eurydice/compose.kibana.yml at master · pbn-anssi/eurydice · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
x-filebeat-common: &filebeat-common
  environment:
    ELASTICSEARCH_API_KEY: ${ELASTICSEARCH_API_KEY}
    ELASTICSEARCH_HOSTS: ${ELASTICSEARCH_HOSTS:?}
    ELASTICSEARCH_INDEX_NAME: ${ELASTICSEARCH_INDEX_NAME}
  image: ${REMOTE_DOCKER_REGISTRY:-docker.io}/elastic/filebeat:${ELK_VERSION:?}
  user: ${PUID}:${PGID}
  networks:
    - eurydice
  read_only: true
  command:
    - filebeat
    - run
    - --strict.perms=false
    - -e
    - -E
    - setup.kibana.host="http://kibana:5601"
    - output.console={pretty:true}
  healthcheck:
    test:
      - CMD
      - test
      - output
    interval: 10s
    timeout: 5s
    retries: 5
    start_period: 5s
  depends_on:
    elasticsearch:
      condition: service_healthy

services:
  filebeat-origin:
    <<: *filebeat-common
    volumes:
      - ./filebeat/filebeat.origin.yml:/usr/share/filebeat/filebeat.yml:ro
      - ${ELASTICSEARCH_CERT_PATH:?}:/usr/share/elasticsearch/config/certs/cert.crt:ro
      - ${ORIGIN_DB_LOGS_DIR:?}:/logs/origin/postgresql:ro
      - ${PYTHON_LOGS_DIR:?}/backend-origin:/logs/origin/backend:ro
      - ${PYTHON_LOGS_DIR:?}/sender:/logs/origin/sender:ro
      - ${PYTHON_LOGS_DIR:?}/dbtrimmer-origin:/logs/origin/dbtrimmer:ro
      - ${PYTHON_LOGS_DIR:?}/file-remover-origin:/logs/origin/file-remover:ro
      - ${FILEBEAT_LOGS_DIR:?}/origin:/usr/share/filebeat/logs
      - ${FILEBEAT_DATA_DIR:?}/origin:/usr/share/filebeat/data

  filebeat-destination:
    <<: *filebeat-common
    volumes:
      - ./filebeat/filebeat.destination.yml:/usr/share/filebeat/filebeat.yml:ro
      - ${ELASTICSEARCH_CERT_PATH:?}:/usr/share/elasticsearch/config/certs/cert.crt:ro
      - ${DESTINATION_DB_LOGS_DIR:?}:/logs/destination/postgresql:ro
      - ${PYTHON_LOGS_DIR:?}/backend-destination:/logs/destination/backend:ro
      - ${PYTHON_LOGS_DIR:?}/receiver:/logs/destination/receiver:ro
      - ${PYTHON_LOGS_DIR:?}/dbtrimmer-destination:/logs/destination/dbtrimmer:ro
      - ${PYTHON_LOGS_DIR:?}/file-remover-destination:/logs/destination/file-remover:ro
      - ${FILEBEAT_LOGS_DIR:?}/destination:/usr/share/filebeat/logs
      - ${FILEBEAT_DATA_DIR:?}/destination:/usr/share/filebeat/data

  elasticsearch:
    image: ${REMOTE_DOCKER_REGISTRY:-docker.io}/elasticsearch:${ELK_VERSION}
    networks:
      - eurydice
    environment:
      discovery.type: single-node
      xpack.security.enabled: false
      bootstrap.memory_lock: true
      ES_JAVA_OPTS: -Xms512m -Xmx512m
      xpack.profiling.enabled: false
      xpack.monitoring.templates.enabled: false
      xpack.monitoring.elasticsearch.collection.enabled: false
      ingest.geoip.downloader.enabled: false
    volumes:
      - elastic:/usr/share/elasticsearch/data"
    healthcheck:
      test: [ "CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health?wait_for_status=yellow&timeout=30s; wait $$! || exit 1" ]
      interval: 5s
      timeout: 40s
      retries: 5
      start_period: 30s

  kibana:
    image: ${REMOTE_DOCKER_REGISTRY:-docker.io}/kibana:${ELK_VERSION}
    networks:
      - eurydice
    environment:
      SERVER_NAME: kibana.test
      SERVER_HOST: "0.0.0.0"
      SERVER_PUBLICBASEURL: http://kibana.test
      TELEMETRY_ENABLED: "false"
      ELASTICSEARCH_URL: http://${ELASTICSEARCH_HOSTS:?}
    depends_on:
      elasticsearch:
        condition: service_healthy
    healthcheck:
      test: [ "CMD-SHELL", "curl --fail --silent localhost:5601/api/status || exit 1" ]
      interval: 5s
      timeout: 5s
      retries: 5
      start_period: 45s

volumes:
  elastic:

networks:
  eurydice:
    driver: bridge
    name: eurydice
    ipam:
      config:
        - subnet: ${EURYDICE_IPV4_SUBNET}