subzy/docker-compose.yml at master · secinto/subzy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
# Docker Compose for local Graylog testing
# Usage: docker-compose up -d
# Access Graylog at: http://localhost:9000 (admin/admin)
# GELF UDP input: localhost:12201

version: '3'

services:
  # MongoDB for Graylog metadata
  mongodb:
    image: mongo:5.0
    container_name: subzy-mongodb
    volumes:
      - mongo_data:/data/db
    networks:
      - graylog

  # Elasticsearch for log storage
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:7.17.9
    container_name: subzy-elasticsearch
    environment:
      - "discovery.type=single-node"
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
      - "xpack.security.enabled=false"
    volumes:
      - es_data:/usr/share/elasticsearch/data
    networks:
      - graylog

  # Graylog server
  graylog:
    image: graylog/graylog:5.0
    container_name: subzy-graylog
    environment:
      # CHANGE THIS SECRET!
      - GRAYLOG_PASSWORD_SECRET=somepasswordpepper
      # Password: admin (SHA-256 hash)
      - GRAYLOG_ROOT_PASSWORD_SHA2=8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918
      - GRAYLOG_HTTP_EXTERNAL_URI=http://127.0.0.1:9000/
      - GRAYLOG_MONGODB_URI=mongodb://mongodb:27017/graylog
      - GRAYLOG_ELASTICSEARCH_HOSTS=http://elasticsearch:9200
    depends_on:
      - mongodb
      - elasticsearch
    ports:
      - "9000:9000"     # Web interface
      - "12201:12201/udp"  # GELF UDP
      - "1514:1514"     # Syslog TCP
      - "1514:1514/udp" # Syslog UDP
      - "12201:12201"   # GELF TCP
    volumes:
      - graylog_data:/usr/share/graylog/data
    networks:
      - graylog

networks:
  graylog:
    driver: bridge

volumes:
  mongo_data:
    driver: local
  es_data:
    driver: local
  graylog_data:
    driver: local