shadowcheck-web/docker-compose.monitoring.yml at master · cyclonite69/shadowcheck-web · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
services:
  shadowcheck_grafana:
    image: grafana/grafana:latest
    container_name: shadowcheck_grafana
    restart: unless-stopped
    environment:
      - GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER:-grafanaadmin}
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD:?Set GRAFANA_ADMIN_PASSWORD from AWS Secrets Manager before starting Grafana}
      - GF_USERS_ALLOW_SIGN_UP=false
      - GF_SECURITY_ALLOW_EMBEDDING=${GF_SECURITY_ALLOW_EMBEDDING:-true}
      - GF_AUTH_ANONYMOUS_ENABLED=${GF_AUTH_ANONYMOUS_ENABLED:-false}
      - GF_AUTH_ANONYMOUS_ORG_ROLE=${GF_AUTH_ANONYMOUS_ORG_ROLE:-Viewer}
      - GF_SERVER_ROOT_URL=${GF_SERVER_ROOT_URL:-http://localhost:8080/grafana/}
      - GF_SERVER_HTTP_PORT=${GF_SERVER_HTTP_PORT:-3002}
      - GF_SERVER_SERVE_FROM_SUB_PATH=${GF_SERVER_SERVE_FROM_SUB_PATH:-true}
      - GF_DASHBOARDS_DEFAULT_HOME_DASHBOARD_PATH=${GF_DASHBOARDS_DEFAULT_HOME_DASHBOARD_PATH:-/etc/grafana/provisioning/dashboards/shadowcheck_overview.json}
      - GRAFANA_READER_PASSWORD=${GRAFANA_READER_PASSWORD:?Set GRAFANA_READER_PASSWORD from AWS Secrets Manager before starting Grafana}
      - DB_HOST=localhost
      - DB_PORT=5432
    ports:
      - "127.0.0.1:3002:3002"
    volumes:
      - grafana_data:/var/lib/grafana
      - ./deploy/monitoring/grafana/provisioning:/etc/grafana/provisioning
      - ./grafana/dashboards:/etc/grafana/provisioning/dashboards/tactical
    healthcheck:
      test: ["CMD-SHELL", "wget -q -O- http://localhost:3002/api/health >/dev/null || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s

volumes:
  grafana_data: