50829af421
- Fix cert resolver name (cloudflare -> letsencrypt) - Fix volume paths (/mnt/nas -> /data) - Add missing custom port mappings - Add privileged/capability flags - Add 8 new roles: portainer, n8n, nodered, influxdb, guacamole, watchtower, rtlamr2mqtt, telegraf - Fix Traefik template (ports, ACME path, wildcard cert) - Add extra volume mounts for media services
95 lines
2.9 KiB
Django/Jinja
95 lines
2.9 KiB
Django/Jinja
services:
|
|
prometheus:
|
|
image: {{ prometheus_image }}
|
|
container_name: prometheus
|
|
restart: unless-stopped
|
|
ports:
|
|
- "9095:9090"
|
|
command:
|
|
- --config.file=/etc/prometheus/prometheus.yml
|
|
- --storage.tsdb.path=/prometheus
|
|
- --storage.tsdb.retention.time={{ prometheus_retention }}
|
|
- --web.enable-lifecycle
|
|
volumes:
|
|
- {{ prometheus_data_dir }}/config/prometheus.yml:/etc/prometheus/prometheus.yml:ro
|
|
- {{ prometheus_data_dir }}/data:/prometheus
|
|
labels:
|
|
traefik.enable: "true"
|
|
traefik.http.routers.prometheus.rule: "Host(`{{ prometheus_host }}`)"
|
|
traefik.http.routers.prometheus.entrypoints: websecure
|
|
traefik.http.routers.prometheus.tls.certresolver: letsencrypt
|
|
traefik.http.services.prometheus.loadbalancer.server.port: "9090"
|
|
networks:
|
|
- {{ docker_network_name }}
|
|
|
|
grafana:
|
|
image: {{ grafana_image }}
|
|
container_name: grafana
|
|
restart: unless-stopped
|
|
ports:
|
|
- "3001:3000"
|
|
environment:
|
|
GF_SECURITY_ADMIN_PASSWORD: {{ grafana_admin_password }}
|
|
GF_SERVER_ROOT_URL: "https://{{ grafana_host }}"
|
|
GF_SERVER_DOMAIN: "{{ grafana_host }}"
|
|
volumes:
|
|
- {{ grafana_data_dir }}:/var/lib/grafana
|
|
labels:
|
|
traefik.enable: "true"
|
|
traefik.http.routers.grafana.rule: "Host(`{{ grafana_host }}`)"
|
|
traefik.http.routers.grafana.entrypoints: websecure
|
|
traefik.http.routers.grafana.tls.certresolver: letsencrypt
|
|
traefik.http.services.grafana.loadbalancer.server.port: "3000"
|
|
networks:
|
|
- {{ docker_network_name }}
|
|
|
|
alertmanager:
|
|
image: {{ alertmanager_image }}
|
|
container_name: alertmanager
|
|
restart: unless-stopped
|
|
ports:
|
|
- "9093:9093"
|
|
command:
|
|
- --config.file=/etc/alertmanager/alertmanager.yml
|
|
volumes:
|
|
- {{ alertmanager_data_dir }}/config/alertmanager.yml:/etc/alertmanager/alertmanager.yml:ro
|
|
labels:
|
|
traefik.enable: "true"
|
|
traefik.http.routers.alertmanager.rule: "Host(`{{ alertmanager_host }}`)"
|
|
traefik.http.routers.alertmanager.entrypoints: websecure
|
|
traefik.http.routers.alertmanager.tls.certresolver: letsencrypt
|
|
traefik.http.services.alertmanager.loadbalancer.server.port: "9093"
|
|
networks:
|
|
- {{ docker_network_name }}
|
|
|
|
node-exporter:
|
|
image: {{ node_exporter_image }}
|
|
container_name: node-exporter
|
|
restart: unless-stopped
|
|
ports:
|
|
- "9100:9100"
|
|
command:
|
|
- --path.rootfs=/host
|
|
volumes:
|
|
- /:/host:ro,rslave
|
|
pid: host
|
|
networks:
|
|
- {{ docker_network_name }}
|
|
|
|
cadvisor:
|
|
image: {{ cadvisor_image }}
|
|
container_name: cadvisor
|
|
restart: unless-stopped
|
|
privileged: true
|
|
volumes:
|
|
- /:/rootfs:ro
|
|
- /var/run:/var/run:ro
|
|
- /sys:/sys:ro
|
|
- /var/lib/docker:/var/lib/docker:ro
|
|
networks:
|
|
- {{ docker_network_name }}
|
|
|
|
networks:
|
|
{{ docker_network_name }}:
|
|
external: true
|