csce413_assignment2/docker-compose.yml at main · Botacin-s-Lab/csce413_assignment2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
services:
  webapp:
    container_name: 2_network_webapp
    build:
      context: ./web_app
      network: host
    dns:
      - 8.8.8.8
      - 1.1.1.1
    ports:
      - "5001:5000"
    environment:
      DB_HOST: database
      DB_USER: root
      DB_PASS: insecure_password_2024
      DB_NAME: userdb
      DB_SSL_DISABLED: "true"
    depends_on:
      database:
        condition: service_healthy
    networks:
      vulnerable_network:
        ipv4_address: 172.20.0.10
    restart: on-failure

  database:
    container_name: 2_network_database
    build:
      context: ./database
      network: host
    dns:
      - 8.8.8.8
      - 1.1.1.1
    environment:
      MYSQL_ROOT_PASSWORD: insecure_password_2024
      MYSQL_DATABASE: userdb
      MYSQL_SSL_MODE: DISABLED
    networks:
      vulnerable_network:
        ipv4_address: 172.20.0.11
    volumes:
      - db_data:/var/lib/mysql
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-pinsecure_password_2024"]
      interval: 5s
      timeout: 5s
      retries: 20
      start_period: 30s

  secret_ssh:
    container_name: 2_network_secret_ssh
    build:
      context: ./secret_ssh
      network: host
    dns:
      - 8.8.8.8
      - 1.1.1.1
    networks:
      vulnerable_network:
        ipv4_address: 172.20.0.20

  secret_api:
    container_name: 2_network_secret_api
    build:
      context: ./secret_api
      network: host
    dns:
      - 8.8.8.8
      - 1.1.1.1
    networks:
      vulnerable_network:
        ipv4_address: 172.20.0.21

  redis:
    container_name: 2_network_redis
    build:
      context: ./redis_service
      network: host
    dns:
      - 8.8.8.8
      - 1.1.1.1
    networks:
      vulnerable_network:
        ipv4_address: 172.20.0.22

  # TODO: Feel free to update honeypot if needed
  honeypot:
    container_name: 2_network_honeypot
    build:
      context: ./honeypot
      network: host
    dns:
      - 8.8.8.8
      - 1.1.1.1
    ports:
      - "2222:22"
    networks:
      vulnerable_network:
        ipv4_address: 172.20.0.30
    volumes:
      - ./honeypot/logs:/app/logs

  # TODO: Feel free to update port_knocking if needed
  port_knocking:
    container_name: 2_network_port_knocking
    build:
      context: ./port_knocking
      network: host
    dns:
      - 8.8.8.8
      - 1.1.1.1
    cap_add:
      - NET_ADMIN
    networks:
      vulnerable_network:
        ipv4_address: 172.20.0.40

networks:
  vulnerable_network:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.0.0/16
          gateway: 172.20.0.1

volumes:
  db_data: