catalog/docker-compose.monitoring.yml at main · MSU-Libraries/catalog · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
---
version: "3.8"

services:
  monitoring:
    image: registry.gitlab.msu.edu/msu-libraries/catalog/catalog/monitoring:${CI_COMMIT_SHORT_SHA}${EXTRA_TAG_SUFFIX}
    hostname: monitoring{{slice .Node.Hostname 8 9}}
    volumes:
      - logs:/mnt/logs:ro
      - traefik_logs:/mnt/traefik_logs:ro
      - /mnt/shared:/mnt/shared:ro
    networks:
      - internal
    extra_hosts:
      - "host.docker.internal:host-gateway"
    logging:
      driver: "json-file"
      options:
        max-file: "5"
        max-size: "10m"
    environment:
      NODE: "{{slice .Node.Hostname 8 9}}"
      STACK_NAME: "${STACK_NAME}"
      # secrets are prefixed with stack name in deploy-compose
      MARIADB_MONITORING_PASSWORD_FILE: /run/secrets/MARIADB_MONITORING_PASSWORD
      MARIADB_VUFIND_PASSWORD_FILE: /run/secrets/MARIADB_VUFIND_PASSWORD
    secrets: # secrets are prefixed with stack name in deploy-compose
      - MARIADB_MONITORING_PASSWORD
      - MARIADB_VUFIND_PASSWORD
    deploy:
      mode: replicated
      replicas: 3
      placement:
        max_replicas_per_node: 1
      restart_policy:
        window: 15s
      update_config:
        parallelism: 1
        failure_action: rollback
        monitor: 10s

  proxymon-$STACK_NAME:
    image: nginx:1.29
    networks:
      - public
      - internal
    volumes:
      - /mnt/shared/local/${STACK_NAME}/deploy/proxymonitoring/proxymonitoring.conf:/etc/nginx/conf.d/proxymonitoring.conf:ro
    logging:
      driver: "json-file"
      options:
        max-file: "5"
        max-size: "10m"
    deploy:
      mode: replicated
      replicas: 3
      placement:
        max_replicas_per_node: 1
      restart_policy:
        window: 15s
      update_config:
        parallelism: 1
        failure_action: rollback
        monitor: 10s
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.${STACK_NAME}-https-msul-proxymonitoring-router.entrypoints=msul-https-ent"
        - "traefik.http.routers.${STACK_NAME}-https-msul-proxymonitoring-router.service=${STACK_NAME}-https-msul-proxymonitoring-app"
        - "traefik.http.services.${STACK_NAME}-https-msul-proxymonitoring-app.loadbalancer.server.port=8080"
        - "traefik.http.routers.${STACK_NAME}-https-msul-proxymonitoring-router.middlewares=restrict-auth"
        - "traefik.http.routers.${STACK_NAME}-https-msul-proxymonitoring-router.tls=true"

networks:
  internal:
    name: ${STACK_NAME}-internal
    external: true
  public:
    name: public
    external: true

volumes:
  logs:
    external: true
    name: "${STACK_NAME}_logs"
  traefik_logs:
    external: true
    name: "traefik_logs"

secrets: # secrets are prefixed with stack name in deploy-compose
  MARIADB_MONITORING_PASSWORD:
    external: true
  MARIADB_VUFIND_PASSWORD:
    external: true