BeaKer/docker-compose.yml at main · activecm/BeaKer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
volumes:
  elasticsearch_persistent:
  elasticsearch_snapshots:
    driver: local
    driver_opts:
      type: "none"
      device: /var/BeaKer/snapshots
      o: bind
configs:
  elasticsearch:
    file: /etc/BeaKer/elasticsearch/elasticsearch.yml
  kibana:
    file: /etc/BeaKer/kibana/kibana.yml
services:
  elasticsearch:
    image: elasticsearch:${ELK_STACK_VERSION:-latest}
    build: ./elasticsearch
    restart: unless-stopped
    healthcheck:
      test:
        [
          "CMD",
          "curl",
          "--fail",
          "-sk",
          "-u",
          "elastic:${ELASTIC_PASSWORD}",
          "https://localhost:9200/_cat/health",
        ]
      interval: 30s
      timeout: 30s
      retries: 5
      start_period: 30s
    environment:
      - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
      - "ES_JAVA_OPTS=-Xms3g -Xmx3g"
    ports:
      - "${ELASTIC_HTTP_PORT:-9200}:9200"
    configs:
      - source: elasticsearch
        target: /usr/share/elasticsearch/config/elasticsearch.yml
    volumes:
      - elasticsearch_persistent:/usr/share/elasticsearch/data
      - ${BEAKER_CONFIG_DIR:-/etc/BeaKer/}/certificates:/usr/share/elasticsearch/config/certificates
      - elasticsearch_snapshots:/usr/share/elasticsearch/snapshots
  kibana:
    image: kibana:${ELK_STACK_VERSION:-latest}
    build: ./kibana
    restart: unless-stopped
    healthcheck:
      test:
        ["CMD", "curl", "--fail", "-ski", "https://localhost:5601/api/status"]
      interval: 30s
      timeout: 30s
      retries: 5
      start_period: 30s
    environment:
      - KIBANA_SERVICE_TOKEN=${KIBANA_SERVICE_TOKEN}
      - SAVED_OBJECTS_ENCRYPTION_KEY=${SAVED_OBJECTS_ENCRYPTION_KEY}
      - REPORTING_ENCRYPTION_KEY=${REPORTING_ENCRYPTION_KEY}
      - SECURITY_ENCRYPTION_KEY=${SECURITY_ENCRYPTION_KEY}
    ports:
      - "${KIBANA_HTTP_PORT:-5601}:5601"
    configs:
      - source: kibana
        target: /usr/share/kibana/config/kibana.yml
    volumes:
      - ${BEAKER_CONFIG_DIR:-/etc/BeaKer/}/certificates:/usr/share/kibana/config/certificates
    depends_on:
      - elasticsearch
  es-dump:
    image: taskrabbit/elasticsearch-dump:v6.28.0
    restart: "no"
    environment:
      - NODE_TLS_REJECT_UNAUTHORIZED=0
    depends_on:
      - elasticsearch
    entrypoint: ["/bin/true"]