deploy.aop-demoshop-b2b.yml

version: "0.1"

x-real-ip: &real-ip
    real-ip:
        from:
            - 10.0.0.0/8 # AWS VPC network
            - 103.21.244.0/22 # Cloudflare
            - 103.22.200.0/22 # Cloudflare
            - 103.31.4.0/22 # Cloudflare
            - 104.16.0.0/12 # Cloudflare
            - 108.162.192.0/18 # Cloudflare
            - 131.0.72.0/22 # Cloudflare
            - 141.101.64.0/18 # Cloudflare
            - 162.158.0.0/15 # Cloudflare
            - 172.64.0.0/13 # Cloudflare
            - 173.245.48.0/20 # Cloudflare
            - 188.114.96.0/20 # Cloudflare
            - 190.93.240.0/20 # Cloudflare
            - 197.234.240.0/22 # Cloudflare
            - 198.41.128.0/17 # Cloudflare
            - 2400:cb00::/32 # Cloudflare
            - 2606:4700::/32 # Cloudflare
            - 2803:f800::/32 # Cloudflare
            - 2405:b500::/32 # Cloudflare
            - 2405:8100::/32 # Cloudflare
            - 2c0f:f248::/32 # Cloudflare
            - 2a06:98c0::/29 # Cloudflare

x-frontend-auth: &frontend-auth
    <<: *real-ip
    auth:
        engine: basic
        users:
            -   username: cloud # must be changed
                password: cloud # must be changed
        exclude:
            - '${ALLOWED_IP}' # AWS gateway
            - 185.60.20.0/24 # PayOne

namespace: spryker-cloud
tag: '1.0'

environment: docker.demo

image:
    tag: spryker/php:8.2
    environment:
        SPRYKER_DEFAULT_STORE: "DE"
        SPRYKER_ACTIVE_STORES: ""
        SPRYKER_HOOK_BEFORE_DEPLOY: "vendor/bin/install -r pre-deploy -vvv"
        SPRYKER_HOOK_AFTER_DEPLOY: "true"
        SPRYKER_HOOK_INSTALL: "vendor/bin/install -r production --no-ansi -vvv"
        SPRYKER_HOOK_DESTRUCTIVE_INSTALL: "vendor/bin/install -r destructive --no-ansi -vvv"
        SPRYKER_YVES_HOST_DE: www.de.aop-b2b.demo-spryker.com
        SPRYKER_DYNAMIC_STORE_MODE: true

        #AOP
        SPRYKER_TENANT_IDENTIFIER: "AOP_Demo_B2B-DE"
        SPRYKER_MESSAGE_BROKER_HTTP_CHANNEL_SENDER_BASE_URL: "https://publish.mb-staging.acp.demo-spryker.com/"
        SPRYKER_MESSAGE_BROKER_HTTP_CHANNEL_RECEIVER_BASE_URL: "https://consume.mb-staging.acp.demo-spryker.com/"

        SPRYKER_AOP_APPLICATION: '{
            "APP_DOMAINS": [
                "os.apps-staging.aop.demo-spryker.com",
                "stripe-staging.acp.demo-spryker.com",
                "*.bazaarvoice.com"
            ],
            "APP_CATALOG_SCRIPT_URL": "https://app-catalog.atrs-staging.demo-spryker.com/loader"
        }'

    php:
        ini:
            opcache.interned_strings_buffer: 32
        enabled-extensions:
            - blackfire
            - newrelic
    node:
        version: 18
        npm: 9

composer:
    mode: --no-dev
    autoload: --classmap-authoritative

assets:
    image: fholzer/nginx-brotli:v1.18.0
    mode: production
    compression:
        brotli:
            static: only
        gzip:
            static: true
            level: 5

regions:
    EU:
        services:
            database:
                database: aop_demoshop_b2b
                username: spryker
                password: secret
        broker:
            namespace: de_queue
        key_value_store:
            namespace: 1
        search:
            namespace: de_search
        session:
            namespace: 2

groups:
    EU:
        region: EU
        applications:
            Redirects:
                application: static
                endpoints:
                    aop-b2b.demo-spryker.com:
                        region: EU
                        redirect:
                            type: 302
                            url: www.de.aop-b2b.demo-spryker.com
                    de.aop-b2b.demo-spryker.com:
                        region: EU
                        redirect:
                            code: 302
                            url: www.de.aop-b2b.demo-spryker.com
            yves:
                application: yves
                endpoints:
                    www.de.aop-b2b.demo-spryker.com:
                        region: EU
                        <<: *frontend-auth
            boffice:
                application: backoffice
                endpoints:
                    backoffice.de.aop-b2b.demo-spryker.com:
                        region: EU
                        <<: *frontend-auth
            backgw:
                application: backend-gateway
                endpoints:
                    backend-gateway.de.aop-b2b.demo-spryker.com:
                        region: EU
            Glue:
                application: glue
                endpoints:
                    glue.de.aop-b2b.demo-spryker.com:
                        region: EU
            mportal:
                application: merchant-portal
                endpoints:
                    mp.de.aop-b2b.demo-spryker.com:
                        region: EU
                        entry-point: MerchantPortal
                        primal: true

services:
    database:
        engine: mysql
        version: mariadb-10.5
        root:
            username: "root"
            password: "secret"
        endpoints:
            localhost:3306:
                protocol: tcp
    broker:
        engine: rabbitmq
        version: '3.9'
        api:
            username: "spryker"
            password: "secret"
        endpoints:
            queue.aop-b2b.demo-spryker.com:
            localhost:5672:
                protocol: tcp
    session:
        engine: redis
    key_value_store:
        engine: redis
        endpoints:
            localhost:16379:
                protocol: tcp
    search:
        engine: elastic
        version: '7.10'
        endpoints:
            localhost:9200:
                protocol: tcp
    scheduler:
        engine: jenkins
        csrf-protection-enabled: true
        endpoints:
            scheduler.aop-b2b.demo-spryker.com:
    mail_catcher:
        engine: mailhog
        endpoints:
            mail.aop-b2b.demo-spryker.com:

docker:

    blackfire:
        enabled: false

    ssl:
        enabled: true
        redirect: true

    debug:
        enabled: false
        xdebug:
            enabled: false

    testing:
        region: EU

    mount:
        baked: