115 lines
5.4 KiB
YAML
115 lines
5.4 KiB
YAML
services:
|
|
|
|
opensearch-node1:
|
|
image: opensearchproject/opensearch:2.1.0
|
|
container_name: opensearch-node1
|
|
environment:
|
|
- cluster.name=opensearch-cluster
|
|
- node.name=opensearch-node1
|
|
- discovery.seed_hosts=opensearch-node1
|
|
- cluster.initial_master_nodes=opensearch-node1
|
|
- bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
|
|
- "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM
|
|
- "DISABLE_INSTALL_DEMO_CONFIG=true" # disable demo config see https://opensearch.org/docs/latest/opensearch/install/docker-security/
|
|
ulimits:
|
|
memlock:
|
|
soft: -1
|
|
hard: -1
|
|
nofile:
|
|
soft: 65536 # maximum number of open files for the OpenSearch user, set to at least 65536 on modern systems
|
|
hard: 65536
|
|
ports:
|
|
- 60092:9200
|
|
- 60096:9600
|
|
expose:
|
|
- "60096"
|
|
volumes:
|
|
- /containers/data/opensearch/os-data:/usr/share/opensearch/data
|
|
- /containers/data/opensearch/confs/secconfig:/usr/share/opensearch/plugins/opensearch-security/securityconfig
|
|
- /containers/data/opensearch/confs/opensearch.yml:/usr/share/opensearch/config/opensearch.yml
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-rootCA.pem:/usr/share/opensearch/config/root-ca.pem
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-01.pem:/usr/share/opensearch/config/node1.pem
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-01.key:/usr/share/opensearch/config/node1.key
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-admin.pem:/usr/share/opensearch/config/admin.pem
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-admin.key:/usr/share/opensearch/config/admin.key
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/trustedcas.pem:/usr/share/opensearch/config/trustedcas.pem
|
|
dns:
|
|
- 192.168.1.1
|
|
dns_search:
|
|
- example.com
|
|
- example.local
|
|
networks:
|
|
- opensearch-net
|
|
|
|
opensearch-node2:
|
|
image: opensearchproject/opensearch:2.1.0
|
|
container_name: opensearch-node2
|
|
environment:
|
|
- cluster.name=opensearch-cluster
|
|
- node.name=opensearch-node2
|
|
- discovery.seed_hosts=opensearch-node1,opensearch-node2
|
|
- cluster.initial_master_nodes=opensearch-node1,opensearch-node2
|
|
- bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
|
|
- "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM
|
|
- "DISABLE_INSTALL_DEMO_CONFIG=true" # disable demo config see https://opensearch.org/docs/latest/opensearch/install/docker-security/
|
|
ulimits:
|
|
memlock:
|
|
soft: -1
|
|
hard: -1
|
|
nofile:
|
|
soft: 65536 # maximum number of open files for the OpenSearch user, set to at least 65536 on modern systems
|
|
hard: 65536
|
|
volumes:
|
|
- /containers/data/opensearch/os-data-2:/usr/share/opensearch/data
|
|
- /containers/data/opensearch/confs/secconfig:/usr/share/opensearch/plugins/opensearch-security/securityconfig
|
|
- /containers/data/opensearch/confs/opensearch-2.yml:/usr/share/opensearch/config/opensearch.yml
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-rootCA.pem:/usr/share/opensearch/config/root-ca.pem
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-02.pem:/usr/share/opensearch/config/node2.pem
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-02.key:/usr/share/opensearch/config/node2.key
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-admin.pem:/usr/share/opensearch/config/admin.pem
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-admin.key:/usr/share/opensearch/config/admin.key
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/trustedcas.pem:/usr/share/opensearch/config/trustedcas.pem
|
|
|
|
dns:
|
|
- 192.168.1.1
|
|
dns_search:
|
|
- example.com
|
|
- example.local
|
|
networks:
|
|
- opensearch-net
|
|
|
|
opensearch-dashboards:
|
|
image: opensearchproject/opensearch-dashboards:2.1.0
|
|
container_name: opensearch-dashboards
|
|
volumes:
|
|
- /containers/data/opensearch/confs/dashboards-config:/usr/share/opensearch-dashboards/config
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-dashboards.key:/usr/share/opensearch-dashboards/config/certs/dashboards-key.pem
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-dashboards.pem:/usr/share/opensearch-dashboards/config/certs/dashboards.pem
|
|
- /containers/data/opensearch/confs/tfmm-local/ssl/tfmm-local-rootCA.pem:/usr/share/opensearch-dashboards/config/certs/root-ca.pem
|
|
ports:
|
|
- 60056:5601
|
|
dns:
|
|
- 192.168.1.1
|
|
expose:
|
|
- "60056"
|
|
environment:
|
|
OPENSEARCH_HOSTS: '["https://opensearch-node1:9200"]' # must be a string with no spaces when specified as an environment variable
|
|
networks:
|
|
- opensearch-net
|
|
|
|
opensearch-fluentbit-dockerserver:
|
|
image: fluent/fluent-bit:latest
|
|
volumes:
|
|
- /containers/data/fluent-bit-docker/data:/data
|
|
- /containers/data/fluent-bit-docker/fluent-bit.conf:/fluent-bit/etc/fluent-bit.conf
|
|
dns:
|
|
- 192.168.1.1
|
|
ports:
|
|
- 24224:24224
|
|
networks:
|
|
- opensearch-net
|
|
labels:
|
|
- com.centurylinklabs.watchtower.enable="false"
|
|
networks:
|
|
opensearch-net:
|