From 104bb88be0730174ad3bf376eff3986ec9a6d231 Mon Sep 17 00:00:00 2001
From: Eric F <admin@digitribe.fr>
Date: Wed, 10 Jun 2026 21:58:54 -0400
Subject: [PATCH] CitrineOS Operator UI deployed and operational, Hasura
 configured

---
 config/docker-compose-citrineos.yml | 45 ++++++++++++++++++++---------
 1 file changed, 31 insertions(+), 14 deletions(-)

diff --git a/config/docker-compose-citrineos.yml b/config/docker-compose-citrineos.yml
index c56824e..c479488 100644
--- a/config/docker-compose-citrineos.yml
+++ b/config/docker-compose-citrineos.yml
@@ -15,21 +15,13 @@ services:
       BOOTSTRAP_CITRINEOS_DATABASE_HOST: "cariflex-citrineos-db"
       BOOTSTRAP_CITRINEOS_CONFIG_FILENAME: "config.json"
       BOOTSTRAP_CITRINEOS_FILE_ACCESS_TYPE: "local"
-      BOOTSTRAP_CITRINEOS_FILE_ACCESS_LOCAL_DEFAULT_FILE_PATH: "/data"
+      BOOTSTRAP_CITRINEOS_FILE_ACCESS_LOCAL_FILE_PATH: "/data"
       CONFIG_CITRINEOS_WIPE_FILE_ON_START: "true"
     depends_on:
       cariflex-citrineos-db:
         condition: service_healthy
       cariflex-amqp:
         condition: service_healthy
-    ports:
-      - "8081:8080"
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.citrineos.rule=Host(`citrineos.digitribe.fr`)"
-      - "traefik.http.routers.citrineos.entrypoints=websecure"
-      - "traefik.http.routers.citrineos.tls.certresolver=letsencrypt"
-      - "traefik.http.services.citrineos.loadbalancer.server.port=8080"
     volumes:
       - citrineos-data:/data
     healthcheck:
@@ -38,7 +30,6 @@ services:
       timeout: 10s
       retries: 5
     networks:
-      - traefik-public
       - cariflex-internal
 
   cariflex-citrineos-db:
@@ -84,21 +75,47 @@ services:
       - traefik-public
       - cariflex-internal
 
+  hasura:
+    image: hasura/graphql-engine:v2.40.0
+    container_name: cariflex-hasura
+    restart: unless-stopped
+    ports:
+      - "8082:8080"
+    environment:
+      HASURA_GRAPHQL_DATABASE_URL: "postgresql://citrine:***@cariflex-citrineos-db:5432/citrine"
+      HASURA_GRAPHQL_ENABLE_CONSOLE: "true"
+      HASURA_GRAPHQL_DEV_MODE: "true"
+      HASURA_GRAPHQL_ADMIN_SECRET: "Digitribe972"
+      HASURA_GRAPHQL_UNAUTHORIZED_ROLE: "anonymous"
+    depends_on:
+      cariflex-citrineos-db:
+        condition: service_healthy
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.hasura.rule=Host(`hasura.digitribe.fr`)"
+      - "traefik.http.routers.hasura.entrypoints=websecure"
+      - "traefik.http.routers.hasura.tls.certresolver=letsencrypt"
+      - "traefik.http.services.hasura.loadbalancer.server.port=8080"
+    networks:
+      - traefik-public
+      - cariflex-internal
+
   citrineos-operator-ui:
-    build:
-      context: /home/eric/citrineos
-      dockerfile: /home/eric/citrineos/citrineos-operator-ui/Dockerfile
+    image: citrineos-operator-ui:latest
     container_name: cariflex-citrineos-operator-ui
     restart: unless-stopped
     ports:
       - "3002:3000"
     environment:
       - NODE_ENV=production
+      - HASURA_URL=http://cariflex-hasura:8080
+      - HASURA_ADMIN_SECRET=Digitribe972
     depends_on:
       - citrineos-server
+      - hasura
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.citrineos-ui.rule=Host(`citrine.digitribe.fr`)"
+      - "traefik.http.routers.citrineos-ui.rule=Host(`citrineos.digitribe.fr`)"
       - "traefik.http.routers.citrineos-ui.entrypoints=websecure"
       - "traefik.http.routers.citrineos-ui.tls.certresolver=letsencrypt"
       - "traefik.http.services.citrineos-ui.loadbalancer.server.port=3000"