mirror of
https://github.com/empayre/fleet.git
synced 2024-11-06 17:05:18 +00:00
d4be5ad2a1
* add upgrade tests * fix lint issues go.mod * remove req.cnf * revert unrelated changes * make version configurable in test * fix golangci-lint ruleguard issue Related to https://github.com/go-critic/go-critic/issues/1152 Need to have github.com/quasilyte/go-ruleguard/dsl * fix lint issues * fix * clean up docker-compose.yml * fix http request * add readme * fix lint issues * address feedback * fix * add platform * address feedback * run go fmt
68 lines
2.0 KiB
YAML
68 lines
2.0 KiB
YAML
services:
|
|
mysql:
|
|
platform: ${FLEET_MYSQL_PLATFORM:-linux/x86_64}
|
|
image: mysql:5.7
|
|
environment:
|
|
MYSQL_ROOT_PASSWORD: toor
|
|
MYSQL_DATABASE: fleet
|
|
MYSQL_USER: fleet
|
|
MYSQL_PASSWORD: fleet
|
|
ports:
|
|
- "3306"
|
|
|
|
redis:
|
|
image: redis:6
|
|
|
|
# reverse proxy and tls termination for fleet-a and fleet-b
|
|
fleet:
|
|
image: nginx
|
|
volumes:
|
|
# don't mount the config. These will be copied manually so that
|
|
# we can reload nginx without recreating containers and getting a new public port each time.
|
|
# - ./nginx/fleet-a.conf:/etc/nginx/conf.d/default.conf
|
|
- ./fleet.crt:/etc/nginx/fleet.crt
|
|
- ./fleet.key:/etc/nginx/fleet.key
|
|
ports:
|
|
- "443"
|
|
|
|
fleet-a: &default-fleet
|
|
image: fleetdm/fleet:${FLEET_VERSION_A:-latest}
|
|
environment:
|
|
FLEET_MYSQL_ADDRESS: mysql:3306
|
|
FLEET_MYSQL_DATABASE: fleet
|
|
FLEET_MYSQL_USERNAME: fleet
|
|
FLEET_MYSQL_PASSWORD: fleet
|
|
FLEET_REDIS_ADDRESS: redis:6379
|
|
FLEET_SERVER_ADDRESS: 0.0.0.0:8080
|
|
FLEET_SERVER_TLS: 'false'
|
|
FLEET_LOGGING_JSON: 'true'
|
|
FLEET_BETA_SOFTWARE_INVENTORY: 1
|
|
FLEET_LICENSE_KEY: ${FLEET_LICENSE_KEY}
|
|
FLEET_OSQUERY_LABEL_UPDATE_INTERVAL: 1m
|
|
FLEET_VULNERABILITIES_CURRENT_INSTANCE_CHECKS: "yes"
|
|
FLEET_VULNERABILITIES_DATABASES_PATH: /fleet/vulndb
|
|
FLEET_VULNERABILITIES_PERIODICITY: 5m
|
|
FLEET_LOGGING_DEBUG: 'true'
|
|
# This can be configured for testing purposes but otherwise uses the
|
|
# typical default of provided.
|
|
FLEET_OSQUERY_HOST_IDENTIFIER: ${FLEET_OSQUERY_HOST_IDENTIFIER:-provided}
|
|
ports:
|
|
- "8080"
|
|
depends_on:
|
|
- mysql
|
|
- redis
|
|
|
|
# Uses a different version than fleet-a
|
|
fleet-b:
|
|
<<: *default-fleet
|
|
image: fleetdm/fleet:${FLEET_VERSION_B:-latest}
|
|
|
|
osquery:
|
|
image: "osquery/osquery:4.6.0-ubuntu20.04"
|
|
volumes:
|
|
- ./fleet.crt:/etc/osquery/fleet.crt
|
|
- ./osquery.flags:/etc/osquery/osquery.flags
|
|
environment:
|
|
ENROLL_SECRET: "${ENROLL_SECRET}"
|
|
command: osqueryd --flagfile=/etc/osquery/osquery.flags
|