ops
parent
5fe18449c0
commit
023e8b8652
|
|
@ -0,0 +1,49 @@
|
|||
import pymongo
|
||||
|
||||
|
||||
client = pymongo.MongoClient("mongodb://IG:jdZwyec3Yb0yaBr8BPJoup1lfovAbGT342I2pX8wFqwCeLGvhXBLiL4vmhM@mongoprimary:27017/IG?authSource=IG")
|
||||
db = client.get_database("IG")
|
||||
collectionRes = db.get_collection("restaurant")
|
||||
collectionLicense = db.get_collection("licence")
|
||||
conf = ''
|
||||
|
||||
for restaurant in collectionRes.find():
|
||||
|
||||
# dict has property 'domain' in restaurant
|
||||
if 'domain' in restaurant:
|
||||
print(restaurant['_id'])
|
||||
# find one license with restaurantId
|
||||
license = collectionLicense.find_one({'restaurantId': str (restaurant['_id'])})
|
||||
|
||||
|
||||
|
||||
|
||||
conf +='''server {
|
||||
server_name '''+restaurant['domain']+''';
|
||||
|
||||
access_log /var/log/nginx/ig/acesss.'''+restaurant['domain']+'''.log;
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:8012;
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
proxy_http_version 1.1;
|
||||
}
|
||||
|
||||
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
}
|
||||
|
||||
|
||||
'''
|
||||
|
||||
# save conf to file
|
||||
with open('apps.conf', 'w') as f:
|
||||
f.write(conf)
|
||||
|
|
@ -0,0 +1,61 @@
|
|||
server{
|
||||
server_name demo.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.demo.log;
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:8012;
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
proxy_http_version 1.1;
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
server{
|
||||
server_name terrace.kermanshah.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.demo.log;
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:8012;
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
proxy_http_version 1.1;
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
server{
|
||||
if ($host = demo.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name demo.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
|
||||
server{
|
||||
if ($host = terrace.kermanshah.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name terrace.kermanshah.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
|
|
@ -0,0 +1,245 @@
|
|||
server{
|
||||
server_name igarson.app www.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.www.log;
|
||||
error_log /var/log/nginx/ig/error.www.log;
|
||||
error_page 500 502 503 504 https://igarson.app/500;
|
||||
error_page 401 403 https://igarson.app/500;
|
||||
error_page 404 https://igarson.app/404;
|
||||
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:8014;
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
}
|
||||
|
||||
location /warehouse/windows {
|
||||
auth_request /api/v1/update/windows/validate;
|
||||
root /data;
|
||||
autoindex on;
|
||||
}
|
||||
|
||||
location = /api/v1/update/windows/validate {
|
||||
internal;
|
||||
proxy_set_header X-Original-URI $request_uri;
|
||||
proxy_pass_request_body off;
|
||||
proxy_pass http://127.0.0.1:8011;
|
||||
}
|
||||
|
||||
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
server{
|
||||
server_name api.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.api.log;
|
||||
error_log /var/log/nginx/ig/error.api.log;
|
||||
client_max_body_size 20M;
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:8011;
|
||||
proxy_read_timeout 90;
|
||||
}
|
||||
|
||||
location /IG {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:8011;
|
||||
proxy_read_timeout 90;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade "websocket";
|
||||
proxy_set_header Connection "upgrade";
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/capitan.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/capitan.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
server {
|
||||
server_name storage.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.storage.log;
|
||||
error_log /var/log/nginx/ig/error.storage.log;
|
||||
|
||||
|
||||
location ~ ^/public/.*\.(ico|jpg|jpeg|gif|png|svg|json)$ {
|
||||
root /volume/ig/api/storage;
|
||||
add_header Cache-Control public;
|
||||
add_header Cache-Control must-revalidate;
|
||||
add_header 'Access-Control-Allow-Origin' '*' always;
|
||||
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
|
||||
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range' always;
|
||||
add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range' always;
|
||||
autoindex on;
|
||||
|
||||
}
|
||||
|
||||
location ~ .*\.(ico|jpg|jpeg|gif|png|svg|json)$ {
|
||||
root /volume/ig/ls/wwwroot;
|
||||
add_header Cache-Control "public, max-age=86400";
|
||||
add_header Surrogate-Control "public, max-age=86400";
|
||||
add_header Cache-Control must-revalidate;
|
||||
add_header 'Access-Control-Allow-Origin' '*' always;
|
||||
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
|
||||
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range' always;
|
||||
add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range' always;
|
||||
autoindex on;
|
||||
|
||||
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/capitan.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/capitan.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
server{
|
||||
server_name ls.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.ls.log;
|
||||
error_log /var/log/nginx/ig/error.ls.log;
|
||||
client_max_body_size 20M;
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:4501;
|
||||
proxy_read_timeout 90;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/capitan.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/capitan.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
server{
|
||||
server_name capitan.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.capitan.log;
|
||||
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:8013;
|
||||
proxy_read_timeout 90;
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
|
||||
server{
|
||||
server_name guardians.of.galaxy.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.guardians.of.galaxy.log;
|
||||
error_log /var/log/nginx/ig/error.guardians.of.galaxy.log;
|
||||
client_max_body_size 10M;
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:6732;
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/capitan.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/capitan.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
# redirects
|
||||
server{
|
||||
if ($host = www.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
if ($host = igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name igarson.app www.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
|
||||
server{
|
||||
if ($host = guardians.of.galaxy.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name guardians.of.galaxy.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
|
||||
server{
|
||||
if ($host = capitan.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name capitan.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
|
||||
server{
|
||||
if ($host = ls.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name ls.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
|
||||
server{
|
||||
if ($host = storage.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name storage.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
|
||||
server{
|
||||
if ($host = api.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name api.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,194 @@
|
|||
server {
|
||||
server_name mafia.game.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.game.mafia.log;
|
||||
error_log /var/log/nginx/ig/error.game.mafia.log;
|
||||
|
||||
location / {
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-Server $host;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_pass http://127.0.0.1:6380;
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
server {
|
||||
server_name api.mafia.game.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.game.api.mafia.log;
|
||||
error_log /var/log/nginx/ig/error.game.api.mafia.log;
|
||||
client_max_body_size 10M;
|
||||
|
||||
location / {
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-Server $host;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_pass http://127.0.0.1:6300;
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
server {
|
||||
server_name 2048.game.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.game.2048.log;
|
||||
|
||||
|
||||
location / {
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-Server $host;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_pass http://127.0.0.1:6533;
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
server{
|
||||
server_name sudoku.game.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.game.sudoku.log;
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:6532;
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
}
|
||||
|
||||
server{
|
||||
server_name quiz.game.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.game.quiz.log;
|
||||
error_log /var/log/nginx/ig/error.game.quiz.log;
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:8097;
|
||||
proxy_read_timeout 90;
|
||||
}
|
||||
|
||||
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
|
||||
}
|
||||
server{
|
||||
server_name api.quiz.game.igarson.app;
|
||||
access_log /var/log/nginx/ig/access.game.api.quiz.log;
|
||||
error_log /var/log/nginx/ig/error.game.api.quiz.log;
|
||||
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:8096;
|
||||
proxy_read_timeout 90;
|
||||
}
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/demo.igarson.app/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/demo.igarson.app/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
# redirects
|
||||
|
||||
|
||||
server{
|
||||
if ($host = mafia.game.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name mafia.game.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
|
||||
server{
|
||||
if ($host = 2048.game.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name 2048.game.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
server{
|
||||
if ($host = api.mafia.game.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name api.mafia.game.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
server{
|
||||
if ($host = sudoku.game.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name sudoku.game.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
server{
|
||||
if ($host = quiz.game.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name quiz.game.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
server{
|
||||
if ($host = api.quiz.game.igarson.app) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
server_name api.quiz.game.igarson.app;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
}
|
||||
|
|
@ -0,0 +1,3 @@
|
|||
include /etc/nginx/sites-available/base.conf;
|
||||
include /etc/nginx/sites-available/apps.conf;
|
||||
include /etc/nginx/sites-available/games.conf;
|
||||
|
|
@ -0,0 +1,25 @@
|
|||
#mongo
|
||||
MONGODB_IG_PASSWORD = jdZwyec3Yb0yaBr8BP+Joup1l/fovAbGT342I2pX8w+X+FqwCeLGvhXBLiL4vmhM
|
||||
MONGODB_ADVERTISED_HOSTNAME=mongoprimary
|
||||
MONGODB_REPLICA_SET_MODE=primary
|
||||
MONGODB_ROOT_PASSWORD=cWv1WQvWEp+LPdax9We/M6PeT7KgyTE9zKmC5y1ieqz4JtpLiVifJrQg0VHYhE6l
|
||||
MONGODB_REPLICA_SET_KEY=gp39MND7udY6bt9V3h9u+dhxToop4WZTZ2Umn810snSYurlSIPqs/oy0YfjftsBz
|
||||
#pg
|
||||
POSTGRESQL_USERNAME=igarsonAgent
|
||||
POSTGRESQL_PASSWORD=xHTpBf4wC+bBeNg2pL6Ga7VEWKFJx7VPEUpqxwPFfOc2YYTVwFQuHfsiqoVeT9+6
|
||||
POSTGRESQL_DATABASE=igarsonDB
|
||||
POSTGRESQL_REPLICATION_MODE=master
|
||||
POSTGRESQL_REPLICATION_USER=pgreplicator
|
||||
POSTGRESQL_REPLICATION_PASSWORD=ciXz6xmnEMZSO+0T8L6mGcFJrAvPzkTC04oh/WYIRi51gMQLPfW8tTEHALX6fhk4
|
||||
#rabbit
|
||||
RABBITMQ_PASSWORD=muyXH/zymcTYLzk3wYnIwG+UJWECKy0ViUDO+UlCmPF3XS+2kliuV0TaA0mWf6lT
|
||||
RABBITMQ_USERNAME=igarsonAgent
|
||||
#redis
|
||||
REDIS_REPLICATION_MODE=slave
|
||||
REDIS_MASTER_HOST=redismaster
|
||||
REDIS_MASTER_PORT_NUMBER=6379
|
||||
REDIS_MASTER_PASSWORD=Mf7VXwbaJQuMRd1sETVl79A7URUTyiEFwctGk3RhD+q74DmKDzc2SztYEZ2YynLZI8xuq7b9gNz2e7g2MNfU9sP8q+bEK9CqAu3y2Zu4xkVyzyYKdFMT696IB/SS1M7rvZKw7NBYT99lGCpj1edk+6hRpK/Qy2pfiVo29VKEgSXnkeJaM9nMJQ3wxN/1gLJd/uTGGf85nZWhUTEIdK58lJPSXLU55VqcaksahJHlg2oz5P5FNXWRPCnSC7obJ4OtkuHNw/P8REEL0KDyZ9khilU/XvzSgzp+v5i9hmUdKO3B8r+Y4keUZyaKz2VxCHSGAuqWSCpe+do1qQ==
|
||||
REDIS_PASSWORD=gpGS7RezaKsWRH+qga95z6JTTxvecrpFShRR9IXqWZO2o5Kf8YAoNvGni9Zh5GGIM0Oz+e9+Cph9XDjfs3phgauiFtsEDkAf/1dxR8CixIzddcXKXgaawiqfwB8WCuM/2k8Iw7cv2wqoIdWrhdHbn96N//Su57Ri4hy5CRbUAl7VmGd9EL1sGytOJmXzQOi3lJBWvfVWbYBmgALwVQSads6g+OHmP2wpXsTsYMG1thppJVGo7i5Rh515hAuAGWTed4Ayqoe1muRR1L1Rs8pdA7IH/u4kOL1758Idd3BfTTRkr7xfjXY40dM0BkUqL5E4rOga38ThaVC99g==
|
||||
#monitor
|
||||
ADMIN_USER=nerdguy
|
||||
ADMIN_PASSWORD=RbBmIu1LCgIqKcMmopc1Ie21+1OKsX1ktNCAeiViNIb6HAKkzjJ+GhZlLysItwgm
|
||||
|
|
@ -0,0 +1,32 @@
|
|||
---
|
||||
- name: letsencrypt
|
||||
hosts: supermaster
|
||||
become: yes
|
||||
vars_files:
|
||||
- var/domains.yml
|
||||
tasks:
|
||||
# - name: add domain to nginx with j2 block
|
||||
# template:
|
||||
# src: template/nginx-server-block.j2
|
||||
# dest: /tmp/new-nginx-server-block.{{item.server_name}}.conf
|
||||
# with_items:
|
||||
# - "{{ newDomains }}"
|
||||
|
||||
# - name: append /tmp/new-nginx-server-block.conf to specific conf
|
||||
# shell: |
|
||||
# cat /tmp/new-nginx-server-block.{{item.server_name}}.conf >> /etc/nginx/sites-available/{{ item.conf_file }}
|
||||
# rm -rf /tmp/new-nginx-server-block.{{item.server_name}}.conf
|
||||
# with_items:
|
||||
# - "{{ newDomains }}"
|
||||
|
||||
- name: encrypt all domains
|
||||
expect:
|
||||
command: certbot --nginx -d "{{ item.server_name }}"
|
||||
responses:
|
||||
Question:
|
||||
- 2
|
||||
- 2
|
||||
with_items:
|
||||
- "{{ newDomains }}"
|
||||
|
||||
|
||||
|
|
@ -156,6 +156,13 @@
|
|||
shell: reboot
|
||||
ignore_errors: yes
|
||||
|
||||
|
||||
- name: add enviroments to all servers
|
||||
shell: |
|
||||
echo "export ADMIN_USER=nerdguy" >> /etc/environment
|
||||
echo "export ADMIN_PASSWORD=RbBmIu1LCgIqKcMmopc1Ie21+1OKsX1ktNCAeiViNIb6HAKkzjJ+GhZlLysItwgm" >> /etc/environment
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,18 @@
|
|||
---
|
||||
- name: env modifier
|
||||
hosts: all
|
||||
become: yes
|
||||
tasks:
|
||||
- name: flush /etc/enviroments
|
||||
shell: |
|
||||
> /etc/environment
|
||||
- name: add enviroments to all servers
|
||||
shell: |
|
||||
export {{item}}
|
||||
echo {{item}} >> /etc/environment
|
||||
with_items:
|
||||
- PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin"
|
||||
- DOMAIN=igarson.app
|
||||
- ADMIN_USER=nerdguy
|
||||
- ADMIN_PASSWORD=RbBmIu1LCgIqKcMmopc1Ie21+1OKsX1ktNCAeiViNIb6HAKkzjJ+GhZlLysItwgm
|
||||
|
||||
|
|
@ -0,0 +1,19 @@
|
|||
---
|
||||
- name: sync new apps to nginx
|
||||
hosts: supermaster
|
||||
become: yes
|
||||
tasks:
|
||||
- name: copy script
|
||||
copy:
|
||||
src: ../../config/script/apps-generator.py
|
||||
dest: /tmp/apps-generator.py
|
||||
owner: root
|
||||
group: root
|
||||
mode: u=rw,g=r,o=r
|
||||
|
||||
- name: run script ans sync apps.conf
|
||||
shell: docker run --rm -it -v /tmp/apps-generator.py:/apps-generator.py -v /etc/nginx/sites-available/apps.conf:/tmp/apps.conf --network mother registry.vnfco.ir/library/python:3.10.1-alpine3.15 pip3 install pymongo && python3 /apps-generator.py
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
@ -41,6 +41,17 @@
|
|||
mkdir -p /volume/dns
|
||||
mkdir -p /volume/nginx
|
||||
mkdir -p /volume/portainer
|
||||
mkdir -p /volume/mongo/primary
|
||||
mkdir -p /data/warehouse/windows
|
||||
mkdir -p /var/log/nginx/ig/
|
||||
chown -R 1001:1001 /volume/mongo/primary
|
||||
chown -R 1001:1001 /volume/pg
|
||||
chown -R 1001:1001 /volume/redis
|
||||
chown -R 1001:1001 /volume/rabbit
|
||||
chmod -R 755 /data/warehouse/windows
|
||||
|
||||
|
||||
|
||||
|
||||
- name: create nfs export
|
||||
shell: |
|
||||
|
|
@ -0,0 +1,19 @@
|
|||
---
|
||||
- name: sync all conf files for nginx
|
||||
hosts: supermaster
|
||||
become: yes
|
||||
tasks:
|
||||
- name: copy files
|
||||
copy:
|
||||
src: ../../config/sites-available
|
||||
dest: /etc/nginx/
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0644'
|
||||
|
||||
|
||||
- name: create link from sites-available to sites-enabled
|
||||
shell: |
|
||||
rm -rf /etc/nginx/sites-enabled/*
|
||||
ln -s /etc/nginx/sites-available/* /etc/nginx/sites-enabled/
|
||||
|
||||
|
|
@ -0,0 +1,17 @@
|
|||
server{
|
||||
server_name {{ item.server_name }};
|
||||
access_log /var/log/nginx/ig/access.{{item.server_name}}.log;
|
||||
{{ item.server_config }}
|
||||
location / {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://127.0.0.1:{{ item.service_port}};
|
||||
proxy_read_timeout 90;
|
||||
proxy_redirect off;
|
||||
proxy_http_version 1.1;
|
||||
}
|
||||
listen 80;
|
||||
|
||||
}
|
||||
|
|
@ -0,0 +1,19 @@
|
|||
---
|
||||
domains:
|
||||
- www.igarson.app
|
||||
- igarson.app
|
||||
- api.igarson.app
|
||||
- ls.igarson.app
|
||||
- storage.igarson.app
|
||||
- guardians.of.galaxy.igarson.app
|
||||
- capitan.igarson.app
|
||||
- mafia.game.igarson.app
|
||||
- api.mafia.game.igarson.app
|
||||
- quiz.game.igarson.app
|
||||
- api.quiz.game.igarson.app
|
||||
- sudoku.game.igarson.app
|
||||
- 2048.game.igarson.app
|
||||
- demo.igarson.app
|
||||
- terrace.kermanshah.igarson.app
|
||||
- champions.of.galaxy.igarson.app
|
||||
|
||||
|
|
@ -0,0 +1,40 @@
|
|||
:9090 {
|
||||
basicauth / {$ADMIN_USER} {$ADMIN_PASSWORD}
|
||||
proxy / prometheus:9090 {
|
||||
transparent
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
||||
:9093 {
|
||||
basicauth / {$ADMIN_USER} {$ADMIN_PASSWORD}
|
||||
proxy / alertmanager:9093 {
|
||||
transparent
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
||||
:9094 {
|
||||
basicauth / {$ADMIN_USER} {$ADMIN_PASSWORD}
|
||||
proxy / unsee:8080 {
|
||||
transparent
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
||||
:3000 {
|
||||
proxy / grafana:3000 {
|
||||
transparent
|
||||
websocket
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
||||
|
|
@ -0,0 +1,8 @@
|
|||
:9323 {
|
||||
proxy / {$DOCKER_GWBRIDGE_IP}:9323 {
|
||||
transparent
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
|
@ -0,0 +1,10 @@
|
|||
FROM prom/prometheus:v2.5.0
|
||||
# https://hub.docker.com/r/prom/prometheus/tags/
|
||||
|
||||
ENV WEAVE_TOKEN=none
|
||||
|
||||
COPY conf /etc/prometheus/
|
||||
|
||||
ENTRYPOINT [ "/etc/prometheus/docker-entrypoint.sh" ]
|
||||
CMD [ "--config.file=/etc/prometheus/prometheus.yml", \
|
||||
"--storage.tsdb.path=/prometheus" ]
|
||||
|
|
@ -0,0 +1,48 @@
|
|||
#!/bin/sh -e
|
||||
|
||||
cat /etc/prometheus/prometheus.yml > /tmp/prometheus.yml
|
||||
cat /etc/prometheus/weave-cortex.yml | \
|
||||
sed "s@#password: <token>#@password: '$WEAVE_TOKEN'@g" > /tmp/weave-cortex.yml
|
||||
|
||||
#JOBS=mongo-exporter:9111 redis-exporter:9112
|
||||
|
||||
if [ ${JOBS+x} ]; then
|
||||
|
||||
for job in $JOBS
|
||||
do
|
||||
echo "adding job $job"
|
||||
|
||||
SERVICE=$(echo "$job" | cut -d":" -f1)
|
||||
PORT=$(echo "$job" | cut -d":" -f2)
|
||||
|
||||
cat >>/tmp/prometheus.yml <<EOF
|
||||
|
||||
- job_name: '${SERVICE}'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.${SERVICE}'
|
||||
type: 'A'
|
||||
port: ${PORT}
|
||||
EOF
|
||||
|
||||
cat >>/tmp/weave-cortex.yml <<EOF
|
||||
|
||||
- job_name: '${SERVICE}'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.${SERVICE}'
|
||||
type: 'A'
|
||||
port: ${PORT}
|
||||
EOF
|
||||
|
||||
done
|
||||
|
||||
fi
|
||||
|
||||
mv /tmp/prometheus.yml /etc/prometheus/prometheus.yml
|
||||
mv /tmp/weave-cortex.yml /etc/prometheus/weave-cortex.yml
|
||||
|
||||
set -- /bin/prometheus "$@"
|
||||
|
||||
exec "$@"
|
||||
|
||||
|
|
@ -0,0 +1,44 @@
|
|||
global:
|
||||
scrape_interval: 15s
|
||||
evaluation_interval: 15s
|
||||
|
||||
external_labels:
|
||||
monitor: 'promswarm'
|
||||
|
||||
rule_files:
|
||||
- "swarm_node.rules.yml"
|
||||
- "swarm_task.rules.yml"
|
||||
|
||||
alerting:
|
||||
alertmanagers:
|
||||
- static_configs:
|
||||
- targets:
|
||||
- alertmanager:9093
|
||||
|
||||
scrape_configs:
|
||||
- job_name: 'prometheus'
|
||||
static_configs:
|
||||
- targets: ['localhost:9090']
|
||||
|
||||
- job_name: 'dockerd-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.dockerd-exporter'
|
||||
type: 'A'
|
||||
port: 9323
|
||||
|
||||
- job_name: 'cadvisor'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.cadvisor'
|
||||
type: 'A'
|
||||
port: 8080
|
||||
|
||||
- job_name: 'node-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.node-exporter'
|
||||
type: 'A'
|
||||
port: 9100
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,37 @@
|
|||
remote_write:
|
||||
- url: https://cloud.weave.works/api/prom/push
|
||||
basic_auth:
|
||||
#password: <token>#
|
||||
|
||||
global:
|
||||
scrape_interval: 15s
|
||||
evaluation_interval: 15s
|
||||
|
||||
external_labels:
|
||||
monitor: 'promswarm'
|
||||
|
||||
scrape_configs:
|
||||
- job_name: 'prometheus'
|
||||
static_configs:
|
||||
- targets: ['localhost:9090']
|
||||
|
||||
- job_name: 'dockerd-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.dockerd-exporter'
|
||||
type: 'A'
|
||||
port: 9323
|
||||
|
||||
- job_name: 'cadvisor'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.cadvisor'
|
||||
type: 'A'
|
||||
port: 8080
|
||||
|
||||
- job_name: 'node-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.node-exporter'
|
||||
type: 'A'
|
||||
port: 9100
|
||||
|
|
@ -0,0 +1,44 @@
|
|||
groups:
|
||||
- name: /1/store/projects/vagrant/docker-swarm-vagrant/apps/swarmprom/prometheus/rules/swarm_node.rules.yml
|
||||
rules:
|
||||
- alert: node_cpu_usage
|
||||
expr: 100 - (avg(irate(node_cpu_seconds_total{mode="idle"}[1m]) * ON(instance) GROUP_LEFT(node_name)
|
||||
node_meta * 100) BY (node_name)) > 50
|
||||
for: 1m
|
||||
labels:
|
||||
severity: warning
|
||||
annotations:
|
||||
description: Swarm node {{ $labels.node_name }} CPU usage is at {{ humanize
|
||||
$value}}%.
|
||||
summary: CPU alert for Swarm node '{{ $labels.node_name }}'
|
||||
- alert: node_memory_usage
|
||||
expr: sum(((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes)
|
||||
* ON(instance) GROUP_LEFT(node_name) node_meta * 100) BY (node_name) > 80
|
||||
for: 1m
|
||||
labels:
|
||||
severity: warning
|
||||
annotations:
|
||||
description: Swarm node {{ $labels.node_name }} memory usage is at {{ humanize
|
||||
$value}}%.
|
||||
summary: Memory alert for Swarm node '{{ $labels.node_name }}'
|
||||
- alert: node_disk_usage
|
||||
expr: ((node_filesystem_size_bytes{mountpoint="/rootfs"} - node_filesystem_free_bytes{mountpoint="/rootfs"})
|
||||
* 100 / node_filesystem_size_bytes{mountpoint="/rootfs"}) * ON(instance) GROUP_LEFT(node_name)
|
||||
node_meta > 85
|
||||
for: 1m
|
||||
labels:
|
||||
severity: warning
|
||||
annotations:
|
||||
description: Swarm node {{ $labels.node_name }} disk usage is at {{ humanize
|
||||
$value}}%.
|
||||
summary: Disk alert for Swarm node '{{ $labels.node_name }}'
|
||||
- alert: node_disk_fill_rate_6h
|
||||
expr: predict_linear(node_filesystem_free_bytes{mountpoint="/rootfs"}[1h], 6 * 3600) * ON(instance)
|
||||
GROUP_LEFT(node_name) node_meta < 0
|
||||
for: 1h
|
||||
labels:
|
||||
severity: critical
|
||||
annotations:
|
||||
description: Swarm node {{ $labels.node_name }} disk is going to fill up in
|
||||
6h.
|
||||
summary: Disk fill alert for Swarm node '{{ $labels.node_name }}'
|
||||
|
|
@ -0,0 +1,24 @@
|
|||
groups:
|
||||
- name: /1/store/projects/vagrant/docker-swarm-vagrant/apps/swarmprom/prometheus/rules/swarm_task.rules.yml
|
||||
rules:
|
||||
- alert: task_high_cpu_usage_50
|
||||
expr: sum(rate(container_cpu_usage_seconds_total{container_label_com_docker_swarm_task_name=~".+"}[1m]))
|
||||
BY (container_label_com_docker_swarm_task_name, container_label_com_docker_swarm_node_id)
|
||||
* 100 > 50
|
||||
for: 1m
|
||||
annotations:
|
||||
description: '{{ $labels.container_label_com_docker_swarm_task_name }} on ''{{
|
||||
$labels.container_label_com_docker_swarm_node_id }}'' CPU usage is at {{ humanize
|
||||
$value}}%.'
|
||||
summary: CPU alert for Swarm task '{{ $labels.container_label_com_docker_swarm_task_name
|
||||
}}' on '{{ $labels.container_label_com_docker_swarm_node_id }}'
|
||||
- alert: task_high_memory_usage_1g
|
||||
expr: sum(container_memory_rss{container_label_com_docker_swarm_task_name=~".+"})
|
||||
BY (container_label_com_docker_swarm_task_name, container_label_com_docker_swarm_node_id) > 1e+09
|
||||
for: 1m
|
||||
annotations:
|
||||
description: '{{ $labels.container_label_com_docker_swarm_task_name }} on ''{{
|
||||
$labels.container_label_com_docker_swarm_node_id }}'' memory usage is {{ humanize
|
||||
$value}}.'
|
||||
summary: Memory alert for Swarm task '{{ $labels.container_label_com_docker_swarm_task_name
|
||||
}}' on '{{ $labels.container_label_com_docker_swarm_node_id }}'
|
||||
|
|
@ -0,0 +1,20 @@
|
|||
---
|
||||
- name: copy config file
|
||||
hosts: supermaster
|
||||
become: yes
|
||||
tasks:
|
||||
- name: copy caddyfile into /volume
|
||||
copy:
|
||||
src: caddy/Caddyfile
|
||||
dest: /volume/config/caddy/Caddyfile
|
||||
- name: copy caddyfile dockerd into /volume
|
||||
copy:
|
||||
src: dockerd-exporter/Caddyfile
|
||||
dest: /volume/config/dockerd-exporter/Caddyfile
|
||||
- name: copy prometeus rules
|
||||
copy:
|
||||
src: prometheus/rules/{{item}}
|
||||
dest: /volume/config/prometheus/rules/{{item}}
|
||||
with_items:
|
||||
- swarm_node.rules.yml
|
||||
- swarm_task.rules.yml
|
||||
|
|
@ -0,0 +1,19 @@
|
|||
6000-6050 = games
|
||||
{
|
||||
6001 2048
|
||||
6002 sudoku
|
||||
6003 mafia
|
||||
6023 api mafia
|
||||
6003 quiz ==> must change
|
||||
6023 api quiz ==> must change
|
||||
}
|
||||
|
||||
8000-9000 = base
|
||||
{
|
||||
4501 ls.igarson.app ==> must change 8010
|
||||
8011 api.igarson.app
|
||||
8012 demo.igarson.app
|
||||
8013 capitan.igarson.app
|
||||
8014 igarson.app
|
||||
6732 guardians.of.galaxy.igarson.app ==> must change 8015
|
||||
}
|
||||
|
|
@ -1,62 +0,0 @@
|
|||
version: "3.7"
|
||||
|
||||
networks:
|
||||
mother:
|
||||
external: true
|
||||
|
||||
|
||||
services:
|
||||
dns:
|
||||
image: registry.vnfco.ir/library/ameersbn/bind:9.16.1-20200524
|
||||
deploy:
|
||||
placement:
|
||||
constraints: [node.role == manager]
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
max_attempts: 3
|
||||
window: 120s
|
||||
volumes:
|
||||
- /volume/dns:/data
|
||||
environment:
|
||||
- ROOT_PASSWORD=9197279882
|
||||
- WEBMIN_INIT_SSL_ENABLED=false
|
||||
ports:
|
||||
- "10000:10000/tcp"
|
||||
- "53:53/tcp"
|
||||
networks:
|
||||
- mother
|
||||
|
||||
# nginx:
|
||||
# image: registry.vnfco.ir/library/ameersbn/bind:9.16.1-20200524
|
||||
# deploy:
|
||||
# placement:
|
||||
# constraints:
|
||||
# - node.label.master==true
|
||||
# update_config:
|
||||
# parallelism: 1
|
||||
# delay: 10s
|
||||
# order: start-stop
|
||||
# restart_policy:
|
||||
# condition: any
|
||||
# delay: 5s
|
||||
# max_attempts: 3
|
||||
# window: 120s
|
||||
# volumes:
|
||||
# - /volume/dns:/data
|
||||
# environment:
|
||||
# - ROOT_PASSWORD=9197279882
|
||||
# ports:
|
||||
# - "10000:10000/tcp"
|
||||
# - "53:53/tcp"
|
||||
# - "53:53/udp"
|
||||
# networks:
|
||||
# - mother
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,3 @@
|
|||
# Denote all files that are truly binary and should not be modified.
|
||||
*.png binary
|
||||
*.jpg binary
|
||||
|
|
@ -0,0 +1,17 @@
|
|||
# Binaries for programs and plugins
|
||||
*.exe
|
||||
*.dll
|
||||
*.so
|
||||
*.dylib
|
||||
|
||||
# Test binary, build with `go test -c`
|
||||
*.test
|
||||
|
||||
# Output of the go coverage tool, specifically when used with LiteIDE
|
||||
*.out
|
||||
|
||||
# Project-local glide cache, RE: https://github.com/Masterminds/glide/issues/736
|
||||
.glide/
|
||||
|
||||
.idea/
|
||||
.DS_Store
|
||||
|
|
@ -0,0 +1,32 @@
|
|||
sudo: required
|
||||
|
||||
services:
|
||||
- docker
|
||||
|
||||
before_install:
|
||||
- curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
|
||||
- sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
|
||||
- sudo apt-get update
|
||||
- sudo apt-get -y install docker-ce
|
||||
- sudo service docker restart
|
||||
|
||||
script:
|
||||
- cd prometheus && docker build -t stefanprodan/swarmprom-prometheus:$TRAVIS_BUILD_NUMBER .
|
||||
- cd .. && cd node-exporter && docker build -t stefanprodan/swarmprom-node-exporter:$TRAVIS_BUILD_NUMBER .
|
||||
- cd .. && cd alertmanager && docker build -t stefanprodan/swarmprom-alertmanager:$TRAVIS_BUILD_NUMBER .
|
||||
- cd .. && cd grafana && docker build -t stefanprodan/swarmprom-grafana:$TRAVIS_BUILD_NUMBER .
|
||||
|
||||
after_success:
|
||||
- if [ -z "$DOCKER_USER" ]; then
|
||||
echo "PR build, skipping Docker Hub push";
|
||||
else
|
||||
docker login -u "$DOCKER_USER" -p "$DOCKER_PASS";
|
||||
docker tag stefanprodan/swarmprom-prometheus:$TRAVIS_BUILD_NUMBER stefanprodan/swarmprom-prometheus:v2.5.0;
|
||||
docker push stefanprodan/swarmprom-prometheus:v2.5.0;
|
||||
docker tag stefanprodan/swarmprom-node-exporter:$TRAVIS_BUILD_NUMBER stefanprodan/swarmprom-node-exporter:v0.16.0;
|
||||
docker push stefanprodan/swarmprom-node-exporter:v0.16.0;
|
||||
docker tag stefanprodan/swarmprom-alertmanager:$TRAVIS_BUILD_NUMBER stefanprodan/swarmprom-alertmanager:v0.15.3;
|
||||
docker push stefanprodan/swarmprom-alertmanager:v0.15.3;
|
||||
docker tag stefanprodan/swarmprom-grafana:$TRAVIS_BUILD_NUMBER stefanprodan/swarmprom-grafana:5.3.4;
|
||||
docker push stefanprodan/swarmprom-grafana:5.3.4;
|
||||
fi
|
||||
|
|
@ -0,0 +1,21 @@
|
|||
MIT License
|
||||
|
||||
Copyright (c) 2017 Stefan Prodan
|
||||
|
||||
Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
of this software and associated documentation files (the "Software"), to deal
|
||||
in the Software without restriction, including without limitation the rights
|
||||
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
copies of the Software, and to permit persons to whom the Software is
|
||||
furnished to do so, subject to the following conditions:
|
||||
|
||||
The above copyright notice and this permission notice shall be included in all
|
||||
copies or substantial portions of the Software.
|
||||
|
||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
||||
SOFTWARE.
|
||||
|
|
@ -0,0 +1,550 @@
|
|||
# swarmprom
|
||||
|
||||
Swarmprom is a starter kit for Docker Swarm monitoring with [Prometheus](https://prometheus.io/),
|
||||
[Grafana](http://grafana.org/),
|
||||
[cAdvisor](https://github.com/google/cadvisor),
|
||||
[Node Exporter](https://github.com/prometheus/node_exporter),
|
||||
[Alert Manager](https://github.com/prometheus/alertmanager)
|
||||
and [Unsee](https://github.com/cloudflare/unsee).
|
||||
|
||||
## Install
|
||||
|
||||
Clone this repository and run the monitoring stack:
|
||||
|
||||
```bash
|
||||
$ git clone https://github.com/stefanprodan/swarmprom.git
|
||||
$ cd swarmprom
|
||||
|
||||
ADMIN_USER=admin \
|
||||
ADMIN_PASSWORD=admin \
|
||||
SLACK_URL=https://hooks.slack.com/services/TOKEN \
|
||||
SLACK_CHANNEL=devops-alerts \
|
||||
SLACK_USER=alertmanager \
|
||||
docker stack deploy -c docker-compose.yml mon
|
||||
```
|
||||
|
||||
Prerequisites:
|
||||
|
||||
* Docker CE 17.09.0-ce or Docker EE 17.06.2-ee-3
|
||||
* Swarm cluster with one manager and a worker node
|
||||
* Docker engine experimental enabled and metrics address set to `0.0.0.0:9323`
|
||||
|
||||
Services:
|
||||
|
||||
* prometheus (metrics database) `http://<swarm-ip>:9090`
|
||||
* grafana (visualize metrics) `http://<swarm-ip>:3000`
|
||||
* node-exporter (host metrics collector)
|
||||
* cadvisor (containers metrics collector)
|
||||
* dockerd-exporter (Docker daemon metrics collector, requires Docker experimental metrics-addr to be enabled)
|
||||
* alertmanager (alerts dispatcher) `http://<swarm-ip>:9093`
|
||||
* unsee (alert manager dashboard) `http://<swarm-ip>:9094`
|
||||
* caddy (reverse proxy and basic auth provider for prometheus, alertmanager and unsee)
|
||||
|
||||
|
||||
## Alternative install with Traefik and HTTPS
|
||||
|
||||
If you have a Docker Swarm cluster with a global Traefik set up as described in [DockerSwarm.rocks](https://dockerswarm.rocks), you can deploy Swarmprom integrated with that global Traefik proxy.
|
||||
|
||||
This way, each Swarmprom service will have its own domain, and each of them will be served using HTTPS, with certificates generated (and renewed) automatically.
|
||||
|
||||
### Requisites
|
||||
|
||||
These instructions assume you already have Traefik set up following that guide above, in short:
|
||||
|
||||
* With automatic HTTPS certificate generation.
|
||||
* A Docker Swarm network `traefik-public`.
|
||||
* Filtering to only serve containers with a label `traefik.constraint-label=traefik-public`.
|
||||
|
||||
### Instructions
|
||||
|
||||
* Clone this repository and enter into the directory:
|
||||
|
||||
```bash
|
||||
$ git clone https://github.com/stefanprodan/swarmprom.git
|
||||
$ cd swarmprom
|
||||
```
|
||||
|
||||
* Set and export an `ADMIN_USER` environment variable:
|
||||
|
||||
```bash
|
||||
export ADMIN_USER=admin
|
||||
```
|
||||
|
||||
* Set and export an `ADMIN_PASSWORD` environment variable:
|
||||
|
||||
|
||||
```bash
|
||||
export ADMIN_PASSWORD=changethis
|
||||
```
|
||||
|
||||
* Set and export a hashed version of the `ADMIN_PASSWORD` using `openssl`, it will be used by Traefik's HTTP Basic Auth for most of the services:
|
||||
|
||||
```bash
|
||||
export HASHED_PASSWORD=$(openssl passwd -apr1 $ADMIN_PASSWORD)
|
||||
```
|
||||
|
||||
* You can check the contents with:
|
||||
|
||||
```bash
|
||||
echo $HASHED_PASSWORD
|
||||
```
|
||||
|
||||
it will look like:
|
||||
|
||||
```
|
||||
$apr1$89eqM5Ro$CxaFELthUKV21DpI3UTQO.
|
||||
```
|
||||
|
||||
* Create and export an environment variable `DOMAIN`, e.g.:
|
||||
|
||||
```bash
|
||||
export DOMAIN=example.com
|
||||
```
|
||||
|
||||
and make sure that the following sub-domains point to your Docker Swarm cluster IPs:
|
||||
|
||||
* `grafana.example.com`
|
||||
* `alertmanager.example.com`
|
||||
* `unsee.example.com`
|
||||
* `prometheus.example.com`
|
||||
|
||||
(and replace `example.com` with your actual domain).
|
||||
|
||||
**Note**: You can also use a subdomain, like `swarmprom.example.com`. Just make sure that the subdomains point to (at least one of) your cluster IPs. Or set up a wildcard subdomain (`*`).
|
||||
|
||||
* If you are using Slack and want to integrate it, set the following environment variables:
|
||||
|
||||
```bash
|
||||
export SLACK_URL=https://hooks.slack.com/services/TOKEN
|
||||
export SLACK_CHANNEL=devops-alerts
|
||||
export SLACK_USER=alertmanager
|
||||
```
|
||||
|
||||
**Note**: by using `export` when declaring all the environment variables above, the next command will be able to use them.
|
||||
|
||||
* Deploy the Traefik version of the stack:
|
||||
|
||||
|
||||
```bash
|
||||
docker stack deploy -c docker-compose.traefik.yml swarmprom
|
||||
```
|
||||
|
||||
To test it, go to each URL:
|
||||
|
||||
* `https://grafana.example.com`
|
||||
* `https://alertmanager.example.com`
|
||||
* `https://unsee.example.com`
|
||||
* `https://prometheus.example.com`
|
||||
|
||||
|
||||
## Setup Grafana
|
||||
|
||||
Navigate to `http://<swarm-ip>:3000` and login with user ***admin*** password ***admin***.
|
||||
You can change the credentials in the compose file or
|
||||
by supplying the `ADMIN_USER` and `ADMIN_PASSWORD` environment variables at stack deploy.
|
||||
|
||||
Swarmprom Grafana is preconfigured with two dashboards and Prometheus as the default data source:
|
||||
|
||||
* Name: Prometheus
|
||||
* Type: Prometheus
|
||||
* Url: http://prometheus:9090
|
||||
* Access: proxy
|
||||
|
||||
After you login, click on the home drop down, in the left upper corner and you'll see the dashboards there.
|
||||
|
||||
***Docker Swarm Nodes Dashboard***
|
||||
|
||||
|
||||
|
||||
URL: `http://<swarm-ip>:3000/dashboard/db/docker-swarm-nodes`
|
||||
|
||||
This dashboard shows key metrics for monitoring the resource usage of your Swarm nodes and can be filtered by node ID:
|
||||
|
||||
* Cluster up-time, number of nodes, number of CPUs, CPU idle gauge
|
||||
* System load average graph, CPU usage graph by node
|
||||
* Total memory, available memory gouge, total disk space and available storage gouge
|
||||
* Memory usage graph by node (used and cached)
|
||||
* I/O usage graph (read and write Bps)
|
||||
* IOPS usage (read and write operation per second) and CPU IOWait
|
||||
* Running containers graph by Swarm service and node
|
||||
* Network usage graph (inbound Bps, outbound Bps)
|
||||
* Nodes list (instance, node ID, node name)
|
||||
|
||||
***Docker Swarm Services Dashboard***
|
||||
|
||||
|
||||
|
||||
URL: `http://<swarm-ip>:3000/dashboard/db/docker-swarm-services`
|
||||
|
||||
This dashboard shows key metrics for monitoring the resource usage of your Swarm stacks and services, can be filtered by node ID:
|
||||
|
||||
* Number of nodes, stacks, services and running container
|
||||
* Swarm tasks graph by service name
|
||||
* Health check graph (total health checks and failed checks)
|
||||
* CPU usage graph by service and by container (top 10)
|
||||
* Memory usage graph by service and by container (top 10)
|
||||
* Network usage graph by service (received and transmitted)
|
||||
* Cluster network traffic and IOPS graphs
|
||||
* Docker engine container and network actions by node
|
||||
* Docker engine list (version, node id, OS, kernel, graph driver)
|
||||
|
||||
***Prometheus Stats Dashboard***
|
||||
|
||||
|
||||
|
||||
URL: `http://<swarm-ip>:3000/dashboard/db/prometheus`
|
||||
|
||||
* Uptime, local storage memory chunks and series
|
||||
* CPU usage graph
|
||||
* Memory usage graph
|
||||
* Chunks to persist and persistence urgency graphs
|
||||
* Chunks ops and checkpoint duration graphs
|
||||
* Target scrapes, rule evaluation duration, samples ingested rate and scrape duration graphs
|
||||
|
||||
|
||||
## Prometheus service discovery
|
||||
|
||||
In order to collect metrics from Swarm nodes you need to deploy the exporters on each server.
|
||||
Using global services you don't have to manually deploy the exporters. When you scale up your
|
||||
cluster, Swarm will launch a cAdvisor, node-exporter and dockerd-exporter instance on the newly created nodes.
|
||||
All you need is an automated way for Prometheus to reach these instances.
|
||||
|
||||
Running Prometheus on the same overlay network as the exporter services allows you to use the DNS service
|
||||
discovery. Using the exporters service name, you can configure DNS discovery:
|
||||
|
||||
```yaml
|
||||
scrape_configs:
|
||||
- job_name: 'node-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.node-exporter'
|
||||
type: 'A'
|
||||
port: 9100
|
||||
- job_name: 'cadvisor'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.cadvisor'
|
||||
type: 'A'
|
||||
port: 8080
|
||||
- job_name: 'dockerd-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.dockerd-exporter'
|
||||
type: 'A'
|
||||
port: 9323
|
||||
```
|
||||
|
||||
When Prometheus runs the DNS lookup, Docker Swarm will return a list of IPs for each task.
|
||||
Using these IPs, Prometheus will bypass the Swarm load-balancer and will be able to scrape each exporter
|
||||
instance.
|
||||
|
||||
The problem with this approach is that you will not be able to tell which exporter runs on which node.
|
||||
Your Swarm nodes' real IPs are different from the exporters IPs since exporters IPs are dynamically
|
||||
assigned by Docker and are part of the overlay network.
|
||||
Swarm doesn't provide any records for the tasks DNS, besides the overlay IP.
|
||||
If Swarm provides SRV records with the nodes hostname or IP, you can re-label the source
|
||||
and overwrite the overlay IP with the real IP.
|
||||
|
||||
In order to tell which host a node-exporter instance is running, I had to create a prom file inside
|
||||
the node-exporter containing the hostname and the Docker Swarm node ID.
|
||||
|
||||
When a node-exporter container starts `node-meta.prom` is generated with the following content:
|
||||
|
||||
```bash
|
||||
"node_meta{node_id=\"$NODE_ID\", node_name=\"$NODE_NAME\"} 1"
|
||||
```
|
||||
|
||||
The node ID value is supplied via `{{.Node.ID}}` and the node name is extracted from the `/etc/hostname`
|
||||
file that is mounted inside the node-exporter container.
|
||||
|
||||
```yaml
|
||||
node-exporter:
|
||||
image: stefanprodan/swarmprom-node-exporter
|
||||
environment:
|
||||
- NODE_ID={{.Node.ID}}
|
||||
volumes:
|
||||
- /etc/hostname:/etc/nodename
|
||||
command:
|
||||
- '-collector.textfile.directory=/etc/node-exporter/'
|
||||
```
|
||||
|
||||
Using the textfile command, you can instruct node-exporter to collect the `node_meta` metric.
|
||||
Now that you have a metric containing the Docker Swarm node ID and name, you can use it in promql queries.
|
||||
|
||||
Let's say you want to find the available memory on each node, normally you would write something like this:
|
||||
|
||||
```
|
||||
sum(node_memory_MemAvailable) by (instance)
|
||||
|
||||
{instance="10.0.0.5:9100"} 889450496
|
||||
{instance="10.0.0.13:9100"} 1404162048
|
||||
{instance="10.0.0.15:9100"} 1406574592
|
||||
```
|
||||
|
||||
The above result is not very helpful since you can't tell what Swarm node is behind the instance IP.
|
||||
So let's write that query taking into account the node_meta metric:
|
||||
|
||||
```sql
|
||||
sum(node_memory_MemAvailable * on(instance) group_left(node_id, node_name) node_meta) by (node_id, node_name)
|
||||
|
||||
{node_id="wrdvtftteo0uaekmdq4dxrn14",node_name="swarm-manager-1"} 889450496
|
||||
{node_id="moggm3uaq8tax9ptr1if89pi7",node_name="swarm-worker-1"} 1404162048
|
||||
{node_id="vkdfx99mm5u4xl2drqhnwtnsv",node_name="swarm-worker-2"} 1406574592
|
||||
```
|
||||
|
||||
This is much better. Instead of overlay IPs, now I can see the actual Docker Swarm nodes ID and hostname. Knowing the hostname of your nodes is useful for alerting as well.
|
||||
|
||||
You can define an alert when available memory reaches 10%. You also will receive the hostname in the alert message
|
||||
and not some overlay IP that you can't correlate to a infrastructure item.
|
||||
|
||||
Maybe you are wondering why you need the node ID if you have the hostname. The node ID will help you match
|
||||
node-exporter instances to cAdvisor instances. All metrics exported by cAdvisor have a label named `container_label_com_docker_swarm_node_id`,
|
||||
and this label can be used to filter containers metrics by Swarm nodes.
|
||||
|
||||
Let's write a query to find out how many containers are running on a Swarm node.
|
||||
Knowing from the `node_meta` metric all the nodes IDs you can define a filter with them in Grafana.
|
||||
Assuming the filter is `$node_id` the container count query should look like this:
|
||||
|
||||
```
|
||||
count(rate(container_last_seen{container_label_com_docker_swarm_node_id=~"$node_id"}[5m]))
|
||||
```
|
||||
|
||||
Another use case for node ID is filtering the metrics provided by the Docker engine daemon.
|
||||
Docker engine doesn't have a label with the node ID attached on every metric, but there is a `swarm_node_info`
|
||||
metric that has this label. If you want to find out the number of failed health checks on a Swarm node
|
||||
you would write a query like this:
|
||||
|
||||
```
|
||||
sum(engine_daemon_health_checks_failed_total) * on(instance) group_left(node_id) swarm_node_info{node_id=~"$node_id"})
|
||||
```
|
||||
|
||||
For now the engine metrics are still experimental. If you want to use dockerd-exporter you have to enable
|
||||
the experimental feature and set the metrics address to `0.0.0.0:9323`.
|
||||
|
||||
If you are running Docker with systemd create or edit
|
||||
/etc/systemd/system/docker.service.d/docker.conf file like so:
|
||||
|
||||
```
|
||||
[Service]
|
||||
ExecStart=
|
||||
ExecStart=/usr/bin/dockerd \
|
||||
--storage-driver=overlay2 \
|
||||
--dns 8.8.4.4 --dns 8.8.8.8 \
|
||||
--experimental=true \
|
||||
--metrics-addr 0.0.0.0:9323
|
||||
```
|
||||
|
||||
Apply the config changes with `systemctl daemon-reload && systemctl restart docker` and
|
||||
check if the docker_gwbridge ip address is 172.18.0.1:
|
||||
|
||||
```bash
|
||||
ip -o addr show docker_gwbridge
|
||||
```
|
||||
|
||||
Replace 172.18.0.1 with your docker_gwbridge address in the compose file:
|
||||
|
||||
```yaml
|
||||
dockerd-exporter:
|
||||
image: stefanprodan/caddy
|
||||
environment:
|
||||
- DOCKER_GWBRIDGE_IP=172.18.0.1
|
||||
```
|
||||
|
||||
Collecting Docker Swarm metrics with Prometheus is not a smooth process, and
|
||||
because of `group_left` queries tend to become more complex.
|
||||
In the future I hope Swarm DNS will contain the SRV record for hostname and Docker engine
|
||||
metrics will expose container metrics replacing cAdvisor all together.
|
||||
|
||||
## Configure Prometheus
|
||||
|
||||
I've set the Prometheus retention period to 24h, you can change these values in the
|
||||
compose file or using the env variable `PROMETHEUS_RETENTION`.
|
||||
|
||||
```yaml
|
||||
prometheus:
|
||||
image: stefanprodan/swarmprom-prometheus
|
||||
command:
|
||||
- '-storage.tsdb.retention=24h'
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
memory: 2048M
|
||||
reservations:
|
||||
memory: 1024M
|
||||
```
|
||||
|
||||
When using host volumes you should ensure that Prometheus doesn't get scheduled on different nodes. You can
|
||||
pin the Prometheus service on a specific host with placement constraints.
|
||||
|
||||
```yaml
|
||||
prometheus:
|
||||
image: stefanprodan/swarmprom-prometheus
|
||||
volumes:
|
||||
- prometheus:/prometheus
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.labels.monitoring.role == prometheus
|
||||
```
|
||||
|
||||
## Configure alerting
|
||||
|
||||
The Prometheus swarmprom comes with the following alert rules:
|
||||
|
||||
***Swarm Node CPU Usage***
|
||||
|
||||
Alerts when a node CPU usage goes over 80% for five minutes.
|
||||
|
||||
```
|
||||
ALERT node_cpu_usage
|
||||
IF 100 - (avg(irate(node_cpu{mode="idle"}[1m]) * on(instance) group_left(node_name) node_meta * 100) by (node_name)) > 80
|
||||
FOR 5m
|
||||
LABELS { severity="warning" }
|
||||
ANNOTATIONS {
|
||||
summary = "CPU alert for Swarm node '{{ $labels.node_name }}'",
|
||||
description = "Swarm node {{ $labels.node_name }} CPU usage is at {{ humanize $value}}%.",
|
||||
}
|
||||
```
|
||||
***Swarm Node Memory Alert***
|
||||
|
||||
Alerts when a node memory usage goes over 80% for five minutes.
|
||||
|
||||
```
|
||||
ALERT node_memory_usage
|
||||
IF sum(((node_memory_MemTotal - node_memory_MemAvailable) / node_memory_MemTotal) * on(instance) group_left(node_name) node_meta * 100) by (node_name) > 80
|
||||
FOR 5m
|
||||
LABELS { severity="warning" }
|
||||
ANNOTATIONS {
|
||||
summary = "Memory alert for Swarm node '{{ $labels.node_name }}'",
|
||||
description = "Swarm node {{ $labels.node_name }} memory usage is at {{ humanize $value}}%.",
|
||||
}
|
||||
```
|
||||
***Swarm Node Disk Alert***
|
||||
|
||||
Alerts when a node storage usage goes over 85% for five minutes.
|
||||
|
||||
```
|
||||
ALERT node_disk_usage
|
||||
IF ((node_filesystem_size{mountpoint="/rootfs"} - node_filesystem_free{mountpoint="/rootfs"}) * 100 / node_filesystem_size{mountpoint="/rootfs"}) * on(instance) group_left(node_name) node_meta > 85
|
||||
FOR 5m
|
||||
LABELS { severity="warning" }
|
||||
ANNOTATIONS {
|
||||
summary = "Disk alert for Swarm node '{{ $labels.node_name }}'",
|
||||
description = "Swarm node {{ $labels.node_name }} disk usage is at {{ humanize $value}}%.",
|
||||
}
|
||||
```
|
||||
|
||||
***Swarm Node Disk Fill Rate Alert***
|
||||
|
||||
Alerts when a node storage is going to remain out of free space in six hours.
|
||||
|
||||
```
|
||||
ALERT node_disk_fill_rate_6h
|
||||
IF predict_linear(node_filesystem_free{mountpoint="/rootfs"}[1h], 6*3600) * on(instance) group_left(node_name) node_meta < 0
|
||||
FOR 1h
|
||||
LABELS { severity="critical" }
|
||||
ANNOTATIONS {
|
||||
summary = "Disk fill alert for Swarm node '{{ $labels.node_name }}'",
|
||||
description = "Swarm node {{ $labels.node_name }} disk is going to fill up in 6h.",
|
||||
}
|
||||
```
|
||||
|
||||
You can add alerts to
|
||||
[swarm_node](https://github.com/stefanprodan/swarmprom/blob/master/prometheus/rules/swarm_node.rules)
|
||||
and [swarm_task](https://github.com/stefanprodan/swarmprom/blob/master/prometheus/rules/swarm_task.rules)
|
||||
files and rerun stack deploy to update them. Because these files are mounted inside the Prometheus
|
||||
container at run time as [Docker configs](https://docs.docker.com/engine/swarm/configs/)
|
||||
you don't have to bundle them with the image.
|
||||
|
||||
The Alertmanager swarmprom image is configured with the Slack receiver.
|
||||
In order to receive alerts on Slack you have to provide the Slack API url,
|
||||
username and channel via environment variables:
|
||||
|
||||
```yaml
|
||||
alertmanager:
|
||||
image: stefanprodan/swarmprom-alertmanager
|
||||
environment:
|
||||
- SLACK_URL=${SLACK_URL}
|
||||
- SLACK_CHANNEL=${SLACK_CHANNEL}
|
||||
- SLACK_USER=${SLACK_USER}
|
||||
```
|
||||
|
||||
You can install the `stress` package with apt and test out the CPU alert, you should receive something like this:
|
||||
|
||||
|
||||
|
||||
Cloudflare has made a great dashboard for managing alerts.
|
||||
Unsee can aggregate alerts from multiple Alertmanager instances, running either in HA mode or separate.
|
||||
You can access unsee at `http://<swarm-ip>:9094` using the admin user/password set via compose up:
|
||||
|
||||
|
||||
|
||||
## Monitoring applications and backend services
|
||||
|
||||
You can extend swarmprom with special-purpose exporters for services like MongoDB, PostgreSQL, Kafka,
|
||||
Redis and also instrument your own applications using the Prometheus client libraries.
|
||||
|
||||
In order to scrape other services you need to attach those to the `mon_net` network so Prometheus
|
||||
can reach them. Or you can attach the `mon_prometheus` service to the networks where your services are running.
|
||||
|
||||
Once your services are reachable by Prometheus you can add the dns name and port of those services to the
|
||||
Prometheus config using the `JOBS` environment variable:
|
||||
|
||||
```yaml
|
||||
prometheus:
|
||||
image: stefanprodan/swarmprom-prometheus
|
||||
environment:
|
||||
- JOBS=mongo-exporter:9216 kafka-exporter:9216 redis-exporter:9216
|
||||
```
|
||||
|
||||
## Monitoring production systems
|
||||
|
||||
The swarmprom project is meant as a starting point in developing your own monitoring solution. Before running this
|
||||
in production you should consider building and publishing your own Prometheus, node exporter and alert manager
|
||||
images. Docker Swarm doesn't play well with locally built images, the first step would be to setup a secure Docker
|
||||
registry that your Swarm has access to and push the images there. Your CI system should assign version tags to each
|
||||
image. Don't rely on the latest tag for continuous deployments, Prometheus will soon reach v2 and the data store
|
||||
will not be backwards compatible with v1.x.
|
||||
|
||||
Another thing you should consider is having redundancy for Prometheus and alert manager.
|
||||
You could run them as a service with two replicas pinned on different nodes, or even better,
|
||||
use a service like Weave Cloud Cortex to ship your metrics outside of your current setup.
|
||||
You can use Weave Cloud not only as a backup of your
|
||||
metrics database but you can also define alerts and use it as a data source for your Grafana dashboards.
|
||||
Having the alerting and monitoring system hosted on a different platform other than your production
|
||||
is good practice that will allow you to react quickly and efficiently when a major disaster strikes.
|
||||
|
||||
Swarmprom comes with built-in [Weave Cloud](https://www.weave.works/product/cloud/) integration,
|
||||
what you need to do is run the weave-compose stack with your Weave service token:
|
||||
|
||||
```bash
|
||||
TOKEN=<WEAVE-TOKEN> \
|
||||
ADMIN_USER=admin \
|
||||
ADMIN_PASSWORD=admin \
|
||||
docker stack deploy -c weave-compose.yml mon
|
||||
```
|
||||
|
||||
This will deploy Weave Scope and Prometheus with Weave Cortex as remote write.
|
||||
The local retention is set to 24h so even if your internet connection drops you'll not lose data
|
||||
as Prometheus will retry pushing data to Weave Cloud when the connection is up again.
|
||||
|
||||
You can define alerts and notifications routes in Weave Cloud in the same way you would do with alert manager.
|
||||
|
||||
To use Grafana with Weave Cloud you have to reconfigure the Prometheus data source like this:
|
||||
|
||||
* Name: Prometheus
|
||||
* Type: Prometheus
|
||||
* Url: https://cloud.weave.works/api/prom
|
||||
* Access: proxy
|
||||
* Basic auth: use your service token as password, the user value is ignored
|
||||
|
||||
Weave Scope automatically generates a map of your application, enabling you to intuitively understand,
|
||||
monitor, and control your microservices based application.
|
||||
You can view metrics, tags and metadata of the running processes, containers and hosts.
|
||||
Scope offers remote access to the Swarm’s nods and containers, making it easy to diagnose issues in real-time.
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
FROM prom/alertmanager:v0.15.3
|
||||
|
||||
COPY conf /etc/alertmanager/
|
||||
|
||||
ENTRYPOINT [ "/etc/alertmanager/docker-entrypoint.sh" ]
|
||||
CMD [ "--config.file=/etc/alertmanager/alertmanager.yml", \
|
||||
"--storage.path=/alertmanager" ]
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
route:
|
||||
receiver: 'slack'
|
||||
|
||||
receivers:
|
||||
- name: 'slack'
|
||||
slack_configs:
|
||||
- send_resolved: true
|
||||
text: "{{ .CommonAnnotations.description }}"
|
||||
#username: <user>#
|
||||
#channel: <channel>#
|
||||
#api_url: <url>#
|
||||
|
|
@ -0,0 +1,12 @@
|
|||
#!/bin/sh -e
|
||||
|
||||
cat /etc/alertmanager/alertmanager.yml |\
|
||||
sed "s@#api_url: <url>#@api_url: '$SLACK_URL'@g" |\
|
||||
sed "s@#channel: <channel>#@channel: '#$SLACK_CHANNEL'@g" |\
|
||||
sed "s@#username: <user>#@username: '$SLACK_USER'@g" > /tmp/alertmanager.yml
|
||||
|
||||
mv /tmp/alertmanager.yml /etc/alertmanager/alertmanager.yml
|
||||
|
||||
set -- /bin/alertmanager "$@"
|
||||
|
||||
exec "$@"
|
||||
|
|
@ -0,0 +1,40 @@
|
|||
:9090 {
|
||||
basicauth / {$ADMIN_USER} {$ADMIN_PASSWORD}
|
||||
proxy / prometheus:9090 {
|
||||
transparent
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
||||
:9093 {
|
||||
basicauth / {$ADMIN_USER} {$ADMIN_PASSWORD}
|
||||
proxy / alertmanager:9093 {
|
||||
transparent
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
||||
:9094 {
|
||||
basicauth / {$ADMIN_USER} {$ADMIN_PASSWORD}
|
||||
proxy / unsee:8080 {
|
||||
transparent
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
||||
:3000 {
|
||||
proxy / grafana:3000 {
|
||||
transparent
|
||||
websocket
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
||||
|
|
@ -0,0 +1,236 @@
|
|||
version: "3.3"
|
||||
|
||||
networks:
|
||||
net:
|
||||
driver: overlay
|
||||
attachable: true
|
||||
traefik-public:
|
||||
external: true
|
||||
|
||||
volumes:
|
||||
prometheus: {}
|
||||
grafana: {}
|
||||
alertmanager: {}
|
||||
|
||||
configs:
|
||||
dockerd_config:
|
||||
file: ./dockerd-exporter/Caddyfile
|
||||
node_rules:
|
||||
file: ./prometheus/rules/swarm_node.rules.yml
|
||||
task_rules:
|
||||
file: ./prometheus/rules/swarm_task.rules.yml
|
||||
|
||||
services:
|
||||
dockerd-exporter:
|
||||
image: stefanprodan/caddy
|
||||
networks:
|
||||
- net
|
||||
environment:
|
||||
- DOCKER_GWBRIDGE_IP=172.18.0.1
|
||||
configs:
|
||||
- source: dockerd_config
|
||||
target: /etc/caddy/Caddyfile
|
||||
deploy:
|
||||
mode: global
|
||||
resources:
|
||||
limits:
|
||||
memory: 128M
|
||||
reservations:
|
||||
memory: 64M
|
||||
|
||||
cadvisor:
|
||||
image: google/cadvisor
|
||||
networks:
|
||||
- net
|
||||
command: -logtostderr -docker_only
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
- /:/rootfs:ro
|
||||
- /var/run:/var/run
|
||||
- /sys:/sys:ro
|
||||
- /var/lib/docker/:/var/lib/docker:ro
|
||||
deploy:
|
||||
mode: global
|
||||
resources:
|
||||
limits:
|
||||
memory: 128M
|
||||
reservations:
|
||||
memory: 64M
|
||||
|
||||
grafana:
|
||||
image: stefanprodan/swarmprom-grafana:5.3.4
|
||||
networks:
|
||||
- default
|
||||
- net
|
||||
- traefik-public
|
||||
environment:
|
||||
- GF_SECURITY_ADMIN_USER=${ADMIN_USER:-admin}
|
||||
- GF_SECURITY_ADMIN_PASSWORD=${ADMIN_PASSWORD:-admin}
|
||||
- GF_USERS_ALLOW_SIGN_UP=false
|
||||
#- GF_SERVER_ROOT_URL=${GF_SERVER_ROOT_URL:-localhost}
|
||||
#- GF_SMTP_ENABLED=${GF_SMTP_ENABLED:-false}
|
||||
#- GF_SMTP_FROM_ADDRESS=${GF_SMTP_FROM_ADDRESS:-grafana@test.com}
|
||||
#- GF_SMTP_FROM_NAME=${GF_SMTP_FROM_NAME:-Grafana}
|
||||
#- GF_SMTP_HOST=${GF_SMTP_HOST:-smtp:25}
|
||||
#- GF_SMTP_USER=${GF_SMTP_USER}
|
||||
#- GF_SMTP_PASSWORD=${GF_SMTP_PASSWORD}
|
||||
volumes:
|
||||
- grafana:/var/lib/grafana
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
resources:
|
||||
limits:
|
||||
memory: 128M
|
||||
reservations:
|
||||
memory: 64M
|
||||
labels:
|
||||
- traefik.enable=true
|
||||
- traefik.docker.network=traefik-public
|
||||
- traefik.constraint-label=traefik-public
|
||||
- traefik.http.routers.swarmprom-grafana-http.rule=Host(`grafana.${DOMAIN?Variable DOMAIN not set}`)
|
||||
- traefik.http.routers.swarmprom-grafana-http.entrypoints=http
|
||||
- traefik.http.routers.swarmprom-grafana-http.middlewares=https-redirect
|
||||
- traefik.http.routers.swarmprom-grafana-https.rule=Host(`grafana.${DOMAIN?Variable DOMAIN not set}`)
|
||||
- traefik.http.routers.swarmprom-grafana-https.entrypoints=https
|
||||
- traefik.http.routers.swarmprom-grafana-https.tls=true
|
||||
- traefik.http.routers.swarmprom-grafana-https.tls.certresolver=le
|
||||
- traefik.http.services.swarmprom-grafana.loadbalancer.server.port=3000
|
||||
|
||||
alertmanager:
|
||||
image: stefanprodan/swarmprom-alertmanager:v0.14.0
|
||||
networks:
|
||||
- default
|
||||
- net
|
||||
- traefik-public
|
||||
environment:
|
||||
- SLACK_URL=${SLACK_URL:-https://hooks.slack.com/services/TOKEN}
|
||||
- SLACK_CHANNEL=${SLACK_CHANNEL:-general}
|
||||
- SLACK_USER=${SLACK_USER:-alertmanager}
|
||||
command:
|
||||
- '--config.file=/etc/alertmanager/alertmanager.yml'
|
||||
- '--storage.path=/alertmanager'
|
||||
volumes:
|
||||
- alertmanager:/alertmanager
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
resources:
|
||||
limits:
|
||||
memory: 128M
|
||||
reservations:
|
||||
memory: 64M
|
||||
labels:
|
||||
- traefik.enable=true
|
||||
- traefik.docker.network=traefik-public
|
||||
- traefik.constraint-label=traefik-public
|
||||
- traefik.http.routers.swarmprom-alertmanager-http.rule=Host(`alertmanager.${DOMAIN?Variable DOMAIN not set}`)
|
||||
- traefik.http.routers.swarmprom-alertmanager-http.entrypoints=http
|
||||
- traefik.http.routers.swarmprom-alertmanager-http.middlewares=https-redirect
|
||||
- traefik.http.routers.swarmprom-alertmanager-https.rule=Host(`alertmanager.${DOMAIN?Variable DOMAIN not set}`)
|
||||
- traefik.http.routers.swarmprom-alertmanager-https.entrypoints=https
|
||||
- traefik.http.routers.swarmprom-alertmanager-https.tls=true
|
||||
- traefik.http.routers.swarmprom-alertmanager-https.tls.certresolver=le
|
||||
- traefik.http.services.swarmprom-alertmanager.loadbalancer.server.port=9093
|
||||
- traefik.http.middlewares.swarmprom-alertmanager-auth.basicauth.users=${ADMIN_USER?Variable ADMIN_USER not set}:${HASHED_PASSWORD?Variable HASHED_PASSWORD not set}
|
||||
- traefik.http.routers.swarmprom-alertmanager-https.middlewares=swarmprom-alertmanager-auth
|
||||
|
||||
unsee:
|
||||
image: cloudflare/unsee:v0.8.0
|
||||
networks:
|
||||
- default
|
||||
- net
|
||||
- traefik-public
|
||||
environment:
|
||||
- "ALERTMANAGER_URIS=default:http://alertmanager:9093"
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
labels:
|
||||
- traefik.enable=true
|
||||
- traefik.docker.network=traefik-public
|
||||
- traefik.constraint-label=traefik-public
|
||||
- traefik.http.routers.swarmprom-unsee-http.rule=Host(`unsee.${DOMAIN?Variable DOMAIN not set}`)
|
||||
- traefik.http.routers.swarmprom-unsee-http.entrypoints=http
|
||||
- traefik.http.routers.swarmprom-unsee-http.middlewares=https-redirect
|
||||
- traefik.http.routers.swarmprom-unsee-https.rule=Host(`unsee.${DOMAIN?Variable DOMAIN not set}`)
|
||||
- traefik.http.routers.swarmprom-unsee-https.entrypoints=https
|
||||
- traefik.http.routers.swarmprom-unsee-https.tls=true
|
||||
- traefik.http.routers.swarmprom-unsee-https.tls.certresolver=le
|
||||
- traefik.http.services.swarmprom-unsee.loadbalancer.server.port=8080
|
||||
- traefik.http.middlewares.swarmprom-unsee-auth.basicauth.users=${ADMIN_USER?Variable ADMIN_USER not set}:${HASHED_PASSWORD?Variable HASHED_PASSWORD not set}
|
||||
- traefik.http.routers.swarmprom-unsee-https.middlewares=swarmprom-unsee-auth
|
||||
|
||||
node-exporter:
|
||||
image: stefanprodan/swarmprom-node-exporter:v0.16.0
|
||||
networks:
|
||||
- net
|
||||
environment:
|
||||
- NODE_ID={{.Node.ID}}
|
||||
volumes:
|
||||
- /proc:/host/proc:ro
|
||||
- /sys:/host/sys:ro
|
||||
- /:/rootfs:ro
|
||||
- /etc/hostname:/etc/nodename
|
||||
command:
|
||||
- '--path.sysfs=/host/sys'
|
||||
- '--path.procfs=/host/proc'
|
||||
- '--collector.textfile.directory=/etc/node-exporter/'
|
||||
- '--collector.filesystem.ignored-mount-points=^/(sys|proc|dev|host|etc)($$|/)'
|
||||
- '--no-collector.ipvs'
|
||||
deploy:
|
||||
mode: global
|
||||
resources:
|
||||
limits:
|
||||
memory: 128M
|
||||
reservations:
|
||||
memory: 64M
|
||||
|
||||
prometheus:
|
||||
image: stefanprodan/swarmprom-prometheus:v2.5.0
|
||||
networks:
|
||||
- default
|
||||
- net
|
||||
- traefik-public
|
||||
command:
|
||||
- '--config.file=/etc/prometheus/prometheus.yml'
|
||||
- '--storage.tsdb.path=/prometheus'
|
||||
- '--storage.tsdb.retention=${PROMETHEUS_RETENTION:-24h}'
|
||||
volumes:
|
||||
- prometheus:/prometheus
|
||||
configs:
|
||||
- source: node_rules
|
||||
target: /etc/prometheus/swarm_node.rules.yml
|
||||
- source: task_rules
|
||||
target: /etc/prometheus/swarm_task.rules.yml
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
resources:
|
||||
limits:
|
||||
memory: 2048M
|
||||
reservations:
|
||||
memory: 128M
|
||||
labels:
|
||||
- traefik.enable=true
|
||||
- traefik.docker.network=traefik-public
|
||||
- traefik.constraint-label=traefik-public
|
||||
- traefik.http.routers.swarmprom-prometheus-http.rule=Host(`prometheus.${DOMAIN?Variable DOMAIN not set}`)
|
||||
- traefik.http.routers.swarmprom-prometheus-http.entrypoints=http
|
||||
- traefik.http.routers.swarmprom-prometheus-http.middlewares=https-redirect
|
||||
- traefik.http.routers.swarmprom-prometheus-https.rule=Host(`prometheus.${DOMAIN?Variable DOMAIN not set}`)
|
||||
- traefik.http.routers.swarmprom-prometheus-https.entrypoints=https
|
||||
- traefik.http.routers.swarmprom-prometheus-https.tls=true
|
||||
- traefik.http.routers.swarmprom-prometheus-https.tls.certresolver=le
|
||||
- traefik.http.services.swarmprom-prometheus.loadbalancer.server.port=9090
|
||||
- traefik.http.middlewares.swarmprom-prometheus-auth.basicauth.users=${ADMIN_USER?Variable ADMIN_USER not set}:${HASHED_PASSWORD?Variable HASHED_PASSWORD not set}
|
||||
- traefik.http.routers.swarmprom-prometheus-https.middlewares=swarmprom-prometheus-auth
|
||||
|
|
@ -0,0 +1,201 @@
|
|||
version: "3.3"
|
||||
|
||||
networks:
|
||||
mother:
|
||||
external: true
|
||||
|
||||
|
||||
configs:
|
||||
caddy_config:
|
||||
external: true
|
||||
dockerd_config:
|
||||
external: true
|
||||
node_rules:
|
||||
external: true
|
||||
task_rules:
|
||||
external: true
|
||||
|
||||
services:
|
||||
dockerd-exporter:
|
||||
image: registry.vnfco.ir/library/stefanprodan/caddy
|
||||
networks:
|
||||
- mother
|
||||
environment:
|
||||
- DOCKER_GWBRIDGE_IP=172.18.0.1
|
||||
configs:
|
||||
- source: dockerd_config
|
||||
target: /etc/caddy/Caddyfile
|
||||
deploy:
|
||||
mode: global
|
||||
resources:
|
||||
limits:
|
||||
memory: 64M
|
||||
reservations:
|
||||
memory: 32M
|
||||
|
||||
cadvisor:
|
||||
image: registry.vnfco.ir/library/google/cadvisor
|
||||
networks:
|
||||
- mother
|
||||
command: -logtostderr -docker_only
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
- /:/rootfs:ro
|
||||
- /var/run:/var/run
|
||||
- /sys:/sys:ro
|
||||
- /var/lib/docker/:/var/lib/docker:ro
|
||||
deploy:
|
||||
mode: global
|
||||
resources:
|
||||
limits:
|
||||
memory: 64M
|
||||
reservations:
|
||||
memory: 32M
|
||||
|
||||
grafana:
|
||||
image: registry.vnfco.ir/library/stefanprodan/swarmprom-grafana:5.3.4
|
||||
networks:
|
||||
- mother
|
||||
environment:
|
||||
- GF_SECURITY_ADMIN_USER=nerdguy
|
||||
- GF_SECURITY_ADMIN_PASSWORD=RbBmIu1LCgIqKcMmopc1Ie21+1OKsX1ktNCAeiViNIb6HAKkzjJ+GhZlLysItwgm
|
||||
- GF_USERS_ALLOW_SIGN_UP=false
|
||||
#- GF_SERVER_ROOT_URL=${GF_SERVER_ROOT_URL:-localhost}
|
||||
#- GF_SMTP_ENABLED=${GF_SMTP_ENABLED:-false}
|
||||
#- GF_SMTP_FROM_ADDRESS=${GF_SMTP_FROM_ADDRESS:-grafana@test.com}
|
||||
#- GF_SMTP_FROM_NAME=${GF_SMTP_FROM_NAME:-Grafana}
|
||||
#- GF_SMTP_HOST=${GF_SMTP_HOST:-smtp:25}
|
||||
#- GF_SMTP_USER=${GF_SMTP_USER}
|
||||
#- GF_SMTP_PASSWORD=${GF_SMTP_PASSWORD}
|
||||
volumes:
|
||||
- /volume/grafana:/var/lib/grafana
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
resources:
|
||||
limits:
|
||||
memory: 128M
|
||||
reservations:
|
||||
memory: 32M
|
||||
|
||||
alertmanager:
|
||||
image: registry.vnfco.ir/library/stefanprodan/swarmprom-alertmanager:v0.14.0
|
||||
networks:
|
||||
- mother
|
||||
environment:
|
||||
- SLACK_URL=https://hooks.slack.com/services/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
|
||||
- SLACK_CHANNEL=alert
|
||||
- SLACK_USER=alertmanager
|
||||
command:
|
||||
- '--config.file=/etc/alertmanager/alertmanager.yml'
|
||||
- '--storage.path=/alertmanager'
|
||||
volumes:
|
||||
- /volume/alertmanager:/alertmanager
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
resources:
|
||||
limits:
|
||||
memory: 64M
|
||||
reservations:
|
||||
memory: 32M
|
||||
|
||||
unsee:
|
||||
image: registry.vnfco.ir/library/cloudflare/unsee:v0.8.0
|
||||
networks:
|
||||
- mother
|
||||
environment:
|
||||
- "ALERTMANAGER_URIS=default:http://alertmanager:9093"
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
|
||||
node-exporter:
|
||||
image: registry.vnfco.ir/library/stefanprodan/swarmprom-node-exporter:v0.16.0
|
||||
networks:
|
||||
- mother
|
||||
environment:
|
||||
- NODE_ID={{.Node.ID}}
|
||||
volumes:
|
||||
- /proc:/host/proc:ro
|
||||
- /sys:/host/sys:ro
|
||||
- /:/rootfs:ro
|
||||
- /etc/hostname:/etc/nodename
|
||||
command:
|
||||
- '--path.sysfs=/host/sys'
|
||||
- '--path.procfs=/host/proc'
|
||||
- '--collector.textfile.directory=/etc/node-exporter/'
|
||||
- '--collector.filesystem.ignored-mount-points=^/(sys|proc|dev|host|etc)($$|/)'
|
||||
- '--no-collector.ipvs'
|
||||
deploy:
|
||||
mode: global
|
||||
resources:
|
||||
limits:
|
||||
memory: 64M
|
||||
reservations:
|
||||
memory: 32M
|
||||
|
||||
prometheus:
|
||||
image: registry.vnfco.ir/library/stefanprodan/swarmprom-prometheus:v2.5.0
|
||||
networks:
|
||||
- mother
|
||||
command:
|
||||
- '--config.file=/etc/prometheus/prometheus.yml'
|
||||
- '--storage.tsdb.path=/prometheus'
|
||||
- '--storage.tsdb.retention=${PROMETHEUS_RETENTION:-24h}'
|
||||
volumes:
|
||||
- /volume/prometheus:/prometheus
|
||||
configs:
|
||||
- source: node_rules
|
||||
target: /etc/prometheus/swarm_node.rules.yml
|
||||
- source: task_rules
|
||||
target: /etc/prometheus/swarm_task.rules.yml
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
resources:
|
||||
limits:
|
||||
memory: 512M
|
||||
reservations:
|
||||
memory: 128M
|
||||
|
||||
caddy:
|
||||
image: registry.vnfco.ir/library/stefanprodan/caddy
|
||||
ports:
|
||||
- "3000:3000"
|
||||
- "9090:9090"
|
||||
- "9093:9093"
|
||||
- "9094:9094"
|
||||
networks:
|
||||
- mother
|
||||
environment:
|
||||
- ADMIN_USER=nerdguy
|
||||
- ADMIN_PASSWORD=RbBmIu1LCgIqKcMmopc1Ie21+1OKsX1ktNCAeiViNIb6HAKkzjJ+GhZlLysItwgm
|
||||
configs:
|
||||
- source: caddy_config
|
||||
target: /etc/caddy/Caddyfile
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
resources:
|
||||
limits:
|
||||
memory: 128M
|
||||
reservations:
|
||||
memory: 64M
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-f", "http://localhost:3000"]
|
||||
interval: 5s
|
||||
timeout: 1s
|
||||
retries: 5
|
||||
|
|
@ -0,0 +1,8 @@
|
|||
:9323 {
|
||||
proxy / {$DOCKER_GWBRIDGE_IP}:9323 {
|
||||
transparent
|
||||
}
|
||||
|
||||
errors stderr
|
||||
tls off
|
||||
}
|
||||
|
|
@ -0,0 +1 @@
|
|||
screens/
|
||||
|
|
@ -0,0 +1,10 @@
|
|||
FROM grafana/grafana:5.3.4
|
||||
# https://hub.docker.com/r/grafana/grafana/tags/
|
||||
|
||||
COPY datasources /etc/grafana/provisioning/datasources/
|
||||
COPY swarmprom_dashboards.yml /etc/grafana/provisioning/dashboards/
|
||||
COPY dashboards /etc/grafana/dashboards/
|
||||
|
||||
ENV GF_SECURITY_ADMIN_PASSWORD=admin \
|
||||
GF_SECURITY_ADMIN_USER=admin \
|
||||
GF_PATHS_PROVISIONING=/etc/grafana/provisioning/
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,13 @@
|
|||
apiVersion: 1
|
||||
|
||||
deleteDatasources:
|
||||
- name: Prometheus
|
||||
|
||||
datasources:
|
||||
- name: Prometheus
|
||||
type: prometheus
|
||||
access: proxy
|
||||
url: http://prometheus:9090
|
||||
isDefault: true
|
||||
version: 1
|
||||
editable: true
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 67 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 500 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 217 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 865 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 23 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 304 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 506 KiB |
|
|
@ -0,0 +1,11 @@
|
|||
apiVersion: 1
|
||||
|
||||
providers:
|
||||
- name: 'default'
|
||||
orgId: 1
|
||||
folder: ''
|
||||
type: file
|
||||
disableDeletion: false
|
||||
editable: true
|
||||
options:
|
||||
path: /etc/grafana/dashboards
|
||||
|
|
@ -0,0 +1,10 @@
|
|||
FROM prom/node-exporter:v0.16.0
|
||||
|
||||
ENV NODE_ID=none
|
||||
|
||||
USER root
|
||||
|
||||
COPY conf /etc/node-exporter/
|
||||
|
||||
ENTRYPOINT [ "/etc/node-exporter/docker-entrypoint.sh" ]
|
||||
CMD [ "/bin/node_exporter" ]
|
||||
|
|
@ -0,0 +1,8 @@
|
|||
#!/bin/sh -e
|
||||
|
||||
NODE_NAME=$(cat /etc/nodename)
|
||||
echo "node_meta{node_id=\"$NODE_ID\", container_label_com_docker_swarm_node_id=\"$NODE_ID\", node_name=\"$NODE_NAME\"} 1" > /etc/node-exporter/node-meta.prom
|
||||
|
||||
set -- /bin/node_exporter "$@"
|
||||
|
||||
exec "$@"
|
||||
|
|
@ -0,0 +1,10 @@
|
|||
FROM prom/prometheus:v2.5.0
|
||||
# https://hub.docker.com/r/prom/prometheus/tags/
|
||||
|
||||
ENV WEAVE_TOKEN=none
|
||||
|
||||
COPY conf /etc/prometheus/
|
||||
|
||||
ENTRYPOINT [ "/etc/prometheus/docker-entrypoint.sh" ]
|
||||
CMD [ "--config.file=/etc/prometheus/prometheus.yml", \
|
||||
"--storage.tsdb.path=/prometheus" ]
|
||||
|
|
@ -0,0 +1,48 @@
|
|||
#!/bin/sh -e
|
||||
|
||||
cat /etc/prometheus/prometheus.yml > /tmp/prometheus.yml
|
||||
cat /etc/prometheus/weave-cortex.yml | \
|
||||
sed "s@#password: <token>#@password: '$WEAVE_TOKEN'@g" > /tmp/weave-cortex.yml
|
||||
|
||||
#JOBS=mongo-exporter:9111 redis-exporter:9112
|
||||
|
||||
if [ ${JOBS+x} ]; then
|
||||
|
||||
for job in $JOBS
|
||||
do
|
||||
echo "adding job $job"
|
||||
|
||||
SERVICE=$(echo "$job" | cut -d":" -f1)
|
||||
PORT=$(echo "$job" | cut -d":" -f2)
|
||||
|
||||
cat >>/tmp/prometheus.yml <<EOF
|
||||
|
||||
- job_name: '${SERVICE}'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.${SERVICE}'
|
||||
type: 'A'
|
||||
port: ${PORT}
|
||||
EOF
|
||||
|
||||
cat >>/tmp/weave-cortex.yml <<EOF
|
||||
|
||||
- job_name: '${SERVICE}'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.${SERVICE}'
|
||||
type: 'A'
|
||||
port: ${PORT}
|
||||
EOF
|
||||
|
||||
done
|
||||
|
||||
fi
|
||||
|
||||
mv /tmp/prometheus.yml /etc/prometheus/prometheus.yml
|
||||
mv /tmp/weave-cortex.yml /etc/prometheus/weave-cortex.yml
|
||||
|
||||
set -- /bin/prometheus "$@"
|
||||
|
||||
exec "$@"
|
||||
|
||||
|
|
@ -0,0 +1,44 @@
|
|||
global:
|
||||
scrape_interval: 15s
|
||||
evaluation_interval: 15s
|
||||
|
||||
external_labels:
|
||||
monitor: 'promswarm'
|
||||
|
||||
rule_files:
|
||||
- "swarm_node.rules.yml"
|
||||
- "swarm_task.rules.yml"
|
||||
|
||||
alerting:
|
||||
alertmanagers:
|
||||
- static_configs:
|
||||
- targets:
|
||||
- alertmanager:9093
|
||||
|
||||
scrape_configs:
|
||||
- job_name: 'prometheus'
|
||||
static_configs:
|
||||
- targets: ['localhost:9090']
|
||||
|
||||
- job_name: 'dockerd-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.dockerd-exporter'
|
||||
type: 'A'
|
||||
port: 9323
|
||||
|
||||
- job_name: 'cadvisor'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.cadvisor'
|
||||
type: 'A'
|
||||
port: 8080
|
||||
|
||||
- job_name: 'node-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.node-exporter'
|
||||
type: 'A'
|
||||
port: 9100
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,37 @@
|
|||
remote_write:
|
||||
- url: https://cloud.weave.works/api/prom/push
|
||||
basic_auth:
|
||||
#password: <token>#
|
||||
|
||||
global:
|
||||
scrape_interval: 15s
|
||||
evaluation_interval: 15s
|
||||
|
||||
external_labels:
|
||||
monitor: 'promswarm'
|
||||
|
||||
scrape_configs:
|
||||
- job_name: 'prometheus'
|
||||
static_configs:
|
||||
- targets: ['localhost:9090']
|
||||
|
||||
- job_name: 'dockerd-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.dockerd-exporter'
|
||||
type: 'A'
|
||||
port: 9323
|
||||
|
||||
- job_name: 'cadvisor'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.cadvisor'
|
||||
type: 'A'
|
||||
port: 8080
|
||||
|
||||
- job_name: 'node-exporter'
|
||||
dns_sd_configs:
|
||||
- names:
|
||||
- 'tasks.node-exporter'
|
||||
type: 'A'
|
||||
port: 9100
|
||||
|
|
@ -0,0 +1,44 @@
|
|||
groups:
|
||||
- name: /1/store/projects/vagrant/docker-swarm-vagrant/apps/swarmprom/prometheus/rules/swarm_node.rules.yml
|
||||
rules:
|
||||
- alert: node_cpu_usage
|
||||
expr: 100 - (avg(irate(node_cpu_seconds_total{mode="idle"}[1m]) * ON(instance) GROUP_LEFT(node_name)
|
||||
node_meta * 100) BY (node_name)) > 50
|
||||
for: 1m
|
||||
labels:
|
||||
severity: warning
|
||||
annotations:
|
||||
description: Swarm node {{ $labels.node_name }} CPU usage is at {{ humanize
|
||||
$value}}%.
|
||||
summary: CPU alert for Swarm node '{{ $labels.node_name }}'
|
||||
- alert: node_memory_usage
|
||||
expr: sum(((node_memory_MemTotal_bytes - node_memory_MemAvailable_bytes) / node_memory_MemTotal_bytes)
|
||||
* ON(instance) GROUP_LEFT(node_name) node_meta * 100) BY (node_name) > 80
|
||||
for: 1m
|
||||
labels:
|
||||
severity: warning
|
||||
annotations:
|
||||
description: Swarm node {{ $labels.node_name }} memory usage is at {{ humanize
|
||||
$value}}%.
|
||||
summary: Memory alert for Swarm node '{{ $labels.node_name }}'
|
||||
- alert: node_disk_usage
|
||||
expr: ((node_filesystem_size_bytes{mountpoint="/rootfs"} - node_filesystem_free_bytes{mountpoint="/rootfs"})
|
||||
* 100 / node_filesystem_size_bytes{mountpoint="/rootfs"}) * ON(instance) GROUP_LEFT(node_name)
|
||||
node_meta > 85
|
||||
for: 1m
|
||||
labels:
|
||||
severity: warning
|
||||
annotations:
|
||||
description: Swarm node {{ $labels.node_name }} disk usage is at {{ humanize
|
||||
$value}}%.
|
||||
summary: Disk alert for Swarm node '{{ $labels.node_name }}'
|
||||
- alert: node_disk_fill_rate_6h
|
||||
expr: predict_linear(node_filesystem_free_bytes{mountpoint="/rootfs"}[1h], 6 * 3600) * ON(instance)
|
||||
GROUP_LEFT(node_name) node_meta < 0
|
||||
for: 1h
|
||||
labels:
|
||||
severity: critical
|
||||
annotations:
|
||||
description: Swarm node {{ $labels.node_name }} disk is going to fill up in
|
||||
6h.
|
||||
summary: Disk fill alert for Swarm node '{{ $labels.node_name }}'
|
||||
|
|
@ -0,0 +1,24 @@
|
|||
groups:
|
||||
- name: /1/store/projects/vagrant/docker-swarm-vagrant/apps/swarmprom/prometheus/rules/swarm_task.rules.yml
|
||||
rules:
|
||||
- alert: task_high_cpu_usage_50
|
||||
expr: sum(rate(container_cpu_usage_seconds_total{container_label_com_docker_swarm_task_name=~".+"}[1m]))
|
||||
BY (container_label_com_docker_swarm_task_name, container_label_com_docker_swarm_node_id)
|
||||
* 100 > 50
|
||||
for: 1m
|
||||
annotations:
|
||||
description: '{{ $labels.container_label_com_docker_swarm_task_name }} on ''{{
|
||||
$labels.container_label_com_docker_swarm_node_id }}'' CPU usage is at {{ humanize
|
||||
$value}}%.'
|
||||
summary: CPU alert for Swarm task '{{ $labels.container_label_com_docker_swarm_task_name
|
||||
}}' on '{{ $labels.container_label_com_docker_swarm_node_id }}'
|
||||
- alert: task_high_memory_usage_1g
|
||||
expr: sum(container_memory_rss{container_label_com_docker_swarm_task_name=~".+"})
|
||||
BY (container_label_com_docker_swarm_task_name, container_label_com_docker_swarm_node_id) > 1e+09
|
||||
for: 1m
|
||||
annotations:
|
||||
description: '{{ $labels.container_label_com_docker_swarm_task_name }} on ''{{
|
||||
$labels.container_label_com_docker_swarm_node_id }}'' memory usage is {{ humanize
|
||||
$value}}.'
|
||||
summary: Memory alert for Swarm task '{{ $labels.container_label_com_docker_swarm_task_name
|
||||
}}' on '{{ $labels.container_label_com_docker_swarm_node_id }}'
|
||||
|
|
@ -0,0 +1,37 @@
|
|||
version: "3.3"
|
||||
|
||||
networks:
|
||||
net:
|
||||
driver: overlay
|
||||
attachable: true
|
||||
mon_net:
|
||||
external: true
|
||||
|
||||
services:
|
||||
|
||||
mongo:
|
||||
image: healthcheck/mongo:latest
|
||||
networks:
|
||||
- net
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role != manager
|
||||
|
||||
mongo-exporter:
|
||||
image: forekshub/percona-mongodb-exporter:latest
|
||||
networks:
|
||||
- net
|
||||
- mon_net
|
||||
ports:
|
||||
- "9216:9216"
|
||||
environment:
|
||||
- MONGODB_URL=mongodb://mongo:27017
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
|
|
@ -0,0 +1,144 @@
|
|||
version: "3.3"
|
||||
|
||||
networks:
|
||||
net:
|
||||
driver: overlay
|
||||
attachable: true
|
||||
|
||||
volumes:
|
||||
prometheus: {}
|
||||
grafana: {}
|
||||
|
||||
configs:
|
||||
caddy_config:
|
||||
file: ./caddy/Caddyfile
|
||||
dockerd_config:
|
||||
file: ./dockerd-exporter/Caddyfile
|
||||
|
||||
services:
|
||||
dockerd-exporter:
|
||||
image: stefanprodan/caddy
|
||||
networks:
|
||||
- net
|
||||
environment:
|
||||
- DOCKER_GWBRIDGE_IP=172.18.0.1
|
||||
configs:
|
||||
- source: dockerd_config
|
||||
target: /etc/caddy/Caddyfile
|
||||
deploy:
|
||||
mode: global
|
||||
|
||||
cadvisor:
|
||||
image: google/cadvisor
|
||||
networks:
|
||||
- net
|
||||
command: -logtostderr -docker_only
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
- /:/rootfs:ro
|
||||
- /var/run:/var/run
|
||||
- /sys:/sys:ro
|
||||
- /var/lib/docker/:/var/lib/docker:ro
|
||||
deploy:
|
||||
mode: global
|
||||
|
||||
grafana:
|
||||
image: stefanprodan/swarmprom-grafana:4.6.3
|
||||
networks:
|
||||
- net
|
||||
environment:
|
||||
- GF_SECURITY_ADMIN_USER=${ADMIN_USER:-admin}
|
||||
- GF_SECURITY_ADMIN_PASSWORD=${ADMIN_PASSWORD:-admin}
|
||||
- GF_USERS_ALLOW_SIGN_UP=false
|
||||
#- GF_SERVER_ROOT_URL=${GF_SERVER_ROOT_URL:-localhost}
|
||||
#- GF_SMTP_ENABLED=${GF_SMTP_ENABLED:-false}
|
||||
#- GF_SMTP_FROM_ADDRESS=${GF_SMTP_FROM_ADDRESS:-grafana@test.com}
|
||||
#- GF_SMTP_FROM_NAME=${GF_SMTP_FROM_NAME:-Grafana}
|
||||
#- GF_SMTP_HOST=${GF_SMTP_HOST:-smtp:25}
|
||||
#- GF_SMTP_USER=${GF_SMTP_USER}
|
||||
#- GF_SMTP_PASSWORD=${GF_SMTP_PASSWORD}
|
||||
volumes:
|
||||
- grafana:/var/lib/grafana
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
|
||||
node-exporter:
|
||||
image: stefanprodan/swarmprom-node-exporter:v0.15.2
|
||||
networks:
|
||||
- net
|
||||
environment:
|
||||
- NODE_ID={{.Node.ID}}
|
||||
volumes:
|
||||
- /proc:/host/proc:ro
|
||||
- /sys:/host/sys:ro
|
||||
- /:/rootfs:ro
|
||||
- /etc/hostname:/etc/nodename
|
||||
command:
|
||||
- '--path.sysfs=/host/sys'
|
||||
- '--path.procfs=/host/proc'
|
||||
- '--collector.textfile.directory=/etc/node-exporter/'
|
||||
- '--collector.filesystem.ignored-mount-points=^/(sys|proc|dev|host|etc)($$|/)'
|
||||
# no collectors are explicitely enabled here, because the defaults are just fine,
|
||||
# see https://github.com/prometheus/node_exporter
|
||||
# disable ipvs collector because it barfs the node-exporter logs full with errors on my centos 7 vm's
|
||||
- '--no-collector.ipvs'
|
||||
deploy:
|
||||
mode: global
|
||||
|
||||
caddy:
|
||||
image: stefanprodan/caddy
|
||||
ports:
|
||||
- "3000:3000"
|
||||
- "9090:9090"
|
||||
networks:
|
||||
- net
|
||||
environment:
|
||||
- ADMIN_USER=${ADMIN_USER:-admin}
|
||||
- ADMIN_PASSWORD=${ADMIN_PASSWORD:-admin}
|
||||
configs:
|
||||
- source: caddy_config
|
||||
target: /etc/caddy/Caddyfile
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
|
||||
prometheus:
|
||||
image: stefanprodan/swarmprom-prometheus:v2.2.0-rc.0
|
||||
networks:
|
||||
- net
|
||||
environment:
|
||||
- WEAVE_TOKEN=$TOKEN
|
||||
#- JOBS=mongo-exporter:9216
|
||||
command:
|
||||
- '--config.file=/etc/prometheus/weave-cortex.yml'
|
||||
- '--web.console.libraries=/etc/prometheus/console_libraries'
|
||||
- '--web.console.templates=/etc/prometheus/consoles'
|
||||
- '--storage.tsdb.path=/prometheus'
|
||||
- '--storage.tsdb.retention=${PROMETHEUS_RETENTION:-24h}'
|
||||
volumes:
|
||||
- prometheus:/prometheus
|
||||
deploy:
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == manager
|
||||
|
||||
scope-launcher:
|
||||
image: weaveworks/scope-swarm-launcher
|
||||
networks:
|
||||
- net
|
||||
command: scope launch --service-token=$TOKEN
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
deploy:
|
||||
mode: global
|
||||
restart_policy:
|
||||
condition: none
|
||||
Binary file not shown.
|
|
@ -0,0 +1,108 @@
|
|||
version: "3.7"
|
||||
|
||||
networks:
|
||||
mother:
|
||||
external: true
|
||||
|
||||
|
||||
|
||||
|
||||
services:
|
||||
mongoprimary:
|
||||
image: registry.vnfco.ir/library/bitnami/mongodb:5.0-debian-10
|
||||
volumes:
|
||||
- /volume/mongo/primary:/data/db
|
||||
environment:
|
||||
- MONGODB_ADVERTISED_HOSTNAME=mongoprimary
|
||||
- MONGODB_REPLICA_SET_MODE=primary
|
||||
- MONGODB_ROOT_PASSWORD=cWv1WQvWEp+LPdax9We/M6PeT7KgyTE9zKmC5y1ieqz4JtpLiVifJrQg0VHYhE6l
|
||||
- MONGODB_REPLICA_SET_KEY=gp39MND7udY6bt9V3h9u+dhxToop4WZTZ2Umn810snSYurlSIPqs/oy0YfjftsBz
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
max_attempts: 3
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.25'
|
||||
memory: 300M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.labels.mongo.replica == 1
|
||||
networks:
|
||||
- mother
|
||||
|
||||
|
||||
mongosecondary:
|
||||
image: registry.vnfco.ir/library/bitnami/mongodb:5.0-debian-10
|
||||
environment:
|
||||
- MONGODB_REPLICA_SET_MODE=secondary
|
||||
- MONGODB_INITIAL_PRIMARY_HOST=mongoprimary
|
||||
- MONGODB_INITIAL_PRIMARY_PORT_NUMBER=27017
|
||||
- MONGODB_INITIAL_PRIMARY_ROOT_PASSWORD=cWv1WQvWEp+LPdax9We/M6PeT7KgyTE9zKmC5y1ieqz4JtpLiVifJrQg0VHYhE6l
|
||||
- MONGODB_REPLICA_SET_KEY=gp39MND7udY6bt9V3h9u+dhxToop4WZTZ2Umn810snSYurlSIPqs/oy0YfjftsBz
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
max_attempts: 3
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.25'
|
||||
memory: 300M
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.labels.mongo.replica == 2
|
||||
port:
|
||||
- "27011:27017"
|
||||
networks:
|
||||
- mother
|
||||
|
||||
mongoarbiter:
|
||||
image: registry.vnfco.ir/library/bitnami/mongodb:5.0-debian-10
|
||||
environment:
|
||||
- MONGODB_REPLICA_SET_MODE=arbiter
|
||||
- MONGODB_INITIAL_PRIMARY_HOST=mongoprimary
|
||||
- MONGODB_INITIAL_PRIMARY_PORT_NUMBER=27017
|
||||
- MONGODB_INITIAL_PRIMARY_ROOT_PASSWORD=cWv1WQvWEp+LPdax9We/M6PeT7KgyTE9zKmC5y1ieqz4JtpLiVifJrQg0VHYhE6l
|
||||
- MONGODB_REPLICA_SET_KEY=gp39MND7udY6bt9V3h9u+dhxToop4WZTZ2Umn810snSYurlSIPqs/oy0YfjftsBz
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
max_attempts: 3
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.2'
|
||||
memory: 100M
|
||||
mode: replicated
|
||||
replicas: 0
|
||||
placement:
|
||||
constraints:
|
||||
- node.labels.mongo.replica == 2
|
||||
port:
|
||||
- "27012:27017"
|
||||
networks:
|
||||
- mother
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,85 @@
|
|||
|
||||
version: "3.7"
|
||||
|
||||
networks:
|
||||
mother:
|
||||
external: true
|
||||
|
||||
|
||||
|
||||
|
||||
services:
|
||||
pgmaster:
|
||||
image: registry.vnfco.ir/library/bitnami/postgresql:13
|
||||
volumes:
|
||||
- '/volume/pg:/bitnami/postgresql'
|
||||
environment:
|
||||
- POSTGRESQL_USERNAME=igarsonAgent
|
||||
- POSTGRESQL_PASSWORD=xHTpBf4wC+bBeNg2pL6Ga7VEWKFJx7VPEUpqxwPFfOc2YYTVwFQuHfsiqoVeT9+6
|
||||
- POSTGRESQL_DATABASE=igarsonDB
|
||||
- POSTGRESQL_REPLICATION_MODE=master
|
||||
- POSTGRESQL_REPLICATION_USER=pgreplicator
|
||||
- POSTGRESQL_REPLICATION_PASSWORD=ciXz6xmnEMZSO+0T8L6mGcFJrAvPzkTC04oh/WYIRi51gMQLPfW8tTEHALX6fhk4
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
max_attempts: 3
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.7'
|
||||
memory: 500M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.labels.mongo.replica == 1
|
||||
ports:
|
||||
- 5432
|
||||
networks:
|
||||
- mother
|
||||
|
||||
|
||||
pgslave1:
|
||||
image: registry.vnfco.ir/library/bitnami/postgresql:13
|
||||
environment:
|
||||
- POSTGRESQL_REPLICATION_MODE=slave
|
||||
- POSTGRESQL_REPLICATION_USER=pgreplicator
|
||||
- POSTGRESQL_REPLICATION_PASSWORD=ciXz6xmnEMZSO+0T8L6mGcFJrAvPzkTC04oh/WYIRi51gMQLPfW8tTEHALX6fhk4
|
||||
- POSTGRESQL_MASTER_HOST=pgmaster
|
||||
- POSTGRESQL_PASSWORD=xHTpBf4wC+bBeNg2pL6Ga7VEWKFJx7VPEUpqxwPFfOc2YYTVwFQuHfsiqoVeT9+6
|
||||
- POSTGRESQL_MASTER_PORT_NUMBER=5432
|
||||
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
max_attempts: 3
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.3'
|
||||
memory: 300M
|
||||
mode: replicated
|
||||
replicas: 1
|
||||
placement:
|
||||
constraints:
|
||||
- node.labels.mongo.replica == 2
|
||||
ports:
|
||||
- 5432
|
||||
networks:
|
||||
- mother
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,39 @@
|
|||
|
||||
version: "3.7"
|
||||
|
||||
networks:
|
||||
mother:
|
||||
external: true
|
||||
|
||||
services:
|
||||
rabbitmq:
|
||||
image: registry.vnfco.ir/library/bitnami/rabbitmq:latest
|
||||
ports:
|
||||
- '5672'
|
||||
environment:
|
||||
- RABBITMQ_PASSWORD=muyXH/zymcTYLzk3wYnIwG+UJWECKy0ViUDO+UlCmPF3XS+2kliuV0TaA0mWf6lT
|
||||
- RABBITMQ_USERNAME=igarsonAgent
|
||||
volumes:
|
||||
- '/volume/rabbit:/bitnami'
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-f", "http://localhost:5672"]
|
||||
interval: 10s
|
||||
timeout: 3s
|
||||
retries: 5
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.7'
|
||||
memory: 350M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
networks:
|
||||
- mother
|
||||
|
|
@ -0,0 +1,70 @@
|
|||
|
||||
version: "3.7"
|
||||
|
||||
networks:
|
||||
mother:
|
||||
external: true
|
||||
|
||||
services:
|
||||
redismaster:
|
||||
image: registry.vnfco.ir/library/bitnami/redis:latest
|
||||
ports:
|
||||
- '6969:6379'
|
||||
environment:
|
||||
- REDIS_REPLICATION_MODE=master
|
||||
- REDIS_PASSWORD=Mf7VXwbaJQuMRd1sETVl79A7URUTyiEFwctGk3RhD+q74DmKDzc2SztYEZ2YynLZI8xuq7b9gNz2e7g2MNfU9sP8q+bEK9CqAu3y2Zu4xkVyzyYKdFMT696IB/SS1M7rvZKw7NBYT99lGCpj1edk+6hRpK/Qy2pfiVo29VKEgSXnkeJaM9nMJQ3wxN/1gLJd/uTGGf85nZWhUTEIdK58lJPSXLU55VqcaksahJHlg2oz5P5FNXWRPCnSC7obJ4OtkuHNw/P8REEL0KDyZ9khilU/XvzSgzp+v5i9hmUdKO3B8r+Y4keUZyaKz2VxCHSGAuqWSCpe+do1qQ==
|
||||
volumes:
|
||||
- '/volume/redis:/bitnami'
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
max_attempts: 3
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.4'
|
||||
memory: 500M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.labels.mongo.replica == 1
|
||||
networks:
|
||||
- mother
|
||||
|
||||
redisreplica:
|
||||
image: registry.vnfco.ir/library/bitnami/redis:latest
|
||||
ports:
|
||||
- '6379'
|
||||
environment:
|
||||
- REDIS_REPLICATION_MODE=slave
|
||||
- REDIS_MASTER_HOST=redismaster
|
||||
- REDIS_MASTER_PORT_NUMBER=6379
|
||||
- REDIS_MASTER_PASSWORD=Mf7VXwbaJQuMRd1sETVl79A7URUTyiEFwctGk3RhD+q74DmKDzc2SztYEZ2YynLZI8xuq7b9gNz2e7g2MNfU9sP8q+bEK9CqAu3y2Zu4xkVyzyYKdFMT696IB/SS1M7rvZKw7NBYT99lGCpj1edk+6hRpK/Qy2pfiVo29VKEgSXnkeJaM9nMJQ3wxN/1gLJd/uTGGf85nZWhUTEIdK58lJPSXLU55VqcaksahJHlg2oz5P5FNXWRPCnSC7obJ4OtkuHNw/P8REEL0KDyZ9khilU/XvzSgzp+v5i9hmUdKO3B8r+Y4keUZyaKz2VxCHSGAuqWSCpe+do1qQ==
|
||||
- REDIS_PASSWORD=gpGS7RezaKsWRH+qga95z6JTTxvecrpFShRR9IXqWZO2o5Kf8YAoNvGni9Zh5GGIM0Oz+e9+Cph9XDjfs3phgauiFtsEDkAf/1dxR8CixIzddcXKXgaawiqfwB8WCuM/2k8Iw7cv2wqoIdWrhdHbn96N//Su57Ri4hy5CRbUAl7VmGd9EL1sGytOJmXzQOi3lJBWvfVWbYBmgALwVQSads6g+OHmP2wpXsTsYMG1thppJVGo7i5Rh515hAuAGWTed4Ayqoe1muRR1L1Rs8pdA7IH/u4kOL1758Idd3BfTTRkr7xfjXY40dM0BkUqL5E4rOga38ThaVC99g==
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
max_attempts: 3
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.3'
|
||||
memory: 300M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.labels.mongo.replica == 2
|
||||
networks:
|
||||
- mother
|
||||
|
|
@ -0,0 +1,128 @@
|
|||
|
||||
version: "3.7"
|
||||
|
||||
networks:
|
||||
mother:
|
||||
external: true
|
||||
|
||||
|
||||
|
||||
|
||||
services:
|
||||
|
||||
ls:
|
||||
image: registry.vnfco.ir/ig/ls:test
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '1'
|
||||
memory: 1Gi
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
# placement:
|
||||
# constraints:
|
||||
# - node.labels.overload == 1
|
||||
volumes:
|
||||
- type: bind
|
||||
source: /volume/ig/ls/wwwroot
|
||||
target: /publish/wwwroot
|
||||
ports:
|
||||
- 8010:8010
|
||||
networks:
|
||||
- mother
|
||||
|
||||
core:
|
||||
image: registry.vnfco.ir/ig/api:test
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '1'
|
||||
memory: 1Gi
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
# placement:
|
||||
# constraints:
|
||||
# - node.labels.overload == 1
|
||||
volumes:
|
||||
- type: bind
|
||||
source: /volume/ig/api/storage
|
||||
target: /target/storage
|
||||
ports:
|
||||
- 8011:8011
|
||||
networks:
|
||||
- mother
|
||||
|
||||
sms:
|
||||
image: registry.vnfco.ir/ig/sms:test
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 50M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == worker
|
||||
networks:
|
||||
- mother
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,185 @@
|
|||
|
||||
version: "3.7"
|
||||
|
||||
networks:
|
||||
mother:
|
||||
external: true
|
||||
|
||||
|
||||
# ig clients stack
|
||||
|
||||
services:
|
||||
|
||||
menu:
|
||||
image: registry.vnfco.ir/ig/pwa:test
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 50M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == worker
|
||||
ports:
|
||||
- 8012:80
|
||||
networks:
|
||||
- mother
|
||||
|
||||
|
||||
|
||||
capitan:
|
||||
image: registry.vnfco.ir/ig/garson:test
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 50M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == worker
|
||||
ports:
|
||||
- 8013:80
|
||||
networks:
|
||||
- mother
|
||||
|
||||
|
||||
|
||||
website:
|
||||
image: registry.vnfco.ir/ig/website:test
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 50M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == worker
|
||||
ports:
|
||||
- 8014:80
|
||||
networks:
|
||||
- mother
|
||||
|
||||
adminpanel:
|
||||
image: registry.vnfco.ir/ig/admin:test
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 50M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == worker
|
||||
ports:
|
||||
- 8015:80
|
||||
networks:
|
||||
- mother
|
||||
|
||||
# shop:
|
||||
# image: registry.vnfco.ir/ig/shop:test
|
||||
# # environment:
|
||||
# # - NODE_ENV=production
|
||||
# # - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# # - REACT_APP_PATH_URL=/api/v1
|
||||
# # - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# # - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# # - REACT_APP_LOG_LENGTH=20
|
||||
# # - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# # - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
# deploy:
|
||||
# update_config:
|
||||
# parallelism: 1
|
||||
# delay: 10s
|
||||
# order: start-first
|
||||
# restart_policy:
|
||||
# condition: any
|
||||
# delay: 5s
|
||||
# window: 120s
|
||||
# resources:
|
||||
# limits:
|
||||
# cpus: '0.5'
|
||||
# memory: 50M
|
||||
# replicas: 1
|
||||
# mode: replicated
|
||||
# placement:
|
||||
# constraints:
|
||||
# - node.role == worker
|
||||
# ports:
|
||||
# - 8014:80
|
||||
# networks:
|
||||
# - mother
|
||||
|
|
@ -0,0 +1,154 @@
|
|||
|
||||
version: "3.7"
|
||||
|
||||
networks:
|
||||
mother:
|
||||
external: true
|
||||
|
||||
|
||||
# ig clients stack
|
||||
|
||||
services:
|
||||
|
||||
twentyfortyeight:
|
||||
image: registry.vnfco.ir/ig/game/2048:latest
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 50M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == worker
|
||||
ports:
|
||||
- 6001:80
|
||||
networks:
|
||||
- mother
|
||||
|
||||
|
||||
|
||||
sudoku:
|
||||
image: registry.vnfco.ir/ig/game/sudoku:latest
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 50M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == worker
|
||||
ports:
|
||||
- 6002:80
|
||||
networks:
|
||||
- mother
|
||||
|
||||
|
||||
|
||||
mafia:
|
||||
image: registry.vnfco.ir/ig/game/mafia/ui:latest
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 50M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == worker
|
||||
ports:
|
||||
- 6003:80
|
||||
networks:
|
||||
- mother
|
||||
|
||||
mafiaserver:
|
||||
image: registry.vnfco.ir/ig/game/mafia/server:latest
|
||||
# environment:
|
||||
# - NODE_ENV=production
|
||||
# - REACT_APP_SIGNAL_URL=https://ls.igarson.app
|
||||
# - REACT_APP_PATH_URL=/api/v1
|
||||
# - REACT_APP_STORAGE_URL=https://storage.igarson.app
|
||||
# - REACT_APP_SIGNAL_URL_PATH=/restauranthub
|
||||
# - REACT_APP_LOG_LENGTH=20
|
||||
# - REACT_APP_SOCKET_SECRET=GodProtectedKeyTools
|
||||
# - REACT_APP_SECRET_KEY_GAME=6JCvBmi1ADry5Qk0bLaV+5klnAqYaVtjn+HSHG4N4pOAEl480saobylNWcudDxhvgw6q0yzVmbYH+lQIS3RmEHLXRHYAHxsdXl5MBuqU/p1oCC3SWmYke1SWHkoTUOm1f8SBZ1HucOxBHv7psqFUu5lG38P/EPiozv6/0qDU+vVFFp6v9ZTigBihLll0mU6qR14krot8+y9tOnrLDkHxw3wLvWsB4wgd9+RAY97Gzzs7ix3nAXthsT+jPWdyuENiKSuKEyHKbDqciJRBGqktgYU9XkYIfZzEm4cxhscT9jqNsUg2ml+uJdDQOps2mL5LgNetWWmcP43xPIkxAwu5oK873GV3uZOdQqYE2CBYT66+/+Yp5xzoL4+qZUUiDEpfWKm+clRlAm1Keiur
|
||||
deploy:
|
||||
update_config:
|
||||
parallelism: 1
|
||||
delay: 10s
|
||||
order: start-first
|
||||
restart_policy:
|
||||
condition: any
|
||||
delay: 5s
|
||||
window: 120s
|
||||
resources:
|
||||
limits:
|
||||
cpus: '0.5'
|
||||
memory: 50M
|
||||
replicas: 1
|
||||
mode: replicated
|
||||
placement:
|
||||
constraints:
|
||||
- node.role == worker
|
||||
ports:
|
||||
- 6023:3000
|
||||
networks:
|
||||
- mother
|
||||
|
||||
# quiz
|
||||
# quiz api
|
||||
Loading…
Reference in New Issue