version: '3'

services:
  zookeeper:
    image: confluentinc/cp-zookeeper:7.9.0
    container_name: zookeeper
    environment:
      ZOOKEEPER_CLIENT_PORT: 2181
      ZOOKEEPER_TICK_TIME: 2000
    ports:
      - "2181:2181"

  kafka:
    image: confluentinc/cp-kafka:7.9.0
    container_name: kafka
    volumes:
      - /workspaces/bad-java/creds:/etc/kafka/secrets/
    depends_on:
      - zookeeper
    environment:
      KAFKA_BROKER_ID: 1
      KAFKA_ZOOKEEPER_CONNECT: 'zookeeper:2181'
      KAFKA_ADVERTISED_LISTENERS: 'PLAINTEXT://kafka:9092,SSL://localhost:9093'
      KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: 'PLAINTEXT:PLAINTEXT,SSL:SSL'
      KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
      KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
      KAFKA_SSL_KEYSTORE_FILENAME: kafka.pfx
      KAFKA_SSL_KEYSTORE_TYPE: PKCS12
      KAFKA_SSL_CLIENT_AUTH: required
      KAFKA_SSL_KEYSTORE_CREDENTIALS: empty
      KAFKA_SSL_KEY_CREDENTIALS: empty
      KAFKA_SSL_TRUSTSTORE_FILENAME: kafka.pfx
      KAFKA_SSL_TRUSTSTORE_CREDENTIALS: empty
      KAFKA_SSL_TRUSTSTORE_TYPE: PKCS12
    ports:
      - "9092:9092"
      - "9093:9093"