140 lines
3.4 KiB
YAML
140 lines
3.4 KiB
YAML
version: '3.1'
|
|
|
|
services:
|
|
|
|
### TRAEFIK
|
|
# Basic Auth not working. Problems with parsing var from .env
|
|
traefik:
|
|
image: traefik:latest
|
|
container_name: traefik
|
|
restart: always
|
|
ports:
|
|
- "443:443"
|
|
- "127.0.0.1:8080:8080"
|
|
networks:
|
|
- $NET_POKT
|
|
command:
|
|
- "--api=true"
|
|
- "--api.insecure=true"
|
|
- "--api.dashboard=true"
|
|
- "--log.level=DEBUG"
|
|
- "--providers.docker=true"
|
|
- "--providers.docker.exposedbydefault=false"
|
|
- "--entrypoints.websecure.address=:443"
|
|
- "--certificatesresolvers.myresolver.acme.tlschallenge=true"
|
|
# TESTING
|
|
# - "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
|
|
- "--certificatesresolvers.myresolver.acme.email=$MAIL"
|
|
- "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
|
|
volumes:
|
|
- "./traefik/letsencrypt:/letsencrypt"
|
|
- "/var/run/docker.sock:/var/run/docker.sock:ro"
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.middlewares.auth.basicauth.users=$AUTH_HTTP"
|
|
|
|
|
|
### WIREGUARD
|
|
|
|
wireguard:
|
|
image: lscr.io/linuxserver/wireguard
|
|
container_name: wireguard
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
environment:
|
|
- PUID=$PUID
|
|
- PGID=$PGID
|
|
volumes:
|
|
- ./wireguard/config/wg0.conf:/config/wg0.conf
|
|
- /lib/modules:/lib/modules
|
|
# Expose prometheus port
|
|
expose:
|
|
- 9090
|
|
ports:
|
|
- $SERVERPORT:$SERVERPORT/udp
|
|
sysctls:
|
|
- net.ipv4.conf.all.src_valid_mark=1
|
|
restart: unless-stopped
|
|
|
|
|
|
### MONITORING
|
|
|
|
prometheus:
|
|
image: prom/prometheus:v2.30.3
|
|
container_name: prometheus
|
|
volumes:
|
|
- ./prometheus:/etc/prometheus
|
|
- prometheus_data:/prometheus
|
|
command:
|
|
- '--config.file=/etc/prometheus/prometheus.yml'
|
|
- '--storage.tsdb.path=/prometheus'
|
|
- '--web.console.libraries=/etc/prometheus/console_libraries'
|
|
- '--web.console.templates=/etc/prometheus/consoles'
|
|
- '--storage.tsdb.retention.time=200h'
|
|
- '--web.enable-lifecycle'
|
|
restart: unless-stopped
|
|
network_mode: "service:wireguard"
|
|
labels:
|
|
org.label-schema.group: "monitoring"
|
|
depends_on:
|
|
- wireguard
|
|
|
|
nodeexporter:
|
|
image: prom/node-exporter:v1.2.2
|
|
container_name: nodeexporter
|
|
volumes:
|
|
- /proc:/host/proc:ro
|
|
- /sys:/host/sys:ro
|
|
- /:/rootfs:ro
|
|
command:
|
|
- '--path.procfs=/host/proc'
|
|
- '--path.rootfs=/rootfs'
|
|
- '--path.sysfs=/host/sys'
|
|
- '--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)'
|
|
restart: unless-stopped
|
|
expose:
|
|
- 9100
|
|
labels:
|
|
org.label-schema.group: "monitoring"
|
|
|
|
cadvisor:
|
|
image: gcr.io/cadvisor/cadvisor:v0.42.0
|
|
container_name: cadvisor
|
|
privileged: true
|
|
devices:
|
|
- /dev/kmsg:/dev/kmsg
|
|
volumes:
|
|
- /:/rootfs:ro
|
|
- /var/run:/var/run:ro
|
|
- /sys:/sys:ro
|
|
- /var/lib/docker:/var/lib/docker:ro
|
|
#- /cgroup:/cgroup:ro #doesn't work on MacOS only for Linux
|
|
restart: unless-stopped
|
|
expose:
|
|
- 8080
|
|
labels:
|
|
org.label-schema.group: "monitoring"
|
|
|
|
pushgateway:
|
|
image: prom/pushgateway:v1.4.2
|
|
container_name: pushgateway
|
|
restart: unless-stopped
|
|
expose:
|
|
- 9091
|
|
labels:
|
|
org.label-schema.group: "monitoring"
|
|
|
|
### VOLUMES
|
|
|
|
volumes:
|
|
prometheus_data:
|
|
|
|
### NETWORKS
|
|
|
|
networks:
|
|
pocket:
|
|
driver: bridge
|
|
monitor-net:
|
|
driver: bridge
|