Dem app deploy

• adds dem-app deployment config https://gitlab.eox.at/esa/prism/dem-app
• adds ENABLE_HTTP_ACCESS to both registrar and renderer, as both can initiate stack
• enable HTTP_ACCESS for all slugs

vs_starter/templates/docker-compose.instance.yml

@@ -339,6 +339,45 @@ services:
         - "traefik.enable=true"
     networks:
       - extnet
+  dem-app:
+    image: registry.gitlab.eox.at/esa/prism/dem-app:release-1.0.0 # !TODO
+    configs:
+      - source: client-config # !TODO
+        target: /usr/share/nginx/html/index.html # !TODO
+    deploy:
+      labels:
+        # router for shib auth based access (https)
+        - "traefik.http.routers.{{slug}}-dem-app-shib.rule=Host(`sso.{{slug}}.pass.copernicus.eu`) && PathPrefix(`/dem-app`)"
+        - "traefik.http.middlewares.{{slug}}-dem-app-shib-fa.forwardauth.address=http://shibauth-{{slug}}/secure"
+        - "traefik.http.routers.{{slug}}-dem-app-shib.middlewares={{slug}}-dem-app-shib-fa,compress@file"
+        - "traefik.http.routers.{{slug}}-dem-app-shib.tls=true"
+        - "traefik.http.routers.{{slug}}-dem-app-shib.tls.certresolver=default"
+        - "traefik.http.routers.{{slug}}-dem-app-shib.entrypoints=https"
+        # router for shib auth based access (http)
+        - "traefik.http.routers.{{slug}}-dem-app-redirect-shib.rule=Host(`sso.{{slug}}.pass.copernicus.eu`) && PathPrefix(`/dem-app`)"
+        - "traefik.http.routers.{{slug}}-dem-app-redirect-shib.middlewares=redirect@file"
+        - "traefik.http.routers.{{slug}}-dem-app-redirect-shib.entrypoints=http"
+        # router for basic auth based access (https)
+        - "traefik.http.routers.{{slug}}-dem-app.rule=Host(`{{slug}}.pass.copernicus.eu`, `{{slug}}.pdas.prism.eox.at`) && PathPrefix(`/dem-app`)"
+        - "traefik.http.routers.{{slug}}-dem-app.middlewares=auth@file,compress@file"
+        - "traefik.http.routers.{{slug}}-dem-app.tls=true"
+        - "traefik.http.routers.{{slug}}-dem-app.tls.certresolver=default"
+        - "traefik.http.routers.{{slug}}-dem-app.entrypoints=https"
+        # router for basic auth based access (http)
+        - "traefik.http.routers.{{slug}}-dem-app-redirect.rule=Host(`{{slug}}.pass.copernicus.eu`, `{{slug}}.pdas.prism.eox.at`) && PathPrefix(`/dem-app`)"
+        - "traefik.http.routers.{{slug}}-dem-app-redirect.middlewares=redirect@file"
+        - "traefik.http.routers.{{slug}}-dem-app-redirect.entrypoints=http"
+        # general
+        - "traefik.http.services.{{slug}}-dem-app.loadbalancer.sticky=false"
+        - "traefik.http.services.{{slug}}-dem-app.loadbalancer.server.port=80"
+        - "traefik.docker.network={{slug}}-extnet"
+        - "traefik.docker.lbswarm=true"
+        - "traefik.enable=true"
+      placement:
+        constraints:
+          - node.labels.type == external
+    networks:
+      - extnet
 {%- endif %}
 networks:
   extnet:
@@ -458,6 +497,27 @@ secrets:
       - ../base/traefik-dynamic.yml:/etc/traefik/traefik-dynamic.yml
     networks:
       - extnet
+{%- if slug in ["dem", "demF"] %}
+  dem-app:
+    image: registry.gitlab.eox.at/esa/prism/dem-app:dev
+    configs:
+      - source: client-config # !TODO
+        target: /usr/share/nginx/html/index.html # !TODO
+    deploy:
+      labels:
+        # router for basic access (http)
+        - "traefik.http.routers.{{slug}}-dem-app.rule=Host(`{{slug}}.localhost`) && PathPrefix(`/dem-app`)"
+        - "traefik.http.routers.{{slug}}-dem-app.middlewares=compress@file"
+        - "traefik.http.routers.{{slug}}-dem-app.entrypoints=http"
+        # general
+        - "traefik.http.services.{{slug}}-dem-app.loadbalancer.sticky=false"
+        - "traefik.http.services.{{slug}}-dem-app.loadbalancer.server.port=80"
+        - "traefik.docker.network={{slug}}-extnet"
+        - "traefik.docker.lbswarm=true"
+        - "traefik.enable=true"
+    networks:
+      - extnet
+{%- endif %}
 networks:
   extnet:
     name: {{slug}}-extnet