docker-compose.yml

version: "3"

services:
  #traefik:
  #  image: "traefik:v2.9"
  #  container_name: "traefik"
  #  command:
  #    - "--log.level=DEBUG"
  #    - "--api.insecure=true"
  #    - "--providers.docker=true"
  #    - "--providers.docker.exposedbydefault=false"
  #    - "--entrypoints.web.address=:80"
  #    - "--entrypoints.websecure.address=:443"
  #  ports:
  #    - "80:80"
  #  volumes:
  #    - "/var/run/docker.sock:/var/run/docker.sock:ro"

  vault:
    image: "uugai/vault:v1.0.6"
    restart: always
    container_name: "kerberos-vault"
    hostname: "kerberos-vault"
    depends_on:
      mongo:
        condition: service_healthy
    ports:
      - "80:80"
    volumes:
      - "./vault:/vault"
    environment:
      - GIN_MODE=release
      - KERBEROS_LOGIN_USERNAME=root
      - KERBEROS_LOGIN_PASSWORD=pass

      # This is the mongodb database where data will be stored, you might use a different name if you want.
      - MONGODB_DATABASE_STORAGE=KerberosStorage

      # MongoDB URI (for example for a SaaS service like MongoDB Atlas)
      # If uri is set, the below properties are not used (host, adminDatabase, username, password)
      #- MONGODB_URI="mongodb+srv://xx:xx@kerberos-hub.xxx.mongodb.net/?retryWrites=true&w=majority&appName=xxx"

      # If you do not wish to use the URI, you can specify the individual values.
      - MONGODB_HOST=mongo
      - MONGODB_DATABASE_CREDENTIALS=admin
      - MONGODB_USERNAME=root
      - MONGODB_PASSWORD=pass

      # MQTT broker to be used for on-demand forwarding.
      - MQTTURI=
      - MQTT_USERNAME=
      - MQTT_PASSWORD=

      # If you have a chained vault setup, enable this.
      - CONTINUOUS_FORWARDING=false
    #labels:
    #  - 'traefik.enable=true'
    #  - 'traefik.http.routers.kerberos-vault.rule=Host(`kerberos-vault.domain.tld`)'
    #  - 'traefik.http.routers.kerberos-vault.entrypoints=web'
    #  - 'traefik.http.routers.kerberos-vault.tls=false'
    #  - 'traefik.http.routers.kerberos-vault.tls.certresolver=leresolver'
    #  - "traefik.http.routers.kerberos-vault.service=kerberos_vault"
    #  - 'traefik.http.services.kerberos_vault.loadbalancer.server.port=80'

  mongo:
    image: "mongo:4.4.16" # or mongo:5.x, mongo:6.x or later
    container_name: "mongo"
    hostname: "mongo"
    ports:
      - 27017
    volumes:
      - ./mongodb:/data/db
    environment:
      - MONGO_INITDB_ROOT_USERNAME=root
      - MONGO_INITDB_ROOT_PASSWORD=pass
    healthcheck:
      test: echo 'db.runCommand("ping").ok' | mongo mongo:27017/test --quiet
      interval: 10s
      timeout: 10s
      retries: 5
      start_period: 40s

  minio:
    image: "quay.io/minio/minio"
    container_name: "minio"
    hostname: "minio"
    command: server /data --console-address ":9090"
    ports:
      - 9000:9000
      - 9090:9090
    volumes:
      - ./minio:/data
    environment:
      - MINIO_ROOT_USER=ROOTNAME
      - MINIO_ROOT_PASSWORD=CHANGEME123
      - MINIO_DOMAIN=domain.tld
      - MINIO_DOMAINS=domain.tld
    #labels:
    #  - 'traefik.enable=true'
    #  - 'traefik.http.routers.minio.rule=Host(`minio.domain.tld`)'
    #  - 'traefik.http.routers.minio.entrypoints=web'
    #  - 'traefik.http.routers.minio.tls=false'
    #  - 'traefik.http.routers.minio.tls.certresolver=leresolver'
    #  - "traefik.http.routers.minio.service=minio"
    #  - 'traefik.http.services.minio.loadbalancer.server.port=9000'
    #  - 'traefik.http.routers.minio-console.rule=Host(`minio-console.domain.tld`)'
    #  - 'traefik.http.routers.minio-console.entrypoints=web'
    #  - 'traefik.http.routers.minio-console.tls=false'
    #  - 'traefik.http.routers.minio-console.tls.certresolver=leresolver'
    #  - "traefik.http.routers.minio-console.service=minio-console"
    #  - 'traefik.http.services.minio-console.loadbalancer.server.port=9090'

  rabbitmq:
    image: rabbitmq:3-management-alpine
    container_name: "rabbitmq"
    hostname: "rabbitmq"
    restart: always
    ports:
      - 5672:5672
      - 15672:15672
    volumes:
      - ./rabbitmq/data/:/var/lib/rabbitmq/
      - ./rabbitmq/log/:/ar/log/rabbitmq

volumes:
  kerberos-data:

networks:
  default:
    name: cluster-net
    external: true