sentinel/docker-compose.validator.yml at main · sentinelSCA/sentinel · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
services:
  redis:
    image: redis:7
    container_name: sentinel-redis
    restart: unless-stopped
    env_file:
      - .env
    command: ["redis-server", "--appendonly", "yes", "--requirepass", "${REDIS_PASSWORD}"]
    ports:
      - "127.0.0.1:6379:6379"
    volumes:
      - redis_data:/data

  sentinel-api:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: sentinel-api
    restart: unless-stopped
    env_file:
      - .env
    depends_on:
      - redis
    ports:
      - "127.0.0.1:8001:8001"
    volumes:
      - ./policies:/app/policies:ro
      - ./agents.json:/app/agents.json
      - ./static:/app/static
      - ./audit:/app/audit
      - ./runtime_data/sentinel.db:/app/sentinel.db
    command: ["uvicorn", "sentinel_api_with_dashboard:app", "--host", "0.0.0.0", "--port", "8001"]

  manager-worker:
    build:
      context: .
      dockerfile: Dockerfile.base
    container_name: sentinel-manager-worker
    restart: unless-stopped
    env_file:
      - .env
    depends_on:
      - redis
    command: ["python", "-u", "worker_manager.py"]

  probe-worker:
    build:
      context: .
      dockerfile: Dockerfile.base
    container_name: sentinel-probe-worker
    restart: unless-stopped
    env_file:
      - .env
    depends_on:
      - redis
      - sentinel-api
    command: ["python", "-u", "worker_probe.py"]

  portainer:
    image: portainer/portainer-ce:latest
    container_name: sentinel-portainer
    restart: unless-stopped
    ports:
      - "127.0.0.1:9000:9000"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - portainer_data:/data

  dozzle:
    image: amir20/dozzle:latest
    container_name: sentinel-dozzle
    restart: unless-stopped
    ports:
      - "127.0.0.1:9002:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

volumes:
  redis_data:
  portainer_data: