Funktionsrollback

compose.yml

@@ -38,7 +38,7 @@ services:
     restart: "no"
 
   clickhouse:
-    image: ${CLICKHOUSE_IMAGE:-clickhouse/clickhouse-server:26.6.2.81}
+    image: ${CLICKHOUSE_IMAGE:-clickhouse/clickhouse-server:26.3.17.56}
     environment:
       CLICKHOUSE_DB: ${CLICKHOUSE_DB:-siem}
       CLICKHOUSE_USER: ${CLICKHOUSE_USER:-siem}
@@ -64,7 +64,7 @@ services:
       - "${CLICKHOUSE_NATIVE_BIND:-127.0.0.1}:${CLICKHOUSE_NATIVE_PORT:-9000}:9000"
 
   clickhouse-schema:
-    image: ${CLICKHOUSE_IMAGE:-clickhouse/clickhouse-server:26.6.2.81}
+    image: ${CLICKHOUSE_IMAGE:-clickhouse/clickhouse-server:26.3.17.56}
     depends_on:
       clickhouse:
         condition: service_healthy
@@ -73,6 +73,7 @@ services:
       CLICKHOUSE_DB: ${CLICKHOUSE_DB:-siem}
       CLICKHOUSE_USER: ${CLICKHOUSE_USER:-siem}
       CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD}
+      CLICKHOUSE_GRAFANA_PASSWORD: ${CLICKHOUSE_GRAFANA_PASSWORD}
       EVENT_RETENTION_DAYS: ${EVENT_RETENTION_DAYS:-90}
       ROLLUP_RETENTION_DAYS: ${ROLLUP_RETENTION_DAYS:-730}
     volumes:
@@ -83,6 +84,7 @@ services:
           -e "s/__CLICKHOUSE_DB__/$${CLICKHOUSE_DB}/g" \
           -e "s/__EVENT_RETENTION_DAYS__/$${EVENT_RETENTION_DAYS}/g" \
           -e "s/__ROLLUP_RETENTION_DAYS__/$${ROLLUP_RETENTION_DAYS}/g" \
+          -e "s/__GRAFANA_CLICKHOUSE_PASSWORD__/$${CLICKHOUSE_GRAFANA_PASSWORD}/g" \
           /schema/init.sql.template > /tmp/init.sql
         clickhouse-client --host clickhouse --user "$${CLICKHOUSE_USER}" --password "$${CLICKHOUSE_PASSWORD}" --multiquery < /tmp/init.sql
         clickhouse-client --host clickhouse --user "$${CLICKHOUSE_USER}" --password "$${CLICKHOUSE_PASSWORD}" --query \
@@ -250,6 +252,8 @@ services:
       RAW_ARCHIVE_ENABLED: ${RAW_ARCHIVE_ENABLED:-true}
       RAW_SPOOL_DIR: /var/spool/siem-raw
       RAW_RETENTION: ${RAW_RETENTION:-720h}
+      GRAFANA_PORT: ${GRAFANA_PORT:-3000}
+      GRAFANA_PUBLIC_URL: ${GRAFANA_PUBLIC_URL:-}
     depends_on:
       postgres-schema:
         condition: service_completed_successfully
@@ -351,6 +355,35 @@ services:
     ports:
       - "${PROMETHEUS_BIND:-127.0.0.1}:${PROMETHEUS_PORT:-9090}:9090"
 
+  grafana:
+    image: ${GRAFANA_IMAGE:-grafana/grafana:13.1}
+    environment:
+      GF_SECURITY_ADMIN_USER: ${GRAFANA_ADMIN_USER:-admin}
+      GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_ADMIN_PASSWORD}
+      GF_USERS_ALLOW_SIGN_UP: "false"
+      GF_AUTH_ANONYMOUS_ENABLED: "false"
+      GF_PLUGINS_PREINSTALL: grafana-clickhouse-datasource@${GRAFANA_CLICKHOUSE_PLUGIN_VERSION:-4.20.0}
+      CLICKHOUSE_DB: ${CLICKHOUSE_DB:-siem}
+      CLICKHOUSE_GRAFANA_PASSWORD: ${CLICKHOUSE_GRAFANA_PASSWORD}
+    volumes:
+      - grafana_data:/var/lib/grafana
+      - ./deploy/grafana/provisioning:/etc/grafana/provisioning:ro
+      - ./deploy/grafana/dashboards:/var/lib/grafana/dashboards:ro
+    depends_on:
+      clickhouse-schema:
+        condition: service_completed_successfully
+      prometheus:
+        condition: service_started
+    healthcheck:
+      test: ["CMD-SHELL", "wget -q -O /dev/null http://127.0.0.1:3000/api/health"]
+      interval: 10s
+      timeout: 5s
+      retries: 30
+      start_period: 20s
+    restart: unless-stopped
+    ports:
+      - "${GRAFANA_BIND:-0.0.0.0}:${GRAFANA_PORT:-3000}:3000"
+
 volumes:
   postgres_data:
   clickhouse_data:
@@ -361,3 +394,4 @@ volumes:
   garage_data:
   raw_spool:
   prometheus_data:
+  grafana_data: