEYCLOAK_INIT_OPERATE_ROOT_URL: http://localhost:8081
KEYCLOAK_INIT_TASKLIST_SECRET: XALaRPl5qwTEItdwCMiPS62nVpKs7dL7
KEYCLOAK_INIT_TASKLIST_ROOT_URL: http://localhost:8082
KEYCLOAK_INIT_OPTIMIZE_SECRET: XALaRPl5qwTEItdwCMiPS62nVpKs7dL7
KEYCLOAK_INIT_OPTIMIZE_ROOT_URL: http://localhost:8083
KEYCLOAK_INIT_WEBMODELER_ROOT_URL: http://localhost:8070
KEYCLOAK_INIT_CONNECTORS_SECRET: XALaRPl5qwTEItdwCMiPS62nVpKs7dL7
KEYCLOAK_INIT_CONNECTORS_ROOT_URL: http://localhost:8085
KEYCLOAK_INIT_ZEEBE_NAME: zeebe
KEYCLOAK_USERS_0_USERNAME: "demo"
KEYCLOAK_USERS_0_PASSWORD: "demo"
KEYCLOAK_USERS_0_FIRST_NAME: "demo"
KEYCLOAK_USERS_0_EMAIL: "demo@acme.com"
KEYCLOAK_USERS_0_ROLES_0: "Identity"
KEYCLOAK_USERS_0_ROLES_1: "Optimize"
KEYCLOAK_USERS_0_ROLES_2: "Operate"
KEYCLOAK_USERS_0_ROLES_3: "Tasklist"
KEYCLOAK_USERS_0_ROLES_4: "Web Modeler"
KEYCLOAK_USERS_0_ROLES_5: "Web Modeler Admin"
KEYCLOAK_USERS_0_ROLES_6: "Zeebe"
KEYCLOAK_CLIENTS_0_NAME: zeebe
KEYCLOAK_CLIENTS_0_ID: ${ZEEBE_CLIENT_ID}
KEYCLOAK_CLIENTS_0_SECRET: ${ZEEBE_CLIENT_SECRET}
KEYCLOAK_CLIENTS_0_TYPE: M2M
KEYCLOAK_CLIENTS_0_PERMISSIONS_0_RESOURCE_SERVER_ID: zeebe-api
KEYCLOAK_CLIENTS_0_PERMISSIONS_0_DEFINITION: write:*
KEYCLOAK_CLIENTS_0_PERMISSIONS_1_RESOURCE_SERVER_ID: operate-api
KEYCLOAK_CLIENTS_0_PERMISSIONS_1_DEFINITION: write:*
KEYCLOAK_CLIENTS_0_PERMISSIONS_2_RESOURCE_SERVER_ID: tasklist-api
KEYCLOAK_CLIENTS_0_PERMISSIONS_2_DEFINITION: write:*
KEYCLOAK_CLIENTS_0_PERMISSIONS_3_RESOURCE_SERVER_ID: optimize-api
KEYCLOAK_CLIENTS_0_PERMISSIONS_3_DEFINITION: write:*
KEYCLOAK_CLIENTS_0_PERMISSIONS_4_RESOURCE_SERVER_ID: tasklist-api
KEYCLOAK_CLIENTS_0_PERMISSIONS_4_DEFINITION: read:*
KEYCLOAK_CLIENTS_0_PERMISSIONS_5_RESOURCE_SERVER_ID: operate-api
KEYCLOAK_CLIENTS_0_PERMISSIONS_5_DEFINITION: read:*
MULTITENANCY_ENABLED: ${MULTI_TENANCY_ENABLED}
RESOURCE_PERMISSIONS_ENABLED: ${RESOURCE_AUTHORIZATIONS_ENABLED}
healthcheck:
test: ["CMD", "wget", "-q", "--tries=1", "--spider", "http://localhost:8082/actuator/health"]
interval: 5s
timeout: 15s
retries: 30
start_period: 60s
restart: on-failure
volumes:
- keycloak-theme:/app/keycloak-theme
networks:
- camunda-platform
- identity-network
depends_on:
keycloak:
condition: service_healthy
# ========== POSTGRES ==========
postgres:
container_name: postgres
image: postgres:${POSTGRES_VERSION}
environment:
POSTGRES_DB: bitnami_keycloak
POSTGRES_USER: bn_keycloak
POSTGRES_PASSWORD: "#3]O?4RGj)DE7Z!9SA5"
restart: on-failure
healthcheck:
test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
interval: 10s
timeout: 5s
retries: 5
volumes:
- postgres:/var/lib/postgresql/data
networks:
- identity-network
# ========== KEYCLOAK ==========
keycloak:
container_name: keycloak
image: bitnami/keycloak:${KEYCLOAK_SERVER_VERSION}
volumes:
- keycloak-theme:/opt/bitnami/keycloak/themes/identity
ports:
- "18080:18080"
environment:
KEYCLOAK_HTTP_PORT: 18080
KEYCLOAK_HTTP_RELATIVE_PATH: /auth
KEYCLOAK_DATABASE_HOST: postgres
KEYCLOAK_DATABASE_PASSWORD: "#3]O?4RGj)DE7Z!9SA5"
KEYCLOAK_ADMIN_USER: admin
KEYCLOAK_ADMIN_PASSWORD: admin
restart: on-failure
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:18080/auth"]
interval: 30s
timeout: 15s
retries: 5
start_period: 30s
networks:
- camunda-platform
- identity-network
depends_on:
- postgres
# ========== ELASTICSEARCH ==========
elasticsearch:
image: elasticsearch:${ELASTIC_VERSION}
container_name: elasticsearch
ports:
- "9200:9200"
- "9300:9300"
environment:
- bootstrap.memory_lock=true
- discovery.type=single-node
- xpack.security.enabled=false
- cluster.routing.allocation.disk.threshold_enabled=false
- "ES_JAVA_OPTS=-Xms512m -Xmx512m"
ulimits:
memlock:
soft: -1
hard: -1
restart: always
healthcheck:
test: ["CMD-SHELL", "curl -f http://localhost:9200/_cat/health | grep -q green"]
interval: 30s
timeout: 5s
retries: 3
volumes:
- elastic:/usr/share/elasticsearch/data
networks:
- camunda-platform
# ========== WEB MODELER DATABASE ==========
web-modeler-db:
container_name: web-modeler-db
image: postgres:${POSTGRES_VERSION}
healthcheck:
test: pg_isready -d web-modeler-db -U web-modeler-db-user
interval: 5s
timeout: 15s
retries: 30
environment:
POSTGRES_DB: web-modeler-db
POSTGRES_USER: web-modeler-db-user
POSTGRES_PASSWORD: web-modeler-db-password
networks:
- web-modeler
volumes:
- postgres-web:/var/lib/postgresql/data
# ========== WEB MODELER REST API ==========
web-modeler-restapi:
container_name: web-modeler-restapi
image: camunda/web-modeler-restapi:${CAMUNDA_WEB_MODELER_VERSION}
command: /bin/sh -c "java $JAVA_OPTIONS org.springframework.boot.loader.JarLauncher"
depends_on:
web-modeler-db:
condition: service_healthy
identity:
condition: service_healthy
healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8091/health/readiness"]
interval: 5s
timeout: 15s
retries: 30
environment:
JAVA_OPTIONS: -Xmx512m
LOGGING_LEVEL_IO_CAMUNDA_MODELER: DEBUG
CAMUNDA_IDENTITY_BASEURL: http://identity:8084/
SPRING_DATASOURCE_URL: jdbc:postgresql://web-modeler-db:5432/web-modeler-db
SPRING_DATASOURCE_USERNAME: web-modeler-db-user
SPRING_DATASOURCE_PASSWORD: web-modeler-db-password
SPRING_PROFILES_INCLUDE: default-logging
RESTAPI_PUSHER_HOST: web-modeler-websockets
RESTAPI_PUSHER_PORT: "8060"
RESTAPI_PUSHER_APP_ID: web-modeler-app
RESTAPI_PUSHER_KEY: web-modeler-app-key
RESTAPI_PUSHER_SECRET: web-modeler-app-secret
RESTAPI_OAUTH2_TOKEN_ISSUER: http://localhost:18080/auth/realms/camunda-platform
RESTAPI_OAUTH2_TOKEN_ISSUER_BACKEND_URL: http://keycloak:18080/auth/realms/camunda-platform
RESTAPI_SERVER_URL: http://localhost:8070
RESTAPI_MAIL_PORT: 1025
RESTAPI_MAIL_ENABLE_TLS: "false"
RESTAPI_MAIL_FROM_ADDRESS: "noreply@example.com"
CAMUNDA_MODELER_CLUSTERS_0_ID: "local-zeebe"
CAMUNDA_MODELER_CLUSTERS_0_NAME: "CamClus"
CAMUNDA_MODELER_CLUSTERS_0_VERSION: ${CAMUNDA_ZEEBE_VERSION}
CAMUNDA_MODELER_CLUSTERS_0_URL_ZEEBE_GRPC: grpc://gateway:26500
CAMUNDA_MODELER_CLUSTERS_0_URL_ZEEBE_REST: http://gateway:8080
CAMUNDA_MODELER_CLUSTERS_0_URL_OPERATE: http://operate:8080
CAMUNDA_MODELER_CLUSTERS_0_URL_TASKLIST: http://tasklist:8080
# extra cluster configuration depending on the authentication mode
env_file: ./.web-modeler/cluster-config-authentication-mode-${ZEEBE_AUTHENTICATION_MODE}.env
networks:
- web-modeler
- camunda-platform
# ========== WEB MODELER WEB APP ==========
web-modeler-webapp:
container_name: web-modeler-webapp
image: camunda/web-modeler-webapp:${CAMUNDA_WEB_MODELER_VERSION}
ports:
- "8070:8070"
depends_on:
web-modeler-restapi:
condition: service_healthy
healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8071/health/readiness"]
interval: 5s
timeout: 15s
retries: 30
environment:
RESTAPI_HOST: web-modeler-restapi
SERVER_HTTPS_ONLY: "false"
SERVER_URL: http://localhost:8070
PUSHER_APP_ID: web-modeler-app
PUSHER_KEY: web-modeler-app-key
PUSHER_SECRET: web-modeler-app-secret
PUSHER_HOST: web-modeler-websockets
PUSHER_PORT: "8060"
CLIENT_PUSHER_HOST: localhost
CLIENT_PUSHER_PORT: "8060"
CLIENT_PUSHER_FORCE_TLS: "false"
CLIENT_PUSHER_KEY: web-modeler-app-key
OAUTH2_CLIENT_ID: web-modeler
OAUTH2_JWKS_URL: http://keycloak:18080/auth/realms/camunda-platform/protocol/openid-connect/certs
OAUTH2_TOKEN_AUDIENCE: web-modeler-api
OAUTH2_TOKEN_ISSUER: http://localhost:18080/auth/realms/camunda-platform
IDENTITY_BASE_URL: http://identity:8084/
PLAY_ENABLED: "true"
networks:
- web-modeler
- camunda-platform
volumes:
gateway_data:
broker1_data:
broker2_data:
broker3_data:
broker4_data:
broker5_data:
elastic:
postgres:
keycloak-theme:
operate_tmp:
tasklist_tmp:
postgres-web:
networks:
camunda-platform:
external: true
identity-network:
web-modeler:
Could some one please verify this? I searched a lot inside camunda official docs and forums but unfortunately the docs could not help me.