#for tsg-diagnose
version: '2.2'
services:

  server_web:
    image: "dign-server-web:latest"
    container_name: "dign-server-web"
    tty: true
    privileged: true
    networks:
      server_macvlan_net:
        ipv4_address: 192.0.2.130
        ipv6_address: fd00:a1bf:2c3d:ef5a:1e2f:3d4c:56ab:1010
      bridge_direct_net:
        ipv4_address: 192.51.100.2
    volumes:
     - /opt/tsg/tsg-diagnose/etc/.certs_import:/badssl.com/certs_import
     - /etc/localtime:/etc/localtime:ro
    command: >
      bash -c "ifconfig eth0 hw ether 02:42:c0:a8:fd:82
      && arp -i eth0 -s 192.0.2.3 02:42:C0:A8:FD:03 
      && cp -r /badssl.com/certs_import/certs /badssl.com/certs_import/common /badssl.com
      && make inside-docker
      && nginx
      && tail -f /dev/null"


  server_dns:
      image: "dign-server-dns:latest"
      container_name: "dign-server-dns"
      tty: true
      privileged: true
      networks:
        server_macvlan_net:
          ipv4_address: 192.0.2.135
          ipv6_address: fd00:a1bf:2c3d:ef5a:1e2f:3d4c:56ab:1015
        bridge_direct_net:
          ipv4_address: 192.51.100.5
      volumes:
        - /opt/tsg/tsg-diagnose/etc/dnsmasq.conf:/etc/dnsmasq.conf
        - /etc/localtime:/etc/localtime:ro
      entrypoint: /bin/sh
      command:
        - -c 
        - |
          ifconfig eth0 hw ether 02:42:C0:A8:FD:85
          arp -i eth0 -s 192.0.2.3 02:42:C0:A8:FD:03
          echo 66.66.66.66  www.1testanswer-cname.com >> /etc/hosts
          webproc --config /etc/dnsmasq.conf -- dnsmasq --no-daemon &
          tail -f /dev/null

  client:
    image: "dign-client:latest"
    container_name: "dign-client"
    depends_on: 
      - server_web
      - server_dns
    tty: true
    privileged: true
    networks:
      client_macvlan_net:
        ipv4_address: 192.0.2.3
        ipv6_address: fd00:a1bf:2c3d:ef5b:6e7f:8d9c:abfe:1012
      bridge_direct_net:
        ipv4_address: 192.51.100.4
    volumes:
     - /opt/tsg/tsg-diagnose/etc/.certs_import:/opt/dign_client/etc/certs_import
     - /opt/tsg/tsg-diagnose/log:/opt/dign_client/log
     - /opt/tsg/tsg-diagnose/etc/client.conf:/opt/dign_client/etc/client.conf
     - /etc/localtime:/etc/localtime:ro
    command: 
      - /bin/sh
      - -c
      - |
        /opt/dign_client/bin/wait-for 192.51.100.2:443  -t 60 -- echo "server web is up"
        /opt/dign_client/bin/wait-for 192.51.100.5:8080 -t 60 -- echo "server dns is up"
        ifconfig eth0 hw ether 02:42:C0:A8:FD:03
        arp -i eth0 -s 192.0.2.130 02:42:c0:a8:fd:82
        arp -i eth0 -s 192.0.2.131 02:42:C0:A8:FD:83
        arp -i eth0 -s 192.0.2.135 02:42:C0:A8:FD:85
        mkdir -p /opt/dign_client/log
        cp -rf /opt/dign_client/etc/certs_import/certs/sets/current/gen/crt/ca-root.crt /usr/local/share/ca-certificates
        update-ca-certificates
        cat /opt/dign_client/etc/hosts >> /etc/hosts
        tail -f /dev/null


networks: 
  bridge_direct_net:
    name: dign-direct-bridge
    driver: bridge
    ipam:
      config:
        - subnet: 192.51.100.0/24
          gateway: 192.51.100.1

  server_macvlan_net: 
    name: dign-server-macvlan
    driver: macvlan
    enable_ipv6: true
    driver_opts: 
      parent: eth_vf_dign_s
    ipam: 
      config: 
        - subnet: 192.0.2.0/24
          ip_range: 192.0.2.128/25  
          gateway: 192.0.2.129
        - subnet: fd00:a1bf:2c3d:ef5a::/63
          ip_range: fd00:a1bf:2c3d:ef5a::/64
          gateway: fd00:a1bf:2c3d:ef5a::1010

  client_macvlan_net:
    name: dign-client-macvlan
    driver: macvlan
    enable_ipv6: true
    driver_opts:
      parent: eth_vf_dign_c
    ipam:
      config:
        - subnet: 192.0.2.0/24
          ip_range: 192.0.2.0/25
          gateway: 192.0.2.1
        - subnet: fd00:a1bf:2c3d:ef5a::/63
          ip_range: fd00:a1bf:2c3d:ef5b::/64
          gateway: fd00:a1bf:2c3d:ef5a::1011