Пример файла конфигурации переменных окружения Docker Compose#

# Домен Kintsugi 
DOMAIN=kintsugi.localhost

# Базовые образы
BASE_IMAGE=redhat/ubi8:8.10
FRONTEND_BASE_IMAGE=nginx:1.27.2
PGEXPLAIN_BASE_IMAGE=nodejs-24:ubi-8.5-226
JDK_IMAGE=eclipse-temurin:11.0.28_6-jre
DB_IMAGE=postgres:15
KEYCLOAK_IMAGE=keycloak/keycloak:23.0.4
OPENRESTY_IMAGE=openresty/openresty:1.25.3.2-0-alpine-fat
VM_IMAGE=victoriametrics/victoria-metrics:v1.120.0
VMAUTH_IMAGE=victoriametrics/vmauth:v1.120.0

# Настройка баз данных
PGDATA=/pgdata/data
POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
KINTSUGI_REPO_DBNAME=kintsugi
KINTSUGI_REPO_USER_FILE=/run/secrets/repository_username
KINTSUGI_REPO_PASSWORD_FILE=/run/secrets/repository_password
KINTSUGI_THRESHOLDS_DBNAME=thresholds
KINTSUGI_THRESHOLDS_USER_FILE=/run/secrets/thresholds_username
KINTSUGI_THRESHOLDS_PASSWORD_FILE=/run/secrets/thresholds_password
KINTSUGI_AGENTS_DBNAME=agents
KINTSUGI_AGENTS_USER_FILE=/run/secrets/agents_username
KINTSUGI_AGENTS_PASSWORD_FILE=/run/secrets/agents_password
KINTSUGI_DBPERF_DBNAME=dbperf
KINTSUGI_DBPERF_USER_FILE=/run/secrets/dbperf_username
KINTSUGI_DBPERF_PASSWORD_FILE=/run/secrets/dbperf_password
KINTSUGI_PGEXPLAINDB_DBNAME=pgexplaindb
KINTSUGI_PGEXPLAINDB_USER_FILE=/run/secrets/pgexplaindb_username
KINTSUGI_PGEXPLAINDB_PASSWORD_FILE=/run/secrets/pgexplaindb_password

# Victoria Metrics
VMAUTH_USER=<username>
VMAUTH_PASSWORD=<password>
VM_STORAGE_PATH=/victoria-metrics-data
VM_RETENTION_PERIOD=5d

# Настройка Keycloak
KINTSUGI_KEYCLOAK_USER=admin
KINTSUGI_KEYCLOAK_INIT_PASSWORD=admin
KINTSUGI_REALM_CLIENT_ID=kintsugi
KINTSUGI_REALM_CLIENT_SECRET=<СОДЕРЖАНИЕ СЕКРЕТА>
KC_PROXY=edge
KC_IMPORT_REALM='true'
KC_DB_URL='jdbc:postgresql://database.internal:5432/'
KC_DB=postgres
KC_DB_USERNAME=postgres
KC_DB_PASSWORD=postgres
KC_HTTP_ENABLED='false'
KC_HOSTNAME_STRICT_HTTPS='false'
KC_HOSTNAME_STRICT='false'
KEYCLOAK_ADMIN=admin
KEYCLOAK_ADMIN_PASSWORD=admin
KC_HOSTNAME_ADMIN=${DOMAIN}
KC_AUTO_BUILD='true'
KC_HTTP_PORT=8080
KC_LOG_LEVEL=INFO
KC_HEALTH_ENABLED=true
KC_HTTPS_CERTIFICATE_FILE=/opt/keycloak/conf/truststores/certs/cert.pem
KC_HTTPS_CERTIFICATE_KEY_FILE=/opt/keycloak/conf/truststores/certs/key.pem
KC_HTTPS_PROTOCOLS=TLSv1.3,TLSv1.2

# X.509 Certificate lookup provider for NGINX integration
KC_SPI_X509CERT_LOOKUP_PROVIDER=nginx
KC_SPI_X509CERT_LOOKUP_NGINX_ENABLED="true"
KC_SPI_X509CERT_LOOKUP_NGINX_SSL_CERT_CHAIN_PREFIX=USELESS
KC_SPI_X509CERT_LOOKUP_NGINX_CERTIFICATE_CHAIN_LENGTH="10"
KC_SPI_X509CERT_LOOKUP_NGINX_SSL_CLIENT_CERT=x-forwarded-client-cert

# Truststore
KC_SPI_TRUSTSTORE_FILE_FILE=/opt/keycloak/conf/truststores/truststore.jks
KC_SPI_TRUSTSTORE_FILE_TYPE="jks"
KC_SPI_TRUSTSTORE_FILE_PASSWORD=<СОДЕРЖАНИЕ СЕКРЕТА>

# Настройка OpenResty
KEYCLOAK_DOMAIN=${DOMAIN}
KEYCLOAK_REALM=kintsugi
KEYCLOAK_REALM_CLIENT_ID=kintsugi
KEYCLOAK_REALM_CLIENT_SECRET=<СОДЕРЖАНИЕ СЕКРЕТА>

# Настройка Compose
COMPOSE_PROJECT_NAME=kintsugi