mirror of
https://github.com/temporalio/docker-compose.git
synced 2026-08-30 18:41:40 -07:00
f58f654c10
* Add explicit persistent volumes to containers When Docker recreates containers from images, Elasticsearch data is lost, because container recreation deletes volumes not explicitly specified in dockerfile. Postgres or MySQL or Cassandra data isn't lost, because image definition for those contain explicit VOLUME command (eg 'VOLUME /var/lib/postgresql/data'), however moving it to docker-compose definition for clarity as well. * Remove reference to UI v2 from README.md * Use anonymous volumes for data persistence To be consistent with existing behavior of docker-compose, do not use named volumes, keep using anonymous ones.
122 lines
3.5 KiB
YAML
122 lines
3.5 KiB
YAML
version: "3.5"
|
|
services:
|
|
elasticsearch:
|
|
container_name: temporal-elasticsearch
|
|
environment:
|
|
- cluster.routing.allocation.disk.threshold_enabled=true
|
|
- cluster.routing.allocation.disk.watermark.low=512mb
|
|
- cluster.routing.allocation.disk.watermark.high=256mb
|
|
- cluster.routing.allocation.disk.watermark.flood_stage=128mb
|
|
- discovery.type=single-node
|
|
- ES_JAVA_OPTS=-Xms256m -Xmx256m
|
|
- ELASTIC_PASSWORD=elastic
|
|
- xpack.security.enabled=true
|
|
- xpack.security.http.ssl.enabled=true
|
|
- xpack.security.http.ssl.key=certs/elasticsearch-key.pem
|
|
- xpack.security.http.ssl.certificate=certs/elasticsearch.pem
|
|
- xpack.security.http.ssl.certificate_authorities=certs/ca.pem
|
|
- xpack.security.transport.ssl.enabled=true
|
|
- xpack.security.transport.ssl.key=certs/elasticsearch-key.pem
|
|
- xpack.security.transport.ssl.certificate=certs/elasticsearch.pem
|
|
- xpack.security.transport.ssl.certificate_authorities=certs/ca.pem
|
|
image: elasticsearch:${ELASTICSEARCH_VERSION}
|
|
networks:
|
|
- temporal-network
|
|
expose:
|
|
- 9200
|
|
volumes:
|
|
- temporal_tls_pki:/usr/share/elasticsearch/config/certs
|
|
- /var/lib/elasticsearch/data
|
|
restart: on-failure
|
|
postgresql:
|
|
container_name: temporal-postgresql
|
|
command:
|
|
- "-c"
|
|
- "ssl=on"
|
|
- "-c"
|
|
- "ssl_cert_file=/pki/postgresql.pem"
|
|
- "-c"
|
|
- "ssl_key_file=/pki/postgresql-key.pem"
|
|
- "-c"
|
|
- "ssl_ca_file=/pki/ca.pem"
|
|
environment:
|
|
POSTGRES_PASSWORD: temporal
|
|
POSTGRES_USER: temporal
|
|
image: postgres:${POSTGRESQL_VERSION}
|
|
networks:
|
|
- temporal-network
|
|
expose:
|
|
- 5432
|
|
volumes:
|
|
- temporal_tls_pki:/pki
|
|
- /var/lib/postgresql/data
|
|
restart: on-failure
|
|
temporal:
|
|
container_name: temporal
|
|
build:
|
|
context: .
|
|
dockerfile: tls/Dockerfile.auto-setup-tls
|
|
args:
|
|
- BASEIMAGE=auto-setup:${TEMPORAL_VERSION}
|
|
image: auto-setup-tls:${TEMPORAL_VERSION}
|
|
depends_on:
|
|
- postgresql
|
|
- elasticsearch
|
|
environment:
|
|
- DB=postgresql
|
|
- DB_PORT=5432
|
|
- POSTGRES_USER=temporal
|
|
- POSTGRES_PWD=temporal
|
|
- POSTGRES_SEEDS=postgresql
|
|
- SQL_TLS=true
|
|
- DYNAMIC_CONFIG_FILE_PATH=config/dynamicconfig/development-sql.yaml
|
|
- ENABLE_ES=true
|
|
- ES_SEEDS=elasticsearch
|
|
- ES_VERSION=v7
|
|
- ES_SCHEME=https
|
|
- ES_USER=elastic
|
|
- ES_PWD=elastic
|
|
networks:
|
|
- temporal-network
|
|
ports:
|
|
- 7233:7233
|
|
volumes:
|
|
- ./dynamicconfig:/etc/temporal/config/dynamicconfig
|
|
restart: on-failure
|
|
temporal-admin-tools:
|
|
container_name: temporal-admin-tools
|
|
depends_on:
|
|
- temporal
|
|
environment:
|
|
- TEMPORAL_CLI_ADDRESS=temporal:7233
|
|
build:
|
|
context: .
|
|
dockerfile: tls/Dockerfile.admin-tools-tls
|
|
args:
|
|
- BASEIMAGE=admin-tools:${TEMPORAL_VERSION}
|
|
image: temporalio/admin-tools-tls:${TEMPORAL_VERSION}
|
|
networks:
|
|
- temporal-network
|
|
stdin_open: true
|
|
tty: true
|
|
temporal-ui:
|
|
container_name: temporal-ui
|
|
depends_on:
|
|
- temporal
|
|
environment:
|
|
- TEMPORAL_ADDRESS=temporal:7233
|
|
- TEMPORAL_CORS_ORIGINS=http://localhost:3000
|
|
image: temporalio/ui:${TEMPORAL_UI_VERSION}
|
|
networks:
|
|
- temporal-network
|
|
ports:
|
|
- 8080:8080
|
|
restart: on-failure
|
|
networks:
|
|
temporal-network:
|
|
driver: bridge
|
|
name: temporal-network
|
|
volumes:
|
|
temporal_tls_pki:
|
|
external: true
|