Getting Started

./mvnw spring-boot:run -Dspring-boot.run.profiles=local

./mvnw spring-boot:run -Dmanagement.server.port=8081

  mongodb:
    image: mongo:4
    ports:
      - "27017:27017"
    environment:
      - MONGODB_EXTRA_FLAGS=--profile=2
    volumes:
      - mongodb-data:/data/db
  clamav:
    ports:
      - '3310:3310'
    image: 'docker.ozg-sh.de/clamav/clamav:stable'
  clamav-api:
    image: benzino77/clamav-rest-api
    command: [ '/usr/bin/wait-for-it', '-h', 'lt-clamav', '-p', '3310', '-s', '-t', '300', '--', 'npm', 'start' ]
    depends_on:
      - clamav
    environment:
      - NODE_ENV=production
      - CLAMD_IP=lt-clamav
      - APP_FORM_KEY=FILES
      - APP_PORT=3000
      - APP_MAX_FILE_SIZE=26214400
    ports:
      - "3000:3000"
  info-manager:
    image: 'docker.ozg-sh.de/info-manager:snapshot-latest'
    platform: linux/amd64
    ports:
      - '9091:9091'
      - '8084:8084'
    environment:
      - SPRING_DATA_MONGODB_HOST=lt-mongodb
      - SPRING_DATA_MONGODB_PORT=27017
      - SPRING_DATA_MONGODB_DATABASE=lt-info-manager
      - GRPC_SERVER_PORT=9091
      - SPRING_PROFILES_ACTIVE=default
      - MANAGEMENT_SERVER_PORT=8084
      - SERVER_PORT=8083
      - logging_level_de_ozgcloud=INFO
  info-manager-proxy:
    image: 'docker.ozg-sh.de/info-manager-proxy:snapshot-latest'
    ports:
      - 8381:8082
    environment:
      - HTTP_SERVER_PORT=8082
      - GRPC_SERVER_MOCK=false
      - GRPC_URL=lt-info-manager:9091
      - LOGGING_LEVEL=DEBUG
    depends_on:
      - info-manager
  antragraum-server:
    image: 'docker.ozg-sh.de/antragsraum-server:snapshot-latest'
    platform: linux/amd64
    ports:
      - '9090:9090'
      - '8080:8080'
      - '8081:8081'
    environment:
      - SPRING_PROFILES_ACTIVE=lasttest
      - ozgcloud_jwt_secret="346593nbdgb8e74t6vw477q34bg83456§$$%/&Hgvt78hlsjdgfw8äy.skeiw44tz asjkdefa wlfugwegw"
      - ozgcloud_antragsraum_bayernid_redirect-url=http://localhost:8082
      - clamav_scanUrl=http://clamav-api:3000/api/v1/scan
      - logging_level_org_springframework_web=INFO
      - SPRING_SECURITY_SAML2_RELYINGPARTY_REGISTRATION_BAYERNID_ENTITY-ID=https://sso.load.by.ozg-cloud.de/realms/by-antragsraum-idp
      - SPRING_SECURITY_SAML2_RELYINGPARTY_REGISTRATION_BAYERNID_ASSERTINGPARTY_METADATA-URI=https://sso.dev.by.ozg-cloud.de/realms/by-antragsraum-idp/protocol/saml/descriptor
      - SPRING_SECURITY_SAML2_RELYINGPARTY_REGISTRATION_BAYERNID_SIGNING_CREDENTIALS_0_PRIVATE-KEY-LOCATION=file:///idp.key
      - SPRING_SECURITY_SAML2_RELYINGPARTY_REGISTRATION_BAYERNID_SIGNING_CREDENTIALS_0_CERTIFICATE-LOCATION=file:///idp.crt
      - SPRING_SECURITY_SAML2_RELYINGPARTY_REGISTRATION_BAYERNID_DECRYPTION_CREDENTIALS_0_PRIVATE-KEY-LOCATION=file:///idp.key
      - SPRING_SECURITY_SAML2_RELYINGPARTY_REGISTRATION_BAYERNID_DECRYPTION_CREDENTIALS_0_CERTIFICATE-LOCATION=file:///idp.crt
    volumes:
      - type: bind
        source: bayernid-dev-sign.crt
        target: /idp.crt
        read_only: true
      - type: bind
        source: bayernid-dev-sign.key
        target: /idp.key
        read_only: true
  antragraum-proxy:
    image: 'docker.ozg-sh.de/antragsraum-proxy:snapshot-latest'
    ports:
      - 8383:8082
    environment:
      - HTTP_SERVER_PORT=8082
      - GRPC_SERVER_MOCK=false
      - GRPC_SERVER_PORT=9093
    deploy:
      resources:
        limits:
          cpus: '0.001'
          memory: 50M
        reservations:
          cpus: '0.0001'
          memory: 20M

ozgcloud:
    antragsraum:
        nachricht-proxy:
            base-url: http://localhost:8383
        infomanager-proxy:
            base-url: http://localhost:8381
clamav:
    scanUrl: http://127.0.0.1:3000/api/v1/scan # The REST endpoint for virus scans
ozgcloud:
    code:
        expire:
            seconds: 30 # Time in seconds after the login code expires
    jwt:
        secret: "346593nbdgb8e74t6vw477q34bg83456§$%/&Hgvt78hlsjdgfw8äy.skeiw44tz asjkdefa wlfugwegw"
        # Secret of signing the Jwt Token provided to the front end.
    antragsraum:                
        logoutSuccessUrl: "http://localhost:8082/?logout"  # The redirect url after a logout
        authOrigins:            # the access-allow-oring setting for the authentication endpoints
            - "http://localhost:8082"
            - "http://localhost:8080"
        apiOrigins:             # the access-allow-oring setting for the rest endpoints
            - "http://localhost:8082"
        otherOrigins:           # the access-allow-oring setting for other path like static files etc.
            - "http://localhost:8082"

curl -F file=@</path/to/the/file/file_name>  http://localhost:8080/api/file/6358fd0bee7a051389cdd787/6358fd4146811d04010f44d1 -v

spring:
  security:
    saml2:
      relyingparty:
        registration:
          bayernid:
            entity-id: "https://sso.dev.by.ozg-cloud.de/realms/by-antragsraum-idp"
            signing:
              credentials:
                - private-key-location: "classpath:/bayernid-dev-sign.key"
                  certificate-location: "classpath:/bayernid-dev-sign.crt"
            decryption:
              credentials:
                - private-key-location: "classpath:/bayernid-dev-sign.key"
                  certificate-location: "classpath:/bayernid-dev-sign.crt"
            assertingparty:
              singlesignon:
                sign-request: true
              metadata-uri: "https://sso.dev.by.ozg-cloud.de/realms/by-antragsraum-idp/protocol/saml/descriptor"      

Clone the repository https://github.com/OpenConext/Mujina
build the container using maven in the directory mujina-idp. mvn spring-boot:build-image -DskipTests
Tag the image docker tag mujina-idp:8.0.11 docker.ozg-sh.de/mujina-idp:8.0.11
Push the image docker push docker.ozg-sh.de/mujina-idp:8.0.11