Something went wrong. Try again.
Docker files for the TLE Community deployment
Something went wrong. Try again.
deployment docker-compose.yml
14 kB · 472 lines
YAML
at main
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473x-logging: &default-logging driver: json-file options: max-size: '10m' max-file: '5'
services: app: image: atcr.io/tlecommunity.com/app:latest container_name: app restart: unless-stopped volumes: - ./data/app-caddy-data:/data - ./data/app-caddy-config:/config
alliance-starmap: image: atcr.io/tlecommunity.com/alliance-starmap:latest container_name: alliance-starmap restart: unless-stopped volumes: - ./data/alliance-starmap-caddy-data:/data - ./data/alliance-starmap-caddy-config:/config
beanstalk-console: container_name: beanstalk-console restart: unless-stopped depends_on: - beanstalk image: schickling/beanstalkd-console
beanstalk: container_name: beanstalk restart: unless-stopped image: schickling/beanstalkd
logrotate: build: context: . dockerfile: Dockerfile.logrotate container_name: logrotate restart: unless-stopped volumes: - ./log:/home/lacuna/server/log - ./lacuna.logrotate:/etc/logrotate.d/lacuna:ro
memcached: container_name: memcached restart: unless-stopped image: memcached # command: # # Persist cache in a file to save sessions (and other data) between restarts of the docker container # - --memory-file=/tempfs_mount/memory_file # volumes: # - ./data/memcached:/tempfs_mount
mysql: container_name: mysql platform: linux/amd64 restart: unless-stopped environment: MYSQL_ROOT_PASSWORD: ${LACUNA_MYSQL_ROOT_PASSWORD:?error} image: mysql:5.5 volumes: - ./data/mysql:/var/lib/mysql - ./data/backups:/backups - ./mysql-dump.sh:/usr/local/bin/mysql-dump.sh:ro healthcheck: # mysqladmin ping exits 0 once mysqld accepts connections; passing creds # makes it a truer check (it would also exit 0 on an auth failure). test: ['CMD-SHELL', 'mysqladmin ping -h 127.0.0.1 -u root -p"$$MYSQL_ROOT_PASSWORD" --silent'] interval: 10s timeout: 5s retries: 10 start_period: 30s
caddy: image: caddy:2.8-alpine container_name: caddy restart: unless-stopped logging: *default-logging depends_on: app: condition: service_started alliance-starmap: condition: service_started server: condition: service_healthy super-ui: condition: service_started v2-api: condition: service_started ports: - 80:80 - 443:443 - 443:443/udp environment: CADDY_DOMAIN: ${CADDY_DOMAIN:-meanjin-one.tlecommunity.com} volumes: - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro - ./data/public-captcha:/home/lacuna/server/public/captcha - ./data/public-network19:/home/lacuna/server/public/network19 - ./data/public-missioncommand:/home/lacuna/server/public/missioncommand - ./data/public-server:/home/lacuna/server/public/server - ./data/public-static:/home/lacuna/server/public - ./log/caddy:/home/lacuna/server/log/caddy - ./data/caddy-data:/data - ./data/caddy-config:/config
server: image: atcr.io/tlecommunity.com/server:latest command: '/bin/bash bin/start_lacuna.sh' container_name: server restart: unless-stopped depends_on: mysql: condition: service_healthy memcached: condition: service_started beanstalk: condition: service_started environment: # Root of the host-mounted log tree (see the ./../../log mount below). # Scripts fall back to this same path when the var is unset. LACUNA_LOG_DIR: /home/lacuna/server/log # Disables the prod-only size-limit / profiling middleware (bin/lacuna.psgi). TLE_NO_MIDDLEWARE: 1 logging: *default-logging volumes: - ./etc:/home/lacuna/server/etc - ./data/public-captcha:/home/lacuna/server/public/captcha - ./data/public-network19:/home/lacuna/server/public/network19 - ./data/public-missioncommand:/home/lacuna/server/public/missioncommand - ./data/public-server:/home/lacuna/server/public/server - ./tmp:/tmp - ./log:/home/lacuna/server/log healthcheck: # /starman_ping (bin/lacuna.psgi) returns "pong" only once the Lacuna app # has compiled and Starman is serving requests. curl is in the server image. test: ['CMD', 'curl', '-fsS', 'http://localhost:5000/starman_ping'] interval: 15s timeout: 10s retries: 5 start_period: 180s
server-building-scheduler: image: atcr.io/tlecommunity.com/server:latest command: '/bin/bash bin/run_scheduler.sh schedule_building.pl --noquiet --nodaemonize --initialize' container_name: server-building-scheduler restart: unless-stopped depends_on: server: condition: service_healthy environment: LACUNA_LOG_DIR: /home/lacuna/server/log logging: *default-logging volumes: - ./tmp:/tmp - ./log:/home/lacuna/server/log - ./etc:/home/lacuna/server/etc
server-ship-scheduler: image: atcr.io/tlecommunity.com/server:latest command: '/bin/bash bin/run_scheduler.sh schedule_ship_arrival.pl --noquiet --nodaemonize --initialize' container_name: server-ship-scheduler restart: unless-stopped depends_on: server: condition: service_healthy environment: LACUNA_LOG_DIR: /home/lacuna/server/log logging: *default-logging volumes: - ./tmp:/tmp - ./log:/home/lacuna/server/log - ./etc:/home/lacuna/server/etc
server-captcha-scheduler: image: atcr.io/tlecommunity.com/server:latest command: '/bin/bash bin/run_scheduler.sh schedule_captcha.pl --noquiet --nodaemonize' container_name: server-captcha-scheduler restart: unless-stopped depends_on: server: condition: service_healthy environment: LACUNA_LOG_DIR: /home/lacuna/server/log logging: *default-logging volumes: - ./tmp:/tmp - ./log:/home/lacuna/server/log - ./etc:/home/lacuna/server/etc - ./data/public-captcha:/home/lacuna/server/public/captcha
server-script-scheduler: container_name: server-script-scheduler image: mcuadros/ofelia:latest restart: unless-stopped depends_on: server: condition: service_healthy command: daemon logging: *default-logging volumes: - /var/run/docker.sock:/var/run/docker.sock:ro - ./schedule.ini:/etc/ofelia.conf
super-ui: image: atcr.io/tlecommunity.com/super-ui:latest container_name: super-ui restart: unless-stopped volumes: - ./data/super-ui-caddy-data:/data - ./data/super-ui-caddy-config:/config
v2-api: image: atcr.io/tlecommunity.com/v2-api:latest restart: unless-stopped container_name: v2-api command: node index.ts environment: PORT: 5999
# # Management #
phpmyadmin-tailscale: image: tailscale/tailscale:latest container_name: phpmyadmin-tailscale hostname: tle-meanjin-one-phpmyadmin environment: - TS_AUTHKEY=${TAILSCALE_AUTHKEY:?error} - TS_EXTRA_ARGS=--advertise-tags=tag:container - TS_SERVE_CONFIG=/config/phpmyadmin.json - TS_STATE_DIR=/var/lib/tailscale - TS_USERSPACE=false - TS_ENABLE_HEALTH_CHECK=true healthcheck: test: ['CMD', 'wget', '--spider', '-q', 'http://127.0.0.1:9002/healthz'] interval: 10s timeout: 3s volumes: - ./data/tailscale-phpmyadmin:/var/lib/tailscale - ./tailscale/phpmyadmin:/config devices: - /dev/net/tun:/dev/net/tun cap_add: - net_admin - sys_module restart: unless-stopped
phpmyadmin: container_name: phpmyadmin image: phpmyadmin:5.2-apache restart: unless-stopped network_mode: service:phpmyadmin-tailscale environment: PMA_HOST: mysql depends_on: - mysql
portainer-agent-tailscale: image: tailscale/tailscale:latest container_name: portainer-agent-tailscale hostname: tle-meanjin-one-portainer-agent environment: - TS_AUTHKEY=${TAILSCALE_AUTHKEY:?error} - TS_EXTRA_ARGS=--advertise-tags=tag:container - TS_SERVE_CONFIG=/config/portainer-agent.json - TS_STATE_DIR=/var/lib/tailscale - TS_USERSPACE=false - TS_ENABLE_HEALTH_CHECK=true healthcheck: test: ['CMD', 'wget', '--spider', '-q', 'http://127.0.0.1:9002/healthz'] interval: 10s timeout: 3s volumes: - ./data/tailscale-portainer-agent:/var/lib/tailscale - ./tailscale/portainer-agent:/config devices: - /dev/net/tun:/dev/net/tun cap_add: - net_admin - sys_module restart: unless-stopped
portainer-agent: image: portainer/agent:lts container_name: portainer-agent restart: always environment: - EDGE=1 - EDGE_INSECURE_POLL=1 - EDGE_ID=${PORTAINER_AGENT_EDGE_ID:?error} - EDGE_KEY=${PORTAINER_AGENT_EDGE_KEY:?error} volumes: - /var/run/docker.sock:/var/run/docker.sock - /var/lib/docker/volumes:/var/lib/docker/volumes - /:/host - ./data/portainer-agent:/data network_mode: service:portainer-agent-tailscale depends_on: portainer-agent-tailscale: condition: service_healthy
deploy-trigger-tailscale: image: tailscale/tailscale:latest container_name: deploy-trigger-tailscale hostname: tle-meanjin-one-deploy-trigger environment: - TS_AUTHKEY=${TAILSCALE_AUTHKEY:?error} - TS_EXTRA_ARGS=--advertise-tags=tag:container - TS_SERVE_CONFIG=/config/deploy-trigger.json - TS_STATE_DIR=/var/lib/tailscale - TS_USERSPACE=false - TS_ENABLE_HEALTH_CHECK=true healthcheck: test: ['CMD', 'wget', '--spider', '-q', 'http://127.0.0.1:9002/healthz'] interval: 10s timeout: 3s volumes: - ./data/tailscale-deploy-trigger:/var/lib/tailscale - ./tailscale/deploy-trigger:/config devices: - /dev/net/tun:/dev/net/tun cap_add: - net_admin - sys_module restart: unless-stopped
deploy-trigger: build: context: . dockerfile: Dockerfile.deploy-trigger container_name: deploy-trigger restart: unless-stopped network_mode: service:deploy-trigger-tailscale environment: DEPLOY_WEBHOOK_SECRET: ${DEPLOY_WEBHOOK_SECRET:?error} volumes: - ./deploy-trigger/hooks.json:/etc/webhook/hooks.json:ro - ./deploy-trigger/receive-deploy.sh:/scripts/receive-deploy.sh:ro - ./data/deploy-requests:/deploy-requests - ./log/deploy:/deploy-log command: ['-hooks=/etc/webhook/hooks.json', '-template', '-verbose'] depends_on: deploy-trigger-tailscale: condition: service_healthy
beszel-agent-tailscale: image: tailscale/tailscale:latest container_name: beszel-agent-tailscale hostname: tle-meanjin-one-beszel-agent environment: - TS_AUTHKEY=${TAILSCALE_AUTHKEY:?error} - TS_EXTRA_ARGS=--advertise-tags=tag:container - TS_SERVE_CONFIG=/config/beszel-agent.json - TS_STATE_DIR=/var/lib/tailscale - TS_USERSPACE=false - TS_ENABLE_HEALTH_CHECK=true healthcheck: test: ['CMD', 'wget', '--spider', '-q', 'http://127.0.0.1:9002/healthz'] interval: 10s timeout: 3s volumes: - ./data/tailscale-beszel-agent:/var/lib/tailscale - ./tailscale/beszel-agent:/config devices: - /dev/net/tun:/dev/net/tun cap_add: - net_admin - sys_module restart: unless-stopped
beszel-agent: image: henrygd/beszel-agent container_name: beszel-agent network_mode: service:beszel-agent-tailscale restart: unless-stopped volumes: - /var/run/docker.sock:/var/run/docker.sock:ro - ./data/beszel-agent-data:/var/lib/beszel-agent environment: LISTEN: 45876 KEY: ${BESZEL_KEY:?error} TOKEN: ${BESZEL_TOKEN:?error} HUB_URL: ${BESZEL_HUB_URL:?error} depends_on: beszel-agent-tailscale: condition: service_healthy
# # Monitoring (request rate, response time, error rate). Dashboards are # reachable only over Tailscale. Host and container resources stay in Beszel. #
prometheus: # Shares caddy's network namespace so the Caddy admin API (metrics at # localhost:2019) is never reachable from other containers. Listens on # :9090 inside that namespace; grafana reaches it as caddy:9090. image: prom/prometheus:v2.55.1 container_name: prometheus restart: unless-stopped network_mode: service:caddy depends_on: - caddy command: - --config.file=/etc/prometheus/prometheus.yml - --storage.tsdb.path=/prometheus - --storage.tsdb.retention.time=30d - --web.listen-address=:9090 logging: *default-logging volumes: - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml - prometheus-data:/prometheus
grafana-tailscale: image: tailscale/tailscale:latest container_name: grafana-tailscale hostname: tle-meanjin-one-grafana environment: - TS_AUTHKEY=${TAILSCALE_AUTHKEY:?error} - TS_EXTRA_ARGS=--advertise-tags=tag:container - TS_SERVE_CONFIG=/config/grafana.json - TS_STATE_DIR=/var/lib/tailscale - TS_USERSPACE=false - TS_ENABLE_HEALTH_CHECK=true healthcheck: test: ['CMD', 'wget', '--spider', '-q', 'http://127.0.0.1:9002/healthz'] interval: 10s timeout: 3s volumes: - ./data/tailscale-grafana:/var/lib/tailscale - ./tailscale/grafana:/config devices: - /dev/net/tun:/dev/net/tun cap_add: - net_admin - sys_module restart: unless-stopped
grafana: image: grafana/grafana:11.6.0 user: '1000:1000' container_name: grafana restart: unless-stopped network_mode: service:grafana-tailscale environment: GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_ADMIN_PASSWORD:?error} GF_USERS_ALLOW_SIGN_UP: 'false' GF_ANALYTICS_REPORTING_ENABLED: 'false' GF_ANALYTICS_CHECK_FOR_UPDATES: 'false' logging: *default-logging volumes: - grafana-data:/var/lib/grafana - ./grafana/provisioning:/etc/grafana/provisioning - ./grafana/dashboards:/var/lib/grafana/dashboards depends_on: grafana-tailscale: condition: service_healthy
volumes: grafana-data: prometheus-data:
networks: default: name: lacuna
name: lacuna