mirror of
https://github.com/Infisical/infisical.git
synced 2026-01-06 22:23:53 -05:00
feat: added read replica option in config and extended knex to choose
This commit is contained in:
=
@@ -3,7 +3,6 @@ import "ts-node/register";
|
|||||||
|
|
||||||
import dotenv from "dotenv";
|
import dotenv from "dotenv";
|
||||||
import jwt from "jsonwebtoken";
|
import jwt from "jsonwebtoken";
|
||||||
import knex from "knex";
|
|
||||||
import path from "path";
|
import path from "path";
|
||||||
|
|
||||||
import { seedData1 } from "@app/db/seed-data";
|
import { seedData1 } from "@app/db/seed-data";
|
||||||
@@ -15,6 +14,7 @@ import { AuthMethod, AuthTokenType } from "@app/services/auth/auth-type";
|
|||||||
import { mockQueue } from "./mocks/queue";
|
import { mockQueue } from "./mocks/queue";
|
||||||
import { mockSmtpServer } from "./mocks/smtp";
|
import { mockSmtpServer } from "./mocks/smtp";
|
||||||
import { mockKeyStore } from "./mocks/keystore";
|
import { mockKeyStore } from "./mocks/keystore";
|
||||||
|
import { initDbConnection } from "@app/db";
|
||||||
|
|
||||||
dotenv.config({ path: path.join(__dirname, "../../.env.test"), debug: true });
|
dotenv.config({ path: path.join(__dirname, "../../.env.test"), debug: true });
|
||||||
export default {
|
export default {
|
||||||
@@ -23,23 +23,21 @@ export default {
|
|||||||
async setup() {
|
async setup() {
|
||||||
const logger = await initLogger();
|
const logger = await initLogger();
|
||||||
const cfg = initEnvConfig(logger);
|
const cfg = initEnvConfig(logger);
|
||||||
const db = knex({
|
const db = initDbConnection({
|
||||||
client: "pg",
|
dbConnectionUri: cfg.DB_CONNECTION_URI,
|
||||||
connection: cfg.DB_CONNECTION_URI,
|
dbRootCert: cfg.DB_ROOT_CERT
|
||||||
migrations: {
|
|
||||||
directory: path.join(__dirname, "../src/db/migrations"),
|
|
||||||
extension: "ts",
|
|
||||||
tableName: "infisical_migrations"
|
|
||||||
},
|
|
||||||
seeds: {
|
|
||||||
directory: path.join(__dirname, "../src/db/seeds"),
|
|
||||||
extension: "ts"
|
|
||||||
}
|
|
||||||
});
|
});
|
||||||
|
|
||||||
try {
|
try {
|
||||||
await db.migrate.latest();
|
await db.migrate.latest({
|
||||||
await db.seed.run();
|
directory: path.join(__dirname, "../src/db/migrations"),
|
||||||
|
extension: "ts",
|
||||||
|
tableName: "infisical_migrations"
|
||||||
|
});
|
||||||
|
await db.seed.run({
|
||||||
|
directory: path.join(__dirname, "../src/db/seeds"),
|
||||||
|
extension: "ts"
|
||||||
|
});
|
||||||
const smtp = mockSmtpServer();
|
const smtp = mockSmtpServer();
|
||||||
const queue = mockQueue();
|
const queue = mockQueue();
|
||||||
const keyStore = mockKeyStore();
|
const keyStore = mockKeyStore();
|
||||||
@@ -74,7 +72,14 @@ export default {
|
|||||||
// @ts-expect-error type
|
// @ts-expect-error type
|
||||||
delete globalThis.jwtToken;
|
delete globalThis.jwtToken;
|
||||||
// called after all tests with this env have been run
|
// called after all tests with this env have been run
|
||||||
await db.migrate.rollback({}, true);
|
await db.migrate.rollback(
|
||||||
|
{
|
||||||
|
directory: path.join(__dirname, "../src/db/migrations"),
|
||||||
|
extension: "ts",
|
||||||
|
tableName: "infisical_migrations"
|
||||||
|
},
|
||||||
|
true
|
||||||
|
);
|
||||||
await db.destroy();
|
await db.destroy();
|
||||||
}
|
}
|
||||||
};
|
};
|
||||||
|
|||||||
593
backend/src/@types/knex-tables.d.ts
vendored
Normal file
593
backend/src/@types/knex-tables.d.ts
vendored
Normal file
@@ -0,0 +1,593 @@
|
|||||||
|
import { Knex } from "knex";
|
||||||
|
|
||||||
|
import {
|
||||||
|
TableName,
|
||||||
|
TAccessApprovalPolicies,
|
||||||
|
TAccessApprovalPoliciesApprovers,
|
||||||
|
TAccessApprovalPoliciesApproversInsert,
|
||||||
|
TAccessApprovalPoliciesApproversUpdate,
|
||||||
|
TAccessApprovalPoliciesInsert,
|
||||||
|
TAccessApprovalPoliciesUpdate,
|
||||||
|
TAccessApprovalRequests,
|
||||||
|
TAccessApprovalRequestsInsert,
|
||||||
|
TAccessApprovalRequestsReviewers,
|
||||||
|
TAccessApprovalRequestsReviewersInsert,
|
||||||
|
TAccessApprovalRequestsReviewersUpdate,
|
||||||
|
TAccessApprovalRequestsUpdate,
|
||||||
|
TApiKeys,
|
||||||
|
TApiKeysInsert,
|
||||||
|
TApiKeysUpdate,
|
||||||
|
TAuditLogs,
|
||||||
|
TAuditLogsInsert,
|
||||||
|
TAuditLogStreams,
|
||||||
|
TAuditLogStreamsInsert,
|
||||||
|
TAuditLogStreamsUpdate,
|
||||||
|
TAuditLogsUpdate,
|
||||||
|
TAuthTokens,
|
||||||
|
TAuthTokenSessions,
|
||||||
|
TAuthTokenSessionsInsert,
|
||||||
|
TAuthTokenSessionsUpdate,
|
||||||
|
TAuthTokensInsert,
|
||||||
|
TAuthTokensUpdate,
|
||||||
|
TBackupPrivateKey,
|
||||||
|
TBackupPrivateKeyInsert,
|
||||||
|
TBackupPrivateKeyUpdate,
|
||||||
|
TCertificateAuthorities,
|
||||||
|
TCertificateAuthoritiesInsert,
|
||||||
|
TCertificateAuthoritiesUpdate,
|
||||||
|
TCertificateAuthorityCerts,
|
||||||
|
TCertificateAuthorityCertsInsert,
|
||||||
|
TCertificateAuthorityCertsUpdate,
|
||||||
|
TCertificateAuthorityCrl,
|
||||||
|
TCertificateAuthorityCrlInsert,
|
||||||
|
TCertificateAuthorityCrlUpdate,
|
||||||
|
TCertificateAuthoritySecret,
|
||||||
|
TCertificateAuthoritySecretInsert,
|
||||||
|
TCertificateAuthoritySecretUpdate,
|
||||||
|
TCertificateBodies,
|
||||||
|
TCertificateBodiesInsert,
|
||||||
|
TCertificateBodiesUpdate,
|
||||||
|
TCertificates,
|
||||||
|
TCertificateSecrets,
|
||||||
|
TCertificateSecretsInsert,
|
||||||
|
TCertificateSecretsUpdate,
|
||||||
|
TCertificatesInsert,
|
||||||
|
TCertificatesUpdate,
|
||||||
|
TDynamicSecretLeases,
|
||||||
|
TDynamicSecretLeasesInsert,
|
||||||
|
TDynamicSecretLeasesUpdate,
|
||||||
|
TDynamicSecrets,
|
||||||
|
TDynamicSecretsInsert,
|
||||||
|
TDynamicSecretsUpdate,
|
||||||
|
TGitAppInstallSessions,
|
||||||
|
TGitAppInstallSessionsInsert,
|
||||||
|
TGitAppInstallSessionsUpdate,
|
||||||
|
TGitAppOrg,
|
||||||
|
TGitAppOrgInsert,
|
||||||
|
TGitAppOrgUpdate,
|
||||||
|
TGroupProjectMembershipRoles,
|
||||||
|
TGroupProjectMembershipRolesInsert,
|
||||||
|
TGroupProjectMembershipRolesUpdate,
|
||||||
|
TGroupProjectMemberships,
|
||||||
|
TGroupProjectMembershipsInsert,
|
||||||
|
TGroupProjectMembershipsUpdate,
|
||||||
|
TGroups,
|
||||||
|
TGroupsInsert,
|
||||||
|
TGroupsUpdate,
|
||||||
|
TIdentities,
|
||||||
|
TIdentitiesInsert,
|
||||||
|
TIdentitiesUpdate,
|
||||||
|
TIdentityAccessTokens,
|
||||||
|
TIdentityAccessTokensInsert,
|
||||||
|
TIdentityAccessTokensUpdate,
|
||||||
|
TIdentityAwsAuths,
|
||||||
|
TIdentityAwsAuthsInsert,
|
||||||
|
TIdentityAwsAuthsUpdate,
|
||||||
|
TIdentityAzureAuths,
|
||||||
|
TIdentityAzureAuthsInsert,
|
||||||
|
TIdentityAzureAuthsUpdate,
|
||||||
|
TIdentityGcpAuths,
|
||||||
|
TIdentityGcpAuthsInsert,
|
||||||
|
TIdentityGcpAuthsUpdate,
|
||||||
|
TIdentityKubernetesAuths,
|
||||||
|
TIdentityKubernetesAuthsInsert,
|
||||||
|
TIdentityKubernetesAuthsUpdate,
|
||||||
|
TIdentityOrgMemberships,
|
||||||
|
TIdentityOrgMembershipsInsert,
|
||||||
|
TIdentityOrgMembershipsUpdate,
|
||||||
|
TIdentityProjectAdditionalPrivilege,
|
||||||
|
TIdentityProjectAdditionalPrivilegeInsert,
|
||||||
|
TIdentityProjectAdditionalPrivilegeUpdate,
|
||||||
|
TIdentityProjectMembershipRole,
|
||||||
|
TIdentityProjectMembershipRoleInsert,
|
||||||
|
TIdentityProjectMembershipRoleUpdate,
|
||||||
|
TIdentityProjectMemberships,
|
||||||
|
TIdentityProjectMembershipsInsert,
|
||||||
|
TIdentityProjectMembershipsUpdate,
|
||||||
|
TIdentityUaClientSecrets,
|
||||||
|
TIdentityUaClientSecretsInsert,
|
||||||
|
TIdentityUaClientSecretsUpdate,
|
||||||
|
TIdentityUniversalAuths,
|
||||||
|
TIdentityUniversalAuthsInsert,
|
||||||
|
TIdentityUniversalAuthsUpdate,
|
||||||
|
TIncidentContacts,
|
||||||
|
TIncidentContactsInsert,
|
||||||
|
TIncidentContactsUpdate,
|
||||||
|
TIntegrationAuths,
|
||||||
|
TIntegrationAuthsInsert,
|
||||||
|
TIntegrationAuthsUpdate,
|
||||||
|
TIntegrations,
|
||||||
|
TIntegrationsInsert,
|
||||||
|
TIntegrationsUpdate,
|
||||||
|
TKmsKeys,
|
||||||
|
TKmsKeysInsert,
|
||||||
|
TKmsKeysUpdate,
|
||||||
|
TKmsKeyVersions,
|
||||||
|
TKmsKeyVersionsInsert,
|
||||||
|
TKmsKeyVersionsUpdate,
|
||||||
|
TKmsRootConfig,
|
||||||
|
TKmsRootConfigInsert,
|
||||||
|
TKmsRootConfigUpdate,
|
||||||
|
TLdapConfigs,
|
||||||
|
TLdapConfigsInsert,
|
||||||
|
TLdapConfigsUpdate,
|
||||||
|
TLdapGroupMaps,
|
||||||
|
TLdapGroupMapsInsert,
|
||||||
|
TLdapGroupMapsUpdate,
|
||||||
|
TOrganizations,
|
||||||
|
TOrganizationsInsert,
|
||||||
|
TOrganizationsUpdate,
|
||||||
|
TOrgBots,
|
||||||
|
TOrgBotsInsert,
|
||||||
|
TOrgBotsUpdate,
|
||||||
|
TOrgMemberships,
|
||||||
|
TOrgMembershipsInsert,
|
||||||
|
TOrgMembershipsUpdate,
|
||||||
|
TOrgRoles,
|
||||||
|
TOrgRolesInsert,
|
||||||
|
TOrgRolesUpdate,
|
||||||
|
TProjectBots,
|
||||||
|
TProjectBotsInsert,
|
||||||
|
TProjectBotsUpdate,
|
||||||
|
TProjectEnvironments,
|
||||||
|
TProjectEnvironmentsInsert,
|
||||||
|
TProjectEnvironmentsUpdate,
|
||||||
|
TProjectKeys,
|
||||||
|
TProjectKeysInsert,
|
||||||
|
TProjectKeysUpdate,
|
||||||
|
TProjectMemberships,
|
||||||
|
TProjectMembershipsInsert,
|
||||||
|
TProjectMembershipsUpdate,
|
||||||
|
TProjectRoles,
|
||||||
|
TProjectRolesInsert,
|
||||||
|
TProjectRolesUpdate,
|
||||||
|
TProjects,
|
||||||
|
TProjectsInsert,
|
||||||
|
TProjectsUpdate,
|
||||||
|
TProjectUserAdditionalPrivilege,
|
||||||
|
TProjectUserAdditionalPrivilegeInsert,
|
||||||
|
TProjectUserAdditionalPrivilegeUpdate,
|
||||||
|
TProjectUserMembershipRoles,
|
||||||
|
TProjectUserMembershipRolesInsert,
|
||||||
|
TProjectUserMembershipRolesUpdate,
|
||||||
|
TRateLimit,
|
||||||
|
TRateLimitInsert,
|
||||||
|
TRateLimitUpdate,
|
||||||
|
TSamlConfigs,
|
||||||
|
TSamlConfigsInsert,
|
||||||
|
TSamlConfigsUpdate,
|
||||||
|
TScimTokens,
|
||||||
|
TScimTokensInsert,
|
||||||
|
TScimTokensUpdate,
|
||||||
|
TSecretApprovalPolicies,
|
||||||
|
TSecretApprovalPoliciesApprovers,
|
||||||
|
TSecretApprovalPoliciesApproversInsert,
|
||||||
|
TSecretApprovalPoliciesApproversUpdate,
|
||||||
|
TSecretApprovalPoliciesInsert,
|
||||||
|
TSecretApprovalPoliciesUpdate,
|
||||||
|
TSecretApprovalRequests,
|
||||||
|
TSecretApprovalRequestSecretTags,
|
||||||
|
TSecretApprovalRequestSecretTagsInsert,
|
||||||
|
TSecretApprovalRequestSecretTagsUpdate,
|
||||||
|
TSecretApprovalRequestsInsert,
|
||||||
|
TSecretApprovalRequestsReviewers,
|
||||||
|
TSecretApprovalRequestsReviewersInsert,
|
||||||
|
TSecretApprovalRequestsReviewersUpdate,
|
||||||
|
TSecretApprovalRequestsSecrets,
|
||||||
|
TSecretApprovalRequestsSecretsInsert,
|
||||||
|
TSecretApprovalRequestsSecretsUpdate,
|
||||||
|
TSecretApprovalRequestsUpdate,
|
||||||
|
TSecretBlindIndexes,
|
||||||
|
TSecretBlindIndexesInsert,
|
||||||
|
TSecretBlindIndexesUpdate,
|
||||||
|
TSecretFolders,
|
||||||
|
TSecretFoldersInsert,
|
||||||
|
TSecretFoldersUpdate,
|
||||||
|
TSecretFolderVersions,
|
||||||
|
TSecretFolderVersionsInsert,
|
||||||
|
TSecretFolderVersionsUpdate,
|
||||||
|
TSecretImports,
|
||||||
|
TSecretImportsInsert,
|
||||||
|
TSecretImportsUpdate,
|
||||||
|
TSecretReferences,
|
||||||
|
TSecretReferencesInsert,
|
||||||
|
TSecretReferencesUpdate,
|
||||||
|
TSecretRotationOutputs,
|
||||||
|
TSecretRotationOutputsInsert,
|
||||||
|
TSecretRotationOutputsUpdate,
|
||||||
|
TSecretRotations,
|
||||||
|
TSecretRotationsInsert,
|
||||||
|
TSecretRotationsUpdate,
|
||||||
|
TSecrets,
|
||||||
|
TSecretScanningGitRisks,
|
||||||
|
TSecretScanningGitRisksInsert,
|
||||||
|
TSecretScanningGitRisksUpdate,
|
||||||
|
TSecretSharing,
|
||||||
|
TSecretSharingInsert,
|
||||||
|
TSecretSharingUpdate,
|
||||||
|
TSecretsInsert,
|
||||||
|
TSecretSnapshotFolders,
|
||||||
|
TSecretSnapshotFoldersInsert,
|
||||||
|
TSecretSnapshotFoldersUpdate,
|
||||||
|
TSecretSnapshots,
|
||||||
|
TSecretSnapshotSecrets,
|
||||||
|
TSecretSnapshotSecretsInsert,
|
||||||
|
TSecretSnapshotSecretsUpdate,
|
||||||
|
TSecretSnapshotsInsert,
|
||||||
|
TSecretSnapshotsUpdate,
|
||||||
|
TSecretsUpdate,
|
||||||
|
TSecretTagJunction,
|
||||||
|
TSecretTagJunctionInsert,
|
||||||
|
TSecretTagJunctionUpdate,
|
||||||
|
TSecretTags,
|
||||||
|
TSecretTagsInsert,
|
||||||
|
TSecretTagsUpdate,
|
||||||
|
TSecretVersions,
|
||||||
|
TSecretVersionsInsert,
|
||||||
|
TSecretVersionsUpdate,
|
||||||
|
TSecretVersionTagJunction,
|
||||||
|
TSecretVersionTagJunctionInsert,
|
||||||
|
TSecretVersionTagJunctionUpdate,
|
||||||
|
TServiceTokens,
|
||||||
|
TServiceTokensInsert,
|
||||||
|
TServiceTokensUpdate,
|
||||||
|
TSuperAdmin,
|
||||||
|
TSuperAdminInsert,
|
||||||
|
TSuperAdminUpdate,
|
||||||
|
TTrustedIps,
|
||||||
|
TTrustedIpsInsert,
|
||||||
|
TTrustedIpsUpdate,
|
||||||
|
TUserActions,
|
||||||
|
TUserActionsInsert,
|
||||||
|
TUserActionsUpdate,
|
||||||
|
TUserAliases,
|
||||||
|
TUserAliasesInsert,
|
||||||
|
TUserAliasesUpdate,
|
||||||
|
TUserEncryptionKeys,
|
||||||
|
TUserEncryptionKeysInsert,
|
||||||
|
TUserEncryptionKeysUpdate,
|
||||||
|
TUserGroupMembership,
|
||||||
|
TUserGroupMembershipInsert,
|
||||||
|
TUserGroupMembershipUpdate,
|
||||||
|
TUsers,
|
||||||
|
TUsersInsert,
|
||||||
|
TUsersUpdate,
|
||||||
|
TWebhooks,
|
||||||
|
TWebhooksInsert,
|
||||||
|
TWebhooksUpdate
|
||||||
|
} from "@app/db/schemas";
|
||||||
|
|
||||||
|
declare module "knex/types/tables" {
|
||||||
|
interface Tables {
|
||||||
|
[TableName.Users]: Knex.CompositeTableType<TUsers, TUsersInsert, TUsersUpdate>;
|
||||||
|
[TableName.Groups]: Knex.CompositeTableType<TGroups, TGroupsInsert, TGroupsUpdate>;
|
||||||
|
[TableName.CertificateAuthority]: Knex.CompositeTableType<
|
||||||
|
TCertificateAuthorities,
|
||||||
|
TCertificateAuthoritiesInsert,
|
||||||
|
TCertificateAuthoritiesUpdate
|
||||||
|
>;
|
||||||
|
[TableName.CertificateAuthorityCert]: Knex.CompositeTableType<
|
||||||
|
TCertificateAuthorityCerts,
|
||||||
|
TCertificateAuthorityCertsInsert,
|
||||||
|
TCertificateAuthorityCertsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.CertificateAuthoritySecret]: Knex.CompositeTableType<
|
||||||
|
TCertificateAuthoritySecret,
|
||||||
|
TCertificateAuthoritySecretInsert,
|
||||||
|
TCertificateAuthoritySecretUpdate
|
||||||
|
>;
|
||||||
|
[TableName.CertificateAuthorityCrl]: Knex.CompositeTableType<
|
||||||
|
TCertificateAuthorityCrl,
|
||||||
|
TCertificateAuthorityCrlInsert,
|
||||||
|
TCertificateAuthorityCrlUpdate
|
||||||
|
>;
|
||||||
|
[TableName.Certificate]: Knex.CompositeTableType<TCertificates, TCertificatesInsert, TCertificatesUpdate>;
|
||||||
|
[TableName.CertificateBody]: Knex.CompositeTableType<
|
||||||
|
TCertificateBodies,
|
||||||
|
TCertificateBodiesInsert,
|
||||||
|
TCertificateBodiesUpdate
|
||||||
|
>;
|
||||||
|
[TableName.CertificateSecret]: Knex.CompositeTableType<
|
||||||
|
TCertificateSecrets,
|
||||||
|
TCertificateSecretsInsert,
|
||||||
|
TCertificateSecretsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.UserGroupMembership]: Knex.CompositeTableType<
|
||||||
|
TUserGroupMembership,
|
||||||
|
TUserGroupMembershipInsert,
|
||||||
|
TUserGroupMembershipUpdate
|
||||||
|
>;
|
||||||
|
[TableName.GroupProjectMembership]: Knex.CompositeTableType<
|
||||||
|
TGroupProjectMemberships,
|
||||||
|
TGroupProjectMembershipsInsert,
|
||||||
|
TGroupProjectMembershipsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.GroupProjectMembershipRole]: Knex.CompositeTableType<
|
||||||
|
TGroupProjectMembershipRoles,
|
||||||
|
TGroupProjectMembershipRolesInsert,
|
||||||
|
TGroupProjectMembershipRolesUpdate
|
||||||
|
>;
|
||||||
|
[TableName.UserAliases]: Knex.CompositeTableType<TUserAliases, TUserAliasesInsert, TUserAliasesUpdate>;
|
||||||
|
[TableName.UserEncryptionKey]: Knex.CompositeTableType<
|
||||||
|
TUserEncryptionKeys,
|
||||||
|
TUserEncryptionKeysInsert,
|
||||||
|
TUserEncryptionKeysUpdate
|
||||||
|
>;
|
||||||
|
[TableName.AuthTokens]: Knex.CompositeTableType<TAuthTokens, TAuthTokensInsert, TAuthTokensUpdate>;
|
||||||
|
[TableName.AuthTokenSession]: Knex.CompositeTableType<
|
||||||
|
TAuthTokenSessions,
|
||||||
|
TAuthTokenSessionsInsert,
|
||||||
|
TAuthTokenSessionsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.BackupPrivateKey]: Knex.CompositeTableType<
|
||||||
|
TBackupPrivateKey,
|
||||||
|
TBackupPrivateKeyInsert,
|
||||||
|
TBackupPrivateKeyUpdate
|
||||||
|
>;
|
||||||
|
[TableName.Organization]: Knex.CompositeTableType<TOrganizations, TOrganizationsInsert, TOrganizationsUpdate>;
|
||||||
|
[TableName.OrgMembership]: Knex.CompositeTableType<TOrgMemberships, TOrgMembershipsInsert, TOrgMembershipsUpdate>;
|
||||||
|
[TableName.OrgRoles]: Knex.CompositeTableType<TOrgRoles, TOrgRolesInsert, TOrgRolesUpdate>;
|
||||||
|
[TableName.IncidentContact]: Knex.CompositeTableType<
|
||||||
|
TIncidentContacts,
|
||||||
|
TIncidentContactsInsert,
|
||||||
|
TIncidentContactsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.UserAction]: Knex.CompositeTableType<TUserActions, TUserActionsInsert, TUserActionsUpdate>;
|
||||||
|
[TableName.SuperAdmin]: Knex.CompositeTableType<TSuperAdmin, TSuperAdminInsert, TSuperAdminUpdate>;
|
||||||
|
[TableName.ApiKey]: Knex.CompositeTableType<TApiKeys, TApiKeysInsert, TApiKeysUpdate>;
|
||||||
|
[TableName.Project]: Knex.CompositeTableType<TProjects, TProjectsInsert, TProjectsUpdate>;
|
||||||
|
[TableName.ProjectMembership]: Knex.CompositeTableType<
|
||||||
|
TProjectMemberships,
|
||||||
|
TProjectMembershipsInsert,
|
||||||
|
TProjectMembershipsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.Environment]: Knex.CompositeTableType<
|
||||||
|
TProjectEnvironments,
|
||||||
|
TProjectEnvironmentsInsert,
|
||||||
|
TProjectEnvironmentsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.ProjectBot]: Knex.CompositeTableType<TProjectBots, TProjectBotsInsert, TProjectBotsUpdate>;
|
||||||
|
[TableName.ProjectUserMembershipRole]: Knex.CompositeTableType<
|
||||||
|
TProjectUserMembershipRoles,
|
||||||
|
TProjectUserMembershipRolesInsert,
|
||||||
|
TProjectUserMembershipRolesUpdate
|
||||||
|
>;
|
||||||
|
[TableName.ProjectRoles]: Knex.CompositeTableType<TProjectRoles, TProjectRolesInsert, TProjectRolesUpdate>;
|
||||||
|
[TableName.ProjectUserAdditionalPrivilege]: Knex.CompositeTableType<
|
||||||
|
TProjectUserAdditionalPrivilege,
|
||||||
|
TProjectUserAdditionalPrivilegeInsert,
|
||||||
|
TProjectUserAdditionalPrivilegeUpdate
|
||||||
|
>;
|
||||||
|
[TableName.ProjectKeys]: Knex.CompositeTableType<TProjectKeys, TProjectKeysInsert, TProjectKeysUpdate>;
|
||||||
|
[TableName.Secret]: Knex.CompositeTableType<TSecrets, TSecretsInsert, TSecretsUpdate>;
|
||||||
|
[TableName.SecretReference]: Knex.CompositeTableType<
|
||||||
|
TSecretReferences,
|
||||||
|
TSecretReferencesInsert,
|
||||||
|
TSecretReferencesUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretBlindIndex]: Knex.CompositeTableType<
|
||||||
|
TSecretBlindIndexes,
|
||||||
|
TSecretBlindIndexesInsert,
|
||||||
|
TSecretBlindIndexesUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretVersion]: Knex.CompositeTableType<TSecretVersions, TSecretVersionsInsert, TSecretVersionsUpdate>;
|
||||||
|
[TableName.SecretFolder]: Knex.CompositeTableType<TSecretFolders, TSecretFoldersInsert, TSecretFoldersUpdate>;
|
||||||
|
[TableName.SecretFolderVersion]: Knex.CompositeTableType<
|
||||||
|
TSecretFolderVersions,
|
||||||
|
TSecretFolderVersionsInsert,
|
||||||
|
TSecretFolderVersionsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretSharing]: Knex.CompositeTableType<TSecretSharing, TSecretSharingInsert, TSecretSharingUpdate>;
|
||||||
|
[TableName.RateLimit]: Knex.CompositeTableType<TRateLimit, TRateLimitInsert, TRateLimitUpdate>;
|
||||||
|
[TableName.SecretTag]: Knex.CompositeTableType<TSecretTags, TSecretTagsInsert, TSecretTagsUpdate>;
|
||||||
|
[TableName.SecretImport]: Knex.CompositeTableType<TSecretImports, TSecretImportsInsert, TSecretImportsUpdate>;
|
||||||
|
[TableName.Integration]: Knex.CompositeTableType<TIntegrations, TIntegrationsInsert, TIntegrationsUpdate>;
|
||||||
|
[TableName.Webhook]: Knex.CompositeTableType<TWebhooks, TWebhooksInsert, TWebhooksUpdate>;
|
||||||
|
[TableName.ServiceToken]: Knex.CompositeTableType<TServiceTokens, TServiceTokensInsert, TServiceTokensUpdate>;
|
||||||
|
[TableName.IntegrationAuth]: Knex.CompositeTableType<
|
||||||
|
TIntegrationAuths,
|
||||||
|
TIntegrationAuthsInsert,
|
||||||
|
TIntegrationAuthsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.Identity]: Knex.CompositeTableType<TIdentities, TIdentitiesInsert, TIdentitiesUpdate>;
|
||||||
|
[TableName.IdentityUniversalAuth]: Knex.CompositeTableType<
|
||||||
|
TIdentityUniversalAuths,
|
||||||
|
TIdentityUniversalAuthsInsert,
|
||||||
|
TIdentityUniversalAuthsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityKubernetesAuth]: Knex.CompositeTableType<
|
||||||
|
TIdentityKubernetesAuths,
|
||||||
|
TIdentityKubernetesAuthsInsert,
|
||||||
|
TIdentityKubernetesAuthsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityGcpAuth]: Knex.CompositeTableType<
|
||||||
|
TIdentityGcpAuths,
|
||||||
|
TIdentityGcpAuthsInsert,
|
||||||
|
TIdentityGcpAuthsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityAwsAuth]: Knex.CompositeTableType<
|
||||||
|
TIdentityAwsAuths,
|
||||||
|
TIdentityAwsAuthsInsert,
|
||||||
|
TIdentityAwsAuthsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityAzureAuth]: Knex.CompositeTableType<
|
||||||
|
TIdentityAzureAuths,
|
||||||
|
TIdentityAzureAuthsInsert,
|
||||||
|
TIdentityAzureAuthsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityUaClientSecret]: Knex.CompositeTableType<
|
||||||
|
TIdentityUaClientSecrets,
|
||||||
|
TIdentityUaClientSecretsInsert,
|
||||||
|
TIdentityUaClientSecretsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityAccessToken]: Knex.CompositeTableType<
|
||||||
|
TIdentityAccessTokens,
|
||||||
|
TIdentityAccessTokensInsert,
|
||||||
|
TIdentityAccessTokensUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityOrgMembership]: Knex.CompositeTableType<
|
||||||
|
TIdentityOrgMemberships,
|
||||||
|
TIdentityOrgMembershipsInsert,
|
||||||
|
TIdentityOrgMembershipsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityProjectMembership]: Knex.CompositeTableType<
|
||||||
|
TIdentityProjectMemberships,
|
||||||
|
TIdentityProjectMembershipsInsert,
|
||||||
|
TIdentityProjectMembershipsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityProjectMembershipRole]: Knex.CompositeTableType<
|
||||||
|
TIdentityProjectMembershipRole,
|
||||||
|
TIdentityProjectMembershipRoleInsert,
|
||||||
|
TIdentityProjectMembershipRoleUpdate
|
||||||
|
>;
|
||||||
|
[TableName.IdentityProjectAdditionalPrivilege]: Knex.CompositeTableType<
|
||||||
|
TIdentityProjectAdditionalPrivilege,
|
||||||
|
TIdentityProjectAdditionalPrivilegeInsert,
|
||||||
|
TIdentityProjectAdditionalPrivilegeUpdate
|
||||||
|
>;
|
||||||
|
|
||||||
|
[TableName.AccessApprovalPolicy]: Knex.CompositeTableType<
|
||||||
|
TAccessApprovalPolicies,
|
||||||
|
TAccessApprovalPoliciesInsert,
|
||||||
|
TAccessApprovalPoliciesUpdate
|
||||||
|
>;
|
||||||
|
|
||||||
|
[TableName.AccessApprovalPolicyApprover]: Knex.CompositeTableType<
|
||||||
|
TAccessApprovalPoliciesApprovers,
|
||||||
|
TAccessApprovalPoliciesApproversInsert,
|
||||||
|
TAccessApprovalPoliciesApproversUpdate
|
||||||
|
>;
|
||||||
|
|
||||||
|
[TableName.AccessApprovalRequest]: Knex.CompositeTableType<
|
||||||
|
TAccessApprovalRequests,
|
||||||
|
TAccessApprovalRequestsInsert,
|
||||||
|
TAccessApprovalRequestsUpdate
|
||||||
|
>;
|
||||||
|
|
||||||
|
[TableName.AccessApprovalRequestReviewer]: Knex.CompositeTableType<
|
||||||
|
TAccessApprovalRequestsReviewers,
|
||||||
|
TAccessApprovalRequestsReviewersInsert,
|
||||||
|
TAccessApprovalRequestsReviewersUpdate
|
||||||
|
>;
|
||||||
|
|
||||||
|
[TableName.ScimToken]: Knex.CompositeTableType<TScimTokens, TScimTokensInsert, TScimTokensUpdate>;
|
||||||
|
[TableName.SecretApprovalPolicy]: Knex.CompositeTableType<
|
||||||
|
TSecretApprovalPolicies,
|
||||||
|
TSecretApprovalPoliciesInsert,
|
||||||
|
TSecretApprovalPoliciesUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretApprovalPolicyApprover]: Knex.CompositeTableType<
|
||||||
|
TSecretApprovalPoliciesApprovers,
|
||||||
|
TSecretApprovalPoliciesApproversInsert,
|
||||||
|
TSecretApprovalPoliciesApproversUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretApprovalRequest]: Knex.CompositeTableType<
|
||||||
|
TSecretApprovalRequests,
|
||||||
|
TSecretApprovalRequestsInsert,
|
||||||
|
TSecretApprovalRequestsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretApprovalRequestReviewer]: Knex.CompositeTableType<
|
||||||
|
TSecretApprovalRequestsReviewers,
|
||||||
|
TSecretApprovalRequestsReviewersInsert,
|
||||||
|
TSecretApprovalRequestsReviewersUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretApprovalRequestSecret]: Knex.CompositeTableType<
|
||||||
|
TSecretApprovalRequestsSecrets,
|
||||||
|
TSecretApprovalRequestsSecretsInsert,
|
||||||
|
TSecretApprovalRequestsSecretsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretApprovalRequestSecretTag]: Knex.CompositeTableType<
|
||||||
|
TSecretApprovalRequestSecretTags,
|
||||||
|
TSecretApprovalRequestSecretTagsInsert,
|
||||||
|
TSecretApprovalRequestSecretTagsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretRotation]: Knex.CompositeTableType<
|
||||||
|
TSecretRotations,
|
||||||
|
TSecretRotationsInsert,
|
||||||
|
TSecretRotationsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretRotationOutput]: Knex.CompositeTableType<
|
||||||
|
TSecretRotationOutputs,
|
||||||
|
TSecretRotationOutputsInsert,
|
||||||
|
TSecretRotationOutputsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.Snapshot]: Knex.CompositeTableType<TSecretSnapshots, TSecretSnapshotsInsert, TSecretSnapshotsUpdate>;
|
||||||
|
[TableName.SnapshotSecret]: Knex.CompositeTableType<
|
||||||
|
TSecretSnapshotSecrets,
|
||||||
|
TSecretSnapshotSecretsInsert,
|
||||||
|
TSecretSnapshotSecretsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SnapshotFolder]: Knex.CompositeTableType<
|
||||||
|
TSecretSnapshotFolders,
|
||||||
|
TSecretSnapshotFoldersInsert,
|
||||||
|
TSecretSnapshotFoldersUpdate
|
||||||
|
>;
|
||||||
|
[TableName.DynamicSecret]: Knex.CompositeTableType<TDynamicSecrets, TDynamicSecretsInsert, TDynamicSecretsUpdate>;
|
||||||
|
[TableName.DynamicSecretLease]: Knex.CompositeTableType<
|
||||||
|
TDynamicSecretLeases,
|
||||||
|
TDynamicSecretLeasesInsert,
|
||||||
|
TDynamicSecretLeasesUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SamlConfig]: Knex.CompositeTableType<TSamlConfigs, TSamlConfigsInsert, TSamlConfigsUpdate>;
|
||||||
|
[TableName.LdapConfig]: Knex.CompositeTableType<TLdapConfigs, TLdapConfigsInsert, TLdapConfigsUpdate>;
|
||||||
|
[TableName.LdapGroupMap]: Knex.CompositeTableType<TLdapGroupMaps, TLdapGroupMapsInsert, TLdapGroupMapsUpdate>;
|
||||||
|
[TableName.OrgBot]: Knex.CompositeTableType<TOrgBots, TOrgBotsInsert, TOrgBotsUpdate>;
|
||||||
|
[TableName.AuditLog]: Knex.CompositeTableType<TAuditLogs, TAuditLogsInsert, TAuditLogsUpdate>;
|
||||||
|
[TableName.AuditLogStream]: Knex.CompositeTableType<
|
||||||
|
TAuditLogStreams,
|
||||||
|
TAuditLogStreamsInsert,
|
||||||
|
TAuditLogStreamsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.GitAppInstallSession]: Knex.CompositeTableType<
|
||||||
|
TGitAppInstallSessions,
|
||||||
|
TGitAppInstallSessionsInsert,
|
||||||
|
TGitAppInstallSessionsUpdate
|
||||||
|
>;
|
||||||
|
[TableName.GitAppOrg]: Knex.CompositeTableType<TGitAppOrg, TGitAppOrgInsert, TGitAppOrgUpdate>;
|
||||||
|
[TableName.SecretScanningGitRisk]: Knex.CompositeTableType<
|
||||||
|
TSecretScanningGitRisks,
|
||||||
|
TSecretScanningGitRisksInsert,
|
||||||
|
TSecretScanningGitRisksUpdate
|
||||||
|
>;
|
||||||
|
[TableName.TrustedIps]: Knex.CompositeTableType<TTrustedIps, TTrustedIpsInsert, TTrustedIpsUpdate>;
|
||||||
|
// Junction tables
|
||||||
|
[TableName.JnSecretTag]: Knex.CompositeTableType<
|
||||||
|
TSecretTagJunction,
|
||||||
|
TSecretTagJunctionInsert,
|
||||||
|
TSecretTagJunctionUpdate
|
||||||
|
>;
|
||||||
|
[TableName.SecretVersionTag]: Knex.CompositeTableType<
|
||||||
|
TSecretVersionTagJunction,
|
||||||
|
TSecretVersionTagJunctionInsert,
|
||||||
|
TSecretVersionTagJunctionUpdate
|
||||||
|
>;
|
||||||
|
// KMS service
|
||||||
|
[TableName.KmsServerRootConfig]: Knex.CompositeTableType<
|
||||||
|
TKmsRootConfig,
|
||||||
|
TKmsRootConfigInsert,
|
||||||
|
TKmsRootConfigUpdate
|
||||||
|
>;
|
||||||
|
[TableName.KmsKey]: Knex.CompositeTableType<TKmsKeys, TKmsKeysInsert, TKmsKeysUpdate>;
|
||||||
|
[TableName.KmsKeyVersion]: Knex.CompositeTableType<TKmsKeyVersions, TKmsKeyVersionsInsert, TKmsKeyVersionsUpdate>;
|
||||||
|
}
|
||||||
|
}
|
||||||
11
backend/src/@types/knex.d.ts
vendored
11
backend/src/@types/knex.d.ts
vendored
@@ -1,4 +1,4 @@
|
|||||||
import { Knex } from "knex";
|
import { Knex as KnexOriginal } from "knex";
|
||||||
|
|
||||||
import {
|
import {
|
||||||
TableName,
|
TableName,
|
||||||
@@ -595,3 +595,12 @@ declare module "knex/types/tables" {
|
|||||||
[TableName.KmsKeyVersion]: Knex.CompositeTableType<TKmsKeyVersions, TKmsKeyVersionsInsert, TKmsKeyVersionsUpdate>;
|
[TableName.KmsKeyVersion]: Knex.CompositeTableType<TKmsKeyVersions, TKmsKeyVersionsInsert, TKmsKeyVersionsUpdate>;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
declare module "knex" {
|
||||||
|
namespace Knex {
|
||||||
|
interface QueryInterface {
|
||||||
|
primaryNode(): KnexOriginal;
|
||||||
|
replicaNode(): KnexOriginal;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|||||||
@@ -1,8 +1,34 @@
|
|||||||
import knex from "knex";
|
import knex, { Knex } from "knex";
|
||||||
|
|
||||||
export type TDbClient = ReturnType<typeof initDbConnection>;
|
export type TDbClient = ReturnType<typeof initDbConnection>;
|
||||||
export const initDbConnection = ({ dbConnectionUri, dbRootCert }: { dbConnectionUri: string; dbRootCert?: string }) => {
|
export const initDbConnection = ({
|
||||||
const db = knex({
|
dbConnectionUri,
|
||||||
|
dbRootCert,
|
||||||
|
readReplicas = []
|
||||||
|
}: {
|
||||||
|
dbConnectionUri: string;
|
||||||
|
dbRootCert?: string;
|
||||||
|
readReplicas?: {
|
||||||
|
dbConnectionUri: string;
|
||||||
|
dbRootCert?: string;
|
||||||
|
}[];
|
||||||
|
}) => {
|
||||||
|
let db: Knex;
|
||||||
|
let readReplicaDbs: Knex[];
|
||||||
|
// @ts-expect-error the querybuilder type is expected but our intension is to return a knex instance
|
||||||
|
knex.QueryBuilder.extend("primaryNode", () => {
|
||||||
|
return db;
|
||||||
|
});
|
||||||
|
|
||||||
|
// @ts-expect-error the querybuilder type is expected but our intension is to return a knex instance
|
||||||
|
knex.QueryBuilder.extend("replicaNode", () => {
|
||||||
|
if (!readReplicaDbs.length) return db;
|
||||||
|
|
||||||
|
const selectedReplica = readReplicaDbs[Math.floor(Math.random() * readReplicaDbs.length)];
|
||||||
|
return selectedReplica;
|
||||||
|
});
|
||||||
|
|
||||||
|
db = knex({
|
||||||
client: "pg",
|
client: "pg",
|
||||||
connection: {
|
connection: {
|
||||||
connectionString: dbConnectionUri,
|
connectionString: dbConnectionUri,
|
||||||
@@ -22,5 +48,21 @@ export const initDbConnection = ({ dbConnectionUri, dbRootCert }: { dbConnection
|
|||||||
}
|
}
|
||||||
});
|
});
|
||||||
|
|
||||||
|
readReplicaDbs = readReplicas.map((el) => {
|
||||||
|
const replicaDbCertificate = el.dbRootCert || dbRootCert;
|
||||||
|
return knex({
|
||||||
|
client: "pg",
|
||||||
|
connection: {
|
||||||
|
connectionString: el.dbConnectionUri,
|
||||||
|
ssl: replicaDbCertificate
|
||||||
|
? {
|
||||||
|
rejectUnauthorized: true,
|
||||||
|
ca: Buffer.from(replicaDbCertificate, "base64").toString("ascii")
|
||||||
|
}
|
||||||
|
: false
|
||||||
|
}
|
||||||
|
});
|
||||||
|
});
|
||||||
|
|
||||||
return db;
|
return db;
|
||||||
};
|
};
|
||||||
|
|||||||
@@ -10,6 +10,14 @@ const zodStrBool = z
|
|||||||
.optional()
|
.optional()
|
||||||
.transform((val) => val === "true");
|
.transform((val) => val === "true");
|
||||||
|
|
||||||
|
const databaseReadReplicaSchema = z
|
||||||
|
.object({
|
||||||
|
DB_CONNECTION_URI: z.string().describe("Postgres read replica database connection string"),
|
||||||
|
DB_ROOT_CERT: zpStr(z.string().optional().describe("Postgres read replica database certificate string"))
|
||||||
|
})
|
||||||
|
.array()
|
||||||
|
.optional();
|
||||||
|
|
||||||
const envSchema = z
|
const envSchema = z
|
||||||
.object({
|
.object({
|
||||||
PORT: z.coerce.number().default(4000),
|
PORT: z.coerce.number().default(4000),
|
||||||
@@ -29,6 +37,7 @@ const envSchema = z
|
|||||||
DB_USER: zpStr(z.string().describe("Postgres database username").optional()),
|
DB_USER: zpStr(z.string().describe("Postgres database username").optional()),
|
||||||
DB_PASSWORD: zpStr(z.string().describe("Postgres database password").optional()),
|
DB_PASSWORD: zpStr(z.string().describe("Postgres database password").optional()),
|
||||||
DB_NAME: zpStr(z.string().describe("Postgres database name").optional()),
|
DB_NAME: zpStr(z.string().describe("Postgres database name").optional()),
|
||||||
|
DB_READ_REPLICAS: zpStr(z.string().describe("Postgres read replicas").optional()),
|
||||||
BCRYPT_SALT_ROUND: z.number().default(12),
|
BCRYPT_SALT_ROUND: z.number().default(12),
|
||||||
NODE_ENV: z.enum(["development", "test", "production"]).default("production"),
|
NODE_ENV: z.enum(["development", "test", "production"]).default("production"),
|
||||||
SALT_ROUNDS: z.coerce.number().default(10),
|
SALT_ROUNDS: z.coerce.number().default(10),
|
||||||
@@ -127,6 +136,9 @@ const envSchema = z
|
|||||||
})
|
})
|
||||||
.transform((data) => ({
|
.transform((data) => ({
|
||||||
...data,
|
...data,
|
||||||
|
DB_READ_REPLICAS: data.DB_READ_REPLICAS
|
||||||
|
? databaseReadReplicaSchema.parse(JSON.parse(data.DB_READ_REPLICAS))
|
||||||
|
: undefined,
|
||||||
isCloud: Boolean(data.LICENSE_SERVER_KEY),
|
isCloud: Boolean(data.LICENSE_SERVER_KEY),
|
||||||
isSmtpConfigured: Boolean(data.SMTP_HOST),
|
isSmtpConfigured: Boolean(data.SMTP_HOST),
|
||||||
isRedisConfigured: Boolean(data.REDIS_URL),
|
isRedisConfigured: Boolean(data.REDIS_URL),
|
||||||
|
|||||||
@@ -15,7 +15,11 @@ const run = async () => {
|
|||||||
const appCfg = initEnvConfig(logger);
|
const appCfg = initEnvConfig(logger);
|
||||||
const db = initDbConnection({
|
const db = initDbConnection({
|
||||||
dbConnectionUri: appCfg.DB_CONNECTION_URI,
|
dbConnectionUri: appCfg.DB_CONNECTION_URI,
|
||||||
dbRootCert: appCfg.DB_ROOT_CERT
|
dbRootCert: appCfg.DB_ROOT_CERT,
|
||||||
|
readReplicas: appCfg.DB_READ_REPLICAS?.map((el) => ({
|
||||||
|
dbRootCert: el.DB_ROOT_CERT,
|
||||||
|
dbConnectionUri: el.DB_CONNECTION_URI
|
||||||
|
}))
|
||||||
});
|
});
|
||||||
|
|
||||||
const smtp = smtpServiceFactory(formatSmtpConfig());
|
const smtp = smtpServiceFactory(formatSmtpConfig());
|
||||||
|
|||||||
191
docker-compose.dev-read-replica.yml
Normal file
191
docker-compose.dev-read-replica.yml
Normal file
@@ -0,0 +1,191 @@
|
|||||||
|
version: "3.9"
|
||||||
|
|
||||||
|
services:
|
||||||
|
nginx:
|
||||||
|
container_name: infisical-dev-nginx
|
||||||
|
image: nginx
|
||||||
|
restart: always
|
||||||
|
ports:
|
||||||
|
- 8080:80
|
||||||
|
volumes:
|
||||||
|
- ./nginx/default.dev.conf:/etc/nginx/conf.d/default.conf:ro
|
||||||
|
depends_on:
|
||||||
|
- backend
|
||||||
|
- frontend
|
||||||
|
|
||||||
|
db:
|
||||||
|
image: bitnami/postgresql:14
|
||||||
|
ports:
|
||||||
|
- "5432:5432"
|
||||||
|
volumes:
|
||||||
|
- postgres-data:/var/lib/postgresql/data
|
||||||
|
environment:
|
||||||
|
POSTGRESQL_PASSWORD: infisical
|
||||||
|
POSTGRESQL_USERNAME: infisical
|
||||||
|
POSTGRESQL_DATABASE: infisical
|
||||||
|
POSTGRESQL_REPLICATION_MODE: master
|
||||||
|
POSTGRESQL_REPLICATION_USER: repl_user
|
||||||
|
POSTGRESQL_REPLICATION_PASSWORD: repl_password
|
||||||
|
POSTGRESQL_SYNCHRONOUS_COMMIT_MODE: on
|
||||||
|
POSTGRESQL_NUM_SYNCHRONOUS_REPLICAS: 1
|
||||||
|
|
||||||
|
db-slave:
|
||||||
|
image: bitnami/postgresql:14
|
||||||
|
ports:
|
||||||
|
- "5433:5432"
|
||||||
|
volumes:
|
||||||
|
- postgres-data:/var/lib/postgresql/data
|
||||||
|
environment:
|
||||||
|
POSTGRESQL_PASSWORD: infisical
|
||||||
|
POSTGRESQL_USERNAME: infisical
|
||||||
|
POSTGRESQL_DATABASE: infisical
|
||||||
|
POSTGRESQL_REPLICATION_MODE: slave
|
||||||
|
POSTGRESQL_REPLICATION_USER: repl_user
|
||||||
|
POSTGRESQL_REPLICATION_PASSWORD: repl_password
|
||||||
|
POSTGRESQL_MASTER_HOST: db
|
||||||
|
POSTGRESQL_MASTER_PORT_NUMBER: 5432
|
||||||
|
|
||||||
|
|
||||||
|
redis:
|
||||||
|
image: redis
|
||||||
|
container_name: infisical-dev-redis
|
||||||
|
environment:
|
||||||
|
- ALLOW_EMPTY_PASSWORD=yes
|
||||||
|
ports:
|
||||||
|
- 6379:6379
|
||||||
|
volumes:
|
||||||
|
- redis_data:/data
|
||||||
|
|
||||||
|
redis-commander:
|
||||||
|
container_name: infisical-dev-redis-commander
|
||||||
|
image: rediscommander/redis-commander
|
||||||
|
restart: always
|
||||||
|
depends_on:
|
||||||
|
- redis
|
||||||
|
environment:
|
||||||
|
- REDIS_HOSTS=local:redis:6379
|
||||||
|
ports:
|
||||||
|
- "8085:8081"
|
||||||
|
|
||||||
|
db-test:
|
||||||
|
profiles: ["test"]
|
||||||
|
image: postgres:14-alpine
|
||||||
|
ports:
|
||||||
|
- "5430:5432"
|
||||||
|
environment:
|
||||||
|
POSTGRES_PASSWORD: infisical
|
||||||
|
POSTGRES_USER: infisical
|
||||||
|
POSTGRES_DB: infisical-test
|
||||||
|
|
||||||
|
db-migration:
|
||||||
|
container_name: infisical-db-migration
|
||||||
|
depends_on:
|
||||||
|
- db
|
||||||
|
build:
|
||||||
|
context: ./backend
|
||||||
|
dockerfile: Dockerfile.dev
|
||||||
|
env_file: .env
|
||||||
|
environment:
|
||||||
|
- DB_CONNECTION_URI=postgres://infisical:infisical@db/infisical?sslmode=disable
|
||||||
|
command: npm run migration:latest
|
||||||
|
volumes:
|
||||||
|
- ./backend/src:/app/src
|
||||||
|
|
||||||
|
backend:
|
||||||
|
container_name: infisical-dev-api
|
||||||
|
build:
|
||||||
|
context: ./backend
|
||||||
|
dockerfile: Dockerfile.dev
|
||||||
|
depends_on:
|
||||||
|
db:
|
||||||
|
condition: service_started
|
||||||
|
redis:
|
||||||
|
condition: service_started
|
||||||
|
db-migration:
|
||||||
|
condition: service_completed_successfully
|
||||||
|
env_file:
|
||||||
|
- .env
|
||||||
|
ports:
|
||||||
|
- 4000:4000
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=development
|
||||||
|
- DB_CONNECTION_URI=postgres://infisical:infisical@db/infisical?sslmode=disable
|
||||||
|
- TELEMETRY_ENABLED=false
|
||||||
|
volumes:
|
||||||
|
- ./backend/src:/app/src
|
||||||
|
extra_hosts:
|
||||||
|
- "host.docker.internal:host-gateway"
|
||||||
|
|
||||||
|
frontend:
|
||||||
|
container_name: infisical-dev-frontend
|
||||||
|
restart: unless-stopped
|
||||||
|
depends_on:
|
||||||
|
- backend
|
||||||
|
build:
|
||||||
|
context: ./frontend
|
||||||
|
dockerfile: Dockerfile.dev
|
||||||
|
volumes:
|
||||||
|
- ./frontend/src:/app/src/ # mounted whole src to avoid missing reload on new files
|
||||||
|
- ./frontend/public:/app/public
|
||||||
|
env_file: .env
|
||||||
|
environment:
|
||||||
|
- NEXT_PUBLIC_ENV=development
|
||||||
|
- INFISICAL_TELEMETRY_ENABLED=false
|
||||||
|
|
||||||
|
pgadmin:
|
||||||
|
image: dpage/pgadmin4
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
PGADMIN_DEFAULT_EMAIL: admin@example.com
|
||||||
|
PGADMIN_DEFAULT_PASSWORD: pass
|
||||||
|
ports:
|
||||||
|
- 5050:80
|
||||||
|
depends_on:
|
||||||
|
- db
|
||||||
|
|
||||||
|
smtp-server:
|
||||||
|
container_name: infisical-dev-smtp-server
|
||||||
|
image: lytrax/mailhog:latest # https://github.com/mailhog/MailHog/issues/353#issuecomment-821137362
|
||||||
|
restart: always
|
||||||
|
logging:
|
||||||
|
driver: "none" # disable saving logs
|
||||||
|
ports:
|
||||||
|
- 1025:1025 # SMTP server
|
||||||
|
- 8025:8025 # Web UI
|
||||||
|
|
||||||
|
openldap: # note: more advanced configuration is available
|
||||||
|
image: osixia/openldap:1.5.0
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
LDAP_ORGANISATION: Acme
|
||||||
|
LDAP_DOMAIN: acme.com
|
||||||
|
LDAP_ADMIN_PASSWORD: admin
|
||||||
|
ports:
|
||||||
|
- 389:389
|
||||||
|
- 636:636
|
||||||
|
volumes:
|
||||||
|
- ldap_data:/var/lib/ldap
|
||||||
|
- ldap_config:/etc/ldap/slapd.d
|
||||||
|
profiles: [ldap]
|
||||||
|
|
||||||
|
phpldapadmin: # username: cn=admin,dc=acme,dc=com, pass is admin
|
||||||
|
image: osixia/phpldapadmin:latest
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
- PHPLDAPADMIN_LDAP_HOSTS=openldap
|
||||||
|
- PHPLDAPADMIN_HTTPS=false
|
||||||
|
ports:
|
||||||
|
- 6433:80
|
||||||
|
depends_on:
|
||||||
|
- openldap
|
||||||
|
profiles: [ldap]
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
postgres-data:
|
||||||
|
driver: local
|
||||||
|
postgres-slave-data:
|
||||||
|
driver: local
|
||||||
|
redis_data:
|
||||||
|
driver: local
|
||||||
|
ldap_data:
|
||||||
|
ldap_config:
|
||||||
Reference in New Issue
Block a user