Blame view

docker-compose-jfrog.yml 5.64 KB
1f3a6f168   George Vlahavas   Add docker-compos...
1
2
3
4
5
6
7
8
  version: '3'
  
  services:
   
    #CEPTD     
    suricata:
      image: registry.curex-project.eu:443/curex-local/kea_suricata:1.0.1
      container_name: kea_suricata
ba48fa041   George Vlahavas   Set restart to un...
9
      restart: unless-stopped
1f3a6f168   George Vlahavas   Add docker-compos...
10
11
12
13
14
15
16
      network_mode: "host"
      cap_add:
        - NET_ADMIN
        - SYS_NICE
        - NET_RAW
      command: ONLINE
      volumes:
626c0d577   George Vlahavas   Use a docker volu...
17
        - data_volume:/var/log/suricata
36e14711e   George Vlahavas   Put pcap files in...
18
        - pcap_volume:/var/pcap
1f3a6f168   George Vlahavas   Add docker-compos...
19
20
        
    elasticsearch:
eae87d5f9   George Vlahavas   Use our own elast...
21
      image: registry.curex-project.eu:443/curex-local/kea_elasticsearch:1.0.0
1f3a6f168   George Vlahavas   Add docker-compos...
22
      container_name: kea_elasticsearch
ba48fa041   George Vlahavas   Set restart to un...
23
      restart: unless-stopped
1f3a6f168   George Vlahavas   Add docker-compos...
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
      environment:
        - cluster.name=keacluster
        - node.name=keacluster-node-01
        - discovery.type=single-node
        - bootstrap.memory_lock=true
        - "ES_JAVA_OPTS=-Xms1024m -Xmx1024m"
        - xpack.ml.enabled=false
        - xpack.security.enabled=false
        - xpack.ilm.enabled=false
        - path.logs=/data/elk/log
        - path.data=/data/elk/data
        - http.host=0.0.0.0
        - http.cors.enabled=true
        - http.cors.allow-origin="*"
        - indices.query.bool.max_clause_count=2000
      ulimits:
        memlock:
          soft: -1
          hard: -1
1f3a6f168   George Vlahavas   Add docker-compos...
43
      volumes:
626c0d577   George Vlahavas   Use a docker volu...
44
        - data_volume:/data
1f3a6f168   George Vlahavas   Add docker-compos...
45
46
    
    logstash:
08d6788d9   George Vlahavas   Bump kea_logstash...
47
      image: registry.curex-project.eu:443/curex-local/kea_logstash:1.0.2
1f3a6f168   George Vlahavas   Add docker-compos...
48
      container_name: kea_logstash
ba48fa041   George Vlahavas   Set restart to un...
49
      restart: unless-stopped
1f3a6f168   George Vlahavas   Add docker-compos...
50
      volumes:
626c0d577   George Vlahavas   Use a docker volu...
51
52
        - data_volume:/data
    
1f3a6f168   George Vlahavas   Add docker-compos...
53
54
55
    kibana:
      image: registry.curex-project.eu:443/curex-local/kea_kibana:7.6.2
      container_name: kea_kibana
ba48fa041   George Vlahavas   Set restart to un...
56
      restart: unless-stopped
4b1e82575   George Vlahavas   Run kibana on por...
57
58
      ports:
        - "5611:5601"
1f3a6f168   George Vlahavas   Add docker-compos...
59
60
    #Controller      
    webserver:
7ba34b2f7   George Vlahavas   Build our own web...
61
      image: registry.curex-project.eu:443/curex-local/kea_webserver:1.0.0
1f3a6f168   George Vlahavas   Add docker-compos...
62
63
      container_name: kea_webserver
      restart: unless-stopped
611c8fed4   George Vlahavas   Make webserver de...
64
65
      depends_on:
        - api
1f3a6f168   George Vlahavas   Add docker-compos...
66
67
      tty: true
      ports:
c38a59cb0   George Vlahavas   Use port 13880 fo...
68
        - "13880:80"
1f3a6f168   George Vlahavas   Add docker-compos...
69
      volumes:
9ae10ddc7   George Vlahavas   Remove kea prefix...
70
        - api_volume:/var/www
1f3a6f168   George Vlahavas   Add docker-compos...
71
    
1f3a6f168   George Vlahavas   Add docker-compos...
72
    api:
4da73475e   George Vlahavas   Bump kea_api to 1...
73
      image: registry.curex-project.eu:443/curex-local/kea_api:1.3.4
1f3a6f168   George Vlahavas   Add docker-compos...
74
75
      container_name: kea_api
      restart: unless-stopped
c0ea25785   George Vlahavas   Revert "Set tty t...
76
      tty: true
1f3a6f168   George Vlahavas   Add docker-compos...
77
78
      working_dir: /var/www
      volumes:
9ae10ddc7   George Vlahavas   Remove kea prefix...
79
        - api_volume:/var/www
f8f61969c   George Vlahavas   Read environment ...
80
81
82
83
84
      environment:
        - "APP_NAME=${APP_NAME}"
        - "APP_ENV=${APP_ENV}"
        - "APP_DEBUG=${APP_DEBUG}"
        - "APP_URL=${APP_URL}"
fa1611371   George Vlahavas   Add KIBANA_PORT a...
85
86
        - "KIBANA_PORT=${KIBANA_PORT}"
        - "GRAFANA_PORT=${GRAFANA_PORT}"
f8f61969c   George Vlahavas   Read environment ...
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
        - "LOG_CHANNEL=${LOG_CHANNEL}"
        - "DB_CONNECTION=${DB_CONNECTION}"
        - "DB_HOST=${DB_HOST}"
        - "DB_PORT=${DB_PORT}"
        - "DB_DATABASE=${DB_DATABASE}"
        - "DB_USERNAME=${DB_USERNAME}"
        - "DB_PASSWORD=${DB_PASSWORD}"
        - "BROADCAST_DRIVER=${BROADCAST_DRIVER}"
        - "CACHE_DRIVER=${CACHE_DRIVER}"
        - "QUEUE_CONNECTION=${QUEUE_CONNECTION}"
        - "SESSION_DRIVER=${SESSION_DRIVER}"
        - "SESSION_LIFETIME=${SESSION_LIFETIME}"
        - "ELASTICSEARCH_HOST=${ELASTICSEARCH_HOST}"
        - "ELASTICSEARCH_PORT=${ELASTICSEARCH_PORT}"
        - "ELASTICSEARCH_SCHEME=${ELASTICSEARCH_SCHEME}"
        - "MQTT_HOST=${MQTT_HOST}"
        - "MQTT_PORT=${MQTT_PORT}"
        - "MQTT_DEBUG=${MQTT_DEBUG}"
        - "MQTT_QOS=${MQTT_QOS}"
        - "MQTT_RETAIN=${MQTT_RETAIN}"
        - "MLTD_HOST=${MLTD_HOST}"
        - "MLTD_PORT=${MLTD_PORT}"
        - "OD_HOST=${OD_HOST}"
        - "OD_PORT=${OD_PORT}"
1e11ab058   George Vlahavas   Add keycloak vari...
111
112
113
114
115
116
        - "KEYCLOAK_REALM_PUBLIC_KEY=${KEYCLOAK_REALM_PUBLIC_KEY}"
        - "KEYCLOAK_LOAD_USER_FROM_DATABASE=${KEYCLOAK_LOAD_USER_FROM_DATABASE}"
        - "KEYCLOAK_USER_PROVIDER_CREDENTIAL=${KEYCLOAK_USER_PROVIDER_CREDENTIAL}"
        - "KEYCLOAK_TOKEN_PRINCIPAL_ATTRIBUTE=${KEYCLOAK_TOKEN_PRINCIPAL_ATTRIBUTE}"
        - "KEYCLOAK_APPEND_DECODED_TOKEN=${KEYCLOAK_APPEND_DECODED_TOKEN}"
        - "KEYCLOAK_ALLOWED_RESOURCES=${KEYCLOAK_ALLOWED_RESOURCES}"
d72335b14   George Vlahavas   Add AUTH_ENABLED ...
117
        - "AUTH_ENABLED=${AUTH_ENABLED}"
93dcebbea   Chris Bellas   Updated Dockerfil...
118
119
120
121
122
123
124
125
        - "KEYCLOAK_REALM=${KEYCLOAK_REALM}"
        - "KEYCLOAK_URL=${KEYCLOAK_URL}"
        - "KEYCLOAK_CLIENT_ID=${KEYCLOAK_CLIENT_ID}"
        - "KIBANA_URL=${KIBANA_URL}"
        - "GRAFANA_URL=${GRAFANA_URL}"
        - "OD_GRAFANA_PARAMS=${OD_GRAFANA_PARAMS}"
        - "MLTD_GRAFANA_PARAMS=${MLTD_GRAFANA_PARAMS}"
        - "CEPTD_KIBANA_PARAMS=${CEPTD_KIBANA_PARAMS}"
5a67cd764   Thanasis Naskos   updating the envi...
126
127
        - "RSYSLOG_SERVER=${RSYSLOG_SERVER}"
        - "RSYSLOG_PORT=${RSYSLOG_PORT}"
1f3a6f168   George Vlahavas   Add docker-compos...
128
129
130
  
    #OD
    od:
843113be2   George Vlahavas   Bump kea_od to 1.1.0
131
      image: registry.curex-project.eu:443/curex-local/kea_od:1.1.0
1f3a6f168   George Vlahavas   Add docker-compos...
132
133
134
      container_name: kea_od
      depends_on:
        - timescaledb
16f21ad3e   Thanasis Naskos   Fixing sonarqube ...
135
      environment:
850b58c41   Thanasis Naskos   Update OD to dete...
136
137
        - "RSYSLOG_SERVER=${RSYSLOG_SERVER}"
        - "RSYSLOG_PORT=${RSYSLOG_PORT}"
ba48fa041   George Vlahavas   Set restart to un...
138
      restart: unless-stopped
1f3a6f168   George Vlahavas   Add docker-compos...
139
140
141
142
143
      ports:
        - "9091:9091"
    
    #MLTD
    mltd:
6153e13f2   George Vlahavas   Bump kea_mltd to ...
144
      image: registry.curex-project.eu:443/curex-local/kea_mltd:1.1.0
1f3a6f168   George Vlahavas   Add docker-compos...
145
146
147
148
      container_name: kea_mltd
      depends_on:
        - timescaledb
        - mosquitto
16f21ad3e   Thanasis Naskos   Fixing sonarqube ...
149
      environment:
850b58c41   Thanasis Naskos   Update OD to dete...
150
151
        - "RSYSLOG_SERVER=${RSYSLOG_SERVER}"
        - "RSYSLOG_PORT=${RSYSLOG_PORT}"
ba48fa041   George Vlahavas   Set restart to un...
152
      restart: unless-stopped
1f3a6f168   George Vlahavas   Add docker-compos...
153
154
155
156
157
158
159
160
161
162
163
      ports:
        - "5000:5000"
    
    #MQTT   
    mosquitto:
      image: registry.curex-project.eu:443/curex-local/kea_mqtt:1.6.9
      container_name: kea_mqtt
      ports:
        - "1883:1883"
        - "9001:9001"
      volumes:
853171618   George Vlahavas   Put mqtt and time...
164
165
        - mqtt_data_volume:/mosquitto/data
        - mqtt_log_volume:/mosquitto/log
1f3a6f168   George Vlahavas   Add docker-compos...
166
167
168
169
170
171
    
    #Persistence
    timescaledb:
      image: registry.curex-project.eu:443/curex-local/kea_timescaledb:2.1.0-pg11-oss
      container_name: kea_timescaledb
      volumes:
853171618   George Vlahavas   Put mqtt and time...
172
        - timescaledb_volume:/var/lib/postgresql/data
1f3a6f168   George Vlahavas   Add docker-compos...
173
174
175
176
177
178
179
180
181
      environment:
        - POSTGRES_USER=postgres
        - POSTGRES_PASSWORD=postgres
        - POSTGRES_DB=kea
      ports:
        - "5432:5432"
    
    #Visualization
    grafana:
b849ecaad   George Vlahavas   Build our own gra...
182
      image: registry.curex-project.eu:443/curex-local/kea_grafana:1.0.0
1f3a6f168   George Vlahavas   Add docker-compos...
183
184
185
186
187
188
189
190
      container_name: kea_grafana
      ports:
        - "3001:3000"
      environment:
        - GF_SECURITY_ALLOW_EMBEDDING=true
        - GF_SECURITY_COOKIE_SAMESITE=none
        - GF_AUTH_ANONYMOUS_ENABLED=true
        - GF_AUTH_ANONYMOUS_ORG_ROLE=Admin
b849ecaad   George Vlahavas   Build our own gra...
191

06f34b8a1   George Vlahavas   Use a docker volu...
192
  volumes:
9ae10ddc7   George Vlahavas   Remove kea prefix...
193
    api_volume:
626c0d577   George Vlahavas   Use a docker volu...
194
    data_volume:
36e14711e   George Vlahavas   Put pcap files in...
195
    pcap_volume:
853171618   George Vlahavas   Put mqtt and time...
196
197
198
    mqtt_data_volume:
    mqtt_log_volume:
    timescaledb_volume: