diff --git a/compose_volumes.yml b/compose_volumes.yml new file mode 100644 index 0000000..5577f07 --- /dev/null +++ b/compose_volumes.yml @@ -0,0 +1,94 @@ +version: '3.9' +networks: + web_network_1: + driver: overlay + ipam: + config: + - subnet: 172.17.0.0/24 +services: + web: + image: git.send.nrw/sendnrw/security_in_depth_web_web:latest + volumes: + - nginx:/etc/nginx + - web1:/usr/share/nginx/html + deploy: + replicas: 3 + update_config: + parallelism: 1 + delay: 10s + restart_policy: + condition: on-failure + labels: + - "traefik.enable=true" + - "traefik.http.routers.web1.rule=Host(`web1.localdomain`)" + - "traefik.http.services.web1.loadbalancer.server.port=80" + - "traefik.http.routers.web1.entrypoints=websecure" + - "traefik.http.routers.web1.tls=true" + placement: + constraints: + - node.role != manager + networks: + - web_network_1 + ports: + - "8080:80" + php83: + image: git.send.nrw/sendnrw/security_in_depth_web_php83:latest + volumes: + - php83:/etc/php83 + - web1:/usr/share/nginx/html + deploy: + replicas: 1 + update_config: + parallelism: 1 + delay: 10s + restart_policy: + condition: on-failure + placement: + constraints: + - node.role != manager + networks: + web_network_1: + ipv4_address: 172.17.0.83 + php84: + image: git.send.nrw/sendnrw/security_in_depth_web_php84:latest + volumes: + - php84:/etc/php84 + - web1:/usr/share/nginx/html + deploy: + replicas: 1 + update_config: + parallelism: 1 + delay: 10s + restart_policy: + condition: on-failure + placement: + constraints: + - node.role != manager + networks: + web_network_1: + ipv4_address: 172.17.0.84 + redis: + image: git.send.nrw/sendnrw/security_in_depth_web_redis:latest + volumes: + - redis:/etc + deploy: + replicas: 1 + update_config: + parallelism: 1 + delay: 10s + restart_policy: + condition: on-failure + placement: + constraints: + - node.role != manager + networks: + web_network_1: + ipv4_address: 172.17.0.100 + ports: + - "6379:6379" +volumes: + - web1 + - php83 + - php84 + - nginx + - redis