docker-compose-services.yml

services:
  reverse-proxy:
    image: traefik:v3.0
    labels:
      - traefik.enable=true
      - traefik.http.routers.mydashboard.rule=Host(`traefik.${STACK_HOSTNAME}`)
      - traefik.http.routers.mydashboard.service=api@internal
      - traefik.http.routers.mydashboard.middlewares=test-things-auth
    command:
      - "--log.level=DEBUG"
      - "--api.dashboard=true"
      - "--providers.docker=true"
      - "--providers.docker.watch"
      - "--metrics.prometheus=true"
      - "--metrics.prometheus.buckets=0.1,0.3,1.2,5.0"
      - "--entrypoints.web.address=:${WEB_PORT_IN}"
      - "--entrypoints.modbus-elevator.address=:${MODBUS_ELEVATOR_PORT_IN}"
      - "--entrypoints.coap-calculator-simple.address=:${COAP_SIMPLE_PORT_IN}/udp"
      - "--entrypoints.coap-calculator-content-negotiation.address=:${COAP_NEGOTIATION_PORT_IN}/udp"
      - "--entrypoints.smart-home-smart-clock.address=:${SMART_HOME_SMART_CLOCK_PORT_IN}/udp"
    ports:
      - "${WEB_PORT_OUT}:${WEB_PORT_IN}"
      - "${MODBUS_ELEVATOR_PORT_OUT}:${MODBUS_ELEVATOR_PORT_IN}"
      - "${COAP_SIMPLE_PORT_OUT}:${COAP_SIMPLE_PORT_IN}/udp"
      - "${COAP_NEGOTIATION_PORT_OUT}:${COAP_NEGOTIATION_PORT_IN}/udp"
      - "${SMART_HOME_SMART_CLOCK_PORT_OUT}:${SMART_HOME_SMART_CLOCK_PORT_IN}/udp"
      - "${TRAEFIK_DASHBOARD_PORT_OUT}:${TRAEFIK_DASHBOARD_PORT_IN}"
    volumes:
      # So that Traefik can listen to the Docker events
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - things_network
  test-things-auth:
    image: thomseddon/traefik-forward-auth:2
    environment:
      - DEFAULT_PROVIDER=generic-oauth
      - SECRET=${OAUTH_SECRET}
      - PROVIDERS_GENERIC_OAUTH_AUTH_URL=${GITHUB_AUTH_URL}
      - PROVIDERS_GENERIC_OAUTH_TOKEN_URL=${GITHUB_TOKEN_URL}
      - PROVIDERS_GENERIC_OAUTH_USER_URL=${GITHUB_USER_URL}
      - PROVIDERS_GENERIC_OAUTH_CLIENT_ID=${GITHUB_CLIENT_ID}
      - PROVIDERS_GENERIC_OAUTH_CLIENT_SECRET=${GITHUB_CLIENT_SECRET}
      - PROVIDERS_GENERIC_OAUTH_SCOPE=user,repo
      - INSECURE_COOKIE=true
      - LOG_LEVEL=debug
      - WHITELIST=${WHITELISTED_EMAILS}
    labels:
      - "traefik.http.middlewares.test-things-auth.forwardauth.address=http://test-things-auth:${FORWARD_AUTH_PORT}"
      - "traefik.http.middlewares.test-things-auth.forwardauth.authResponseHeaders=X-Forwarded-User"
      - "traefik.http.services.test-things-auth.loadbalancer.server.port=${FORWARD_AUTH_PORT}"
    networks:
      - things_network
  prometheus:
    image: prom/prometheus
    volumes:
      - "prometheus_data:/prometheus"
      - "${CONFIG_FILEPATH}/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml"
    labels:
      - "traefik.http.routers.prometheus.rule=Host(`prometheus.${STACK_HOSTNAME}`)"
      - "traefik.http.routers.prometheus.service=prometheus"
      - "traefik.http.routers.prometheus.middlewares=test-things-auth"
      - "traefik.http.services.prometheus.loadbalancer.server.port=${PROMETHEUS_PORT}"
    depends_on:
      - cadvisor
    networks:
      - things_network
  grafana:
    image: grafana/grafana
    environment:
      - PROMETHEUS_PORT=${PROMETHEUS_PORT}
      - GF_SERVER_DOMAIN=grafana.${STACK_HOSTNAME}
      - GF_SERVER_ROOT_URL=http://grafana.${STACK_HOSTNAME}
      - LOKI_PORT=${LOKI_PORT}
    volumes:
      - ${CONFIG_FILEPATH}/grafana/provisioning:/etc/grafana/provisioning
      - ${CONFIG_FILEPATH}/grafana/dashboards:/var/lib/grafana/dashboards
      - grafana_data:/var/lib/grafana
    labels:
      - "traefik.http.routers.grafana.rule=Host(`grafana.${STACK_HOSTNAME}`)"
      - "traefik.http.routers.grafana.service=grafana"
      - "traefik.http.services.grafana.loadbalancer.server.port=${GRAFANA_PORT}"
    depends_on:
      - prometheus
    networks:
      - things_network
  cadvisor:
    image: gcr.io/cadvisor/cadvisor:latest
    container_name: cadvisor
    labels:
      - "traefik.http.routers.cadvisor.rule=Host(`cadvisor.${STACK_HOSTNAME}`)"
      - "traefik.http.routers.cadvisor.service=cadvisor"
      - "traefik.http.routers.cadvisor.middlewares=test-things-auth"
      - "traefik.http.services.cadvisor.loadbalancer.server.port=${CADVISOR_PORT}"
    volumes:
      - /:/rootfs:ro
      - /var/run/docker.sock:/var/run/docker.sock
      - /sys:/sys:ro
      - /var/lib/docker/:/var/lib/docker:ro
    networks:
      - things_network
  loki:
    image: grafana/loki:2.9.2
    # labels:
    #   - "traefik.http.routers.loki.rule=Host(`loki.${STACK_HOSTNAME}`)"
    #   - "traefik.http.routers.loki.service=loki"
    #   - "traefik.http.services.loki.loadbalancer.server.port=${LOKI_PORT}"
    ports:
      - "3100:3100"
    volumes:
      - ${CONFIG_FILEPATH}/loki/loki-config.yaml:/etc/loki/local-config.yaml
    networks:
      - things_network
  promtail:
    image: grafana/promtail:2.9.2
    volumes:
      - /var/log:/var/log
      - ${CONFIG_FILEPATH}/promtail/promtail-config.yaml:/etc/promtail/config.yaml
    networks:
      - things_network
  mosquitto:
    image: eclipse-mosquitto:2
    ports:
        - "${MOSQUITTO_PORT_IN}:${MOSQUITTO_PORT_IN}"
    volumes:
        - ${CONFIG_FILEPATH}/mosquitto:/mosquitto/config
    networks:
        - things_network
volumes:
  prometheus_data:
  grafana_data:
networks:
  things_network:
    name: things_network
    driver: 'bridge'