---
# nocheck: seaweedfs-required — object storage not implemented for this role
sso:
bond: 1
enabled: "{{ 'web-app-keycloak' in group_names }}"
shared: "{{ 'web-app-keycloak' in group_names }}"
flavor: saml
logout:
bond: 1
enabled: "{{ 'web-svc-logout' in group_names }}"
shared: "{{ 'web-svc-logout' in group_names }}"
ldap:
bond: 1
enabled: "{{ 'svc-db-openldap' in group_names }}"
shared: "{{ 'svc-db-openldap' in group_names }}"
dashboard:
bond: 1
enabled: "{{ 'web-app-dashboard' in group_names }}"
shared: "{{ 'web-app-dashboard' in group_names }}"
matomo:
bond: 1
enabled: "{{ 'web-app-matomo' in group_names }}"
shared: "{{ 'web-app-matomo' in group_names }}"
email:
bond: 1
enabled: "{{ MAIL_PROVIDER in group_names }}"
shared: "{{ MAIL_PROVIDER in group_names }}"
mariadb:
bond: 1
enabled: true # nocheck: dynamic-flag
shared: "{{ 'svc-db-mariadb' in group_names }}"
# nocheck: playwright-service-flag — session store behind every request, no Playwright surface of its own
redis:
bond: 1
backup:
disabled: true
enabled: true # nocheck: dynamic-flag
shared: "{{ 'svc-db-redis' in group_names }}"
cpus: "0.25"
mem_reservation: 128m
mem_limit: 256m
pids_limit: 256
# nocheck: playwright-service-flag — self-provider entry; test_env_services_match.py:28-32 grants the forbidden-self-gate exemption
suitecrm:
healthcheck:
flavor: curl
# nocheck: healthcheck-timing-override boots slower than the ten minute window; the value predates this default and has not been measured against it
start_period: 20m
modes:
compose:
enabled: true
swarm:
enabled: true
bond: 1
enabled: true # nocheck: dynamic-flag
shared: true
image: php
# TODO: Make SuiteCRM compatible with PHP 8.5; update currently not possible. Reason: intentional legacy pin.
# nocheck: docker-version
version: 8.2-apache
custom: true
app_version: 8.10.2
phpredis_version: 6.3.0
update:
- key: app_version
type: git_tags
repository: https://github.com/salesagility/SuiteCRM-Core.git
match: "v"
strip: true
- key: phpredis_version
type: git_tags
repository: https://github.com/phpredis/phpredis.git
name: suitecrm
min_storage: 376MB
cpus: 1.5
mem_reservation: 1.2g
mem_limit: 2g
pids_limit: 768
email:
from_name: Customer Relationship Management (SuiteCRM, {{ DOMAIN_PRIMARY }})
ports:
local:
http: 8062
internal:
http: 80
run_after:
- web-app-keycloak
- web-app-stalwart
- web-app-mailu
- web-app-matomo
lifecycle: beta
css:
bond: 1
enabled: "{{ 'web-svc-css' in group_names }}"
shared: "{{ 'web-svc-css' in group_names }}"
prometheus:
bond: 1
enabled: "{{ 'web-app-prometheus' in group_names }}"
shared: "{{ 'web-app-prometheus' in group_names }}"
# nocheck: playwright-service-flag
# nocheck: variants-coverage — sso-variant-tor requires the onion on in every variant, so the false polarity has no variant left to live in
tor:
bond: 0.5
enabled: "{{ 'svc-net-tor' in group_names }}"
shared: true # nocheck: dynamic-flag
# nocheck: playwright-service-flag, dynamic-flag infrastructure backup consumer
container_backup: # nocheck: bond-baseline backup host joins outside the variant topology
bond: 1
enabled: "{{ 'svc-bkp-volume-2-local' in group_names }}"
shared: true
