sigma/docker-compose.prebuilt.yml at main · lai3d/sigma · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
services:
  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_USER: sigma
      POSTGRES_PASSWORD: sigma
      POSTGRES_DB: sigma
    ports:
      - "5432:5432"
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U sigma"]
      interval: 10s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    ports:
      - "6379:6379"
    restart: unless-stopped

  api:
    image: ghcr.io/lai3d/sigma/api:latest
    ports:
      - "3000:3000"
    environment:
      DATABASE_URL: postgres://sigma:sigma@db:5432/sigma
      REDIS_URL: redis://redis:6379
      LISTEN_HOST: 0.0.0.0
      LISTEN_PORT: 3000
      API_KEY: ${API_KEY:-change-me-in-production}
      JWT_SECRET: ${JWT_SECRET:-sigma-dev-secret}
      RUST_LOG: ${RUST_LOG:-info}
      TELEGRAM_BOT_TOKEN: ${TELEGRAM_BOT_TOKEN:-}
      TELEGRAM_CHAT_ID: ${TELEGRAM_CHAT_ID:-}
      WEBHOOK_URL: ${WEBHOOK_URL:-}
      NOTIFY_BEFORE_DAYS: ${NOTIFY_BEFORE_DAYS:-7,3,1}
      NOTIFY_INTERVAL_SECS: ${NOTIFY_INTERVAL_SECS:-3600}
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_started
    restart: unless-stopped

  web:
    image: ghcr.io/lai3d/sigma/web:latest
    ports:
      - "80:80"
    environment:
      API_URL: http://api:3000
    depends_on:
      - api
    restart: unless-stopped

  probe:
    image: ghcr.io/lai3d/sigma/probe:latest
    cap_add:
      - NET_RAW
    environment:
      SIGMA_API_URL: http://api:3000/api
      SIGMA_API_KEY: ${API_KEY:-change-me-in-production}
      PROBE_SOURCE: cn-beijing
      PROBE_INTERVAL: 300
      PROBE_TYPES: icmp,tcp,http
    depends_on:
      - api
    restart: unless-stopped

  agent:
    image: ghcr.io/lai3d/sigma/agent:latest
    pull_policy: always
    network_mode: host
    pid: host
    cap_add:
      - SYS_PTRACE
    environment:
      SIGMA_API_URL: http://localhost:3000/api
      SIGMA_API_KEY: ${API_KEY:-change-me-in-production}
      AGENT_INTERVAL: 60
      AGENT_ALIAS: hk004.example.com
      AGENT_METRICS_PORT: 9102
      AGENT_PORT_SCAN: "true"
      AGENT_PORT_SCAN_RANGE: 10000-30000
      AGENT_PORT_SCAN_INTERVAL: 60
      AGENT_XDS_ENABLED: ${AGENT_XDS_ENABLED:-false}
      AGENT_XDS_PORT: ${AGENT_XDS_PORT:-18000}
      AGENT_XDS_POLL_INTERVAL: ${AGENT_XDS_POLL_INTERVAL:-10}
      AGENT_ENVOY_CONFIG_PATH: ${AGENT_ENVOY_CONFIG_PATH:-/etc/envoy/envoy.yaml}
      AGENT_ENVOY_CONFIG_SYNC: ${AGENT_ENVOY_CONFIG_SYNC:-false}
      AGENT_ENVOY_CONFIG_SYNC_INTERVAL: ${AGENT_ENVOY_CONFIG_SYNC_INTERVAL:-60}
      AGENT_ENVOY_CONFIG_EXCLUDE: ${AGENT_ENVOY_CONFIG_EXCLUDE:-}
    depends_on:
      - api
    restart: unless-stopped

volumes:
  pgdata: