119 lines
2.8 KiB
YAML
119 lines
2.8 KiB
YAML
# =============================================================================
|
|
# PatchMon Docker Compose - Production
|
|
# =============================================================================
|
|
# To set up your environment, run the setup script:
|
|
#
|
|
# bash -c "$(curl -fsSL https://raw.githubusercontent.com/PatchMon/PatchMon/refs/heads/main/docker/setup-env.sh)"
|
|
#
|
|
# This will download env.example, generate secrets, and create your .env file.
|
|
# Alternatively, copy env.example to .env and fill in the values manually.
|
|
#
|
|
# Then start PatchMon:
|
|
#
|
|
# docker compose up -d
|
|
#
|
|
# See the PatchMon documentation for full configuration details.
|
|
# =============================================================================
|
|
|
|
name: patchmon
|
|
|
|
services:
|
|
|
|
server:
|
|
image: ghcr.io/patchmon/patchmon-server:latest
|
|
restart: unless-stopped
|
|
env_file: .env
|
|
ports:
|
|
- "3000:3000"
|
|
networks:
|
|
- internal
|
|
- external
|
|
depends_on:
|
|
database:
|
|
condition: service_healthy
|
|
redis:
|
|
condition: service_healthy
|
|
guacd:
|
|
condition: service_healthy
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
database:
|
|
image: postgres:17-alpine
|
|
restart: unless-stopped
|
|
env_file: .env
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
networks:
|
|
- internal
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
|
|
interval: 3s
|
|
timeout: 5s
|
|
retries: 7
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
restart: unless-stopped
|
|
env_file: .env
|
|
command: redis-server --requirepass ${REDIS_PASSWORD}
|
|
volumes:
|
|
- redis_data:/data
|
|
networks:
|
|
- internal
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "--no-auth-warning", "-a", "${REDIS_PASSWORD}", "ping"]
|
|
interval: 3s
|
|
timeout: 5s
|
|
retries: 7
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
guacd:
|
|
image: guacamole/guacd:latest
|
|
restart: unless-stopped
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp:size=64m
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
mem_limit: 512m
|
|
cpus: '1.0'
|
|
networks:
|
|
- internal
|
|
- external
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "nc -z localhost 4822 || exit 1"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
|
|
volumes:
|
|
postgres_data:
|
|
redis_data:
|
|
|
|
networks:
|
|
internal:
|
|
external: true # Tells Compose not to create this network
|
|
external:
|
|
external: true # Tells Compose not to create this network
|