From 90b8e594920a391a25f30bd868b4c64c63b88cb7 Mon Sep 17 00:00:00 2001
From: Basil Bruhn <basil.bruhn@psi.ch>
Date: Wed, 14 Jan 2026 14:59:34 +0100
Subject: [PATCH] =?UTF-8?q?initial=20commit=20f=C3=BCr=20tia=20core=20mit?=
 =?UTF-8?q?=20schmidt=20michael?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
---
 conf.d/archivsap.conf | 21 +++++++++++++++++++++
 docker-compose.yaml   | 23 +++++++++++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 conf.d/archivsap.conf

diff --git a/conf.d/archivsap.conf b/conf.d/archivsap.conf
new file mode 100644
index 0000000..9ad257d
--- /dev/null
+++ b/conf.d/archivsap.conf
@@ -0,0 +1,21 @@
+server {
+    listen 80;
+    server_name saparchive.psi.ch;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name saparchive.psi.ch;
+
+    ssl_certificate /etc/nginx/certs/saparchive.psi.ch.crt;
+    ssl_certificate_key /etc/nginx/private/saparchive.psi.ch.key;
+
+    location / {
+        proxy_pass http://tiacore-test:9443;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
diff --git a/docker-compose.yaml b/docker-compose.yaml
index c8a456f..203feca 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -283,6 +283,29 @@ services:
       - backend
       - panda_maintenance_backend
 
+  tiacore:
+    container_name: tiacore-test
+    image: images.kgs-cloud.de/tia/core/saphttp:3.17.1
+    volumes:
+      - /opt/webcontent/tiacore-test/config/license:/application/license
+      # - /opt/kgs/docker/tiacore-P/config/keystore:/application/ssl/keystore
+      - /opt/webcontent/tiacore-test/config:/application/config/
+      # - /opt/kgs/docker/tiacore-P/data:/application/data
+      # - /opt/kgs/docker/certificates:/application/ssl
+    environment:
+      LOGGING_LEVEL_ROOT: INFO
+      # Authentifizierung für WebUI
+      WEBAPP_SECURITY_AUTH_BASIC_USERNAME: admin
+      WEBAPP_SECURITY_AUTH_BASIC_PASSWORD: "$$2a$$10$$5E1KpGIKSq6xuWmGf92bheB17V0l4fEMnVmYPqhWiazKddcx1TF/e"
+
+      # SSL Keystore
+     #  SERVER_PORT: 9443
+     #  SERVER_SSL_KEYSTORE: /application/ssl/core_keystore.p12
+     #  SERVER_SSL_KEYSTOREPASSWORD: changeme
+     #  SERVER_SSL_KEYALIAS: kgs
+     #  SERVER_SSL_ENABLED: "true"
+    networks:
+      - backend
 
 networks:
   public: