name: ${SERVICE_GROUP_NAME}

services:
  # 主web入口服务，代理一切web
  nginx:
    image: quay.io/wandoubaba517/nginx:1.27
    container_name: devkit_nginx
    restart: always
    volumes:
      - ./nginx/conf/nginx.conf:/etc/nginx/nginx.conf
      - ./nginx/conf/conf.d:/etc/nginx/conf.d
      - ./nginx/conf/certs:/etc/nginx/certs
      - ./nginx/conf/fastcgi_params:/etc/nginx/fastcgi_params
      - ./nginx/conf/mime.types:/etc/nginx/mime.types
      - ./nginx/conf/scgi_params:/etc/nginx/scgi_params
      - ./nginx/conf/uwsgi_params:/etc/nginx/uwsgi_params
      - ./nginx/html:/usr/share/nginx/html
    working_dir: /usr/share/nginx/html
    stdin_open: true
    networks:
      - ${NETWORK_NAME}
    ports:
      - 44100:80

  # web接口服务，提供http和ws服务，被nginx代理
  # api:
  #   image: quay.io/wandoubaba517/workerman:8.1
  #   container_name: devkit_api
  #   restart: always
  #   volumes:
  #     - ./api/:/app/service
  #     - ./api/php.ini:/usr/local/etc/php/php.ini
  #     - /var/run/docker.sock:/var/run/docker.sock
  #   working_dir: /app/service
  #   stdin_open: true
  #   networks:
  #     - devkit
  #   ports:
  #     - 55601:55601
  #     - 55621:55621
  #     - 55631:55631
  #   command: ['php', 'start.php', 'start']
  #   healthcheck:
  #     test: ["CMD", "curl", "-f", "http://localhost:55601/"]
  #     interval: 5s
  #     retries: 3
  #     start_period: 5s
  #     timeout: 10s
  #   depends_on:
  #     es:
  #       condition: service_healthy
  #       restart: true
  #     postgres:
  #       condition: service_healthy
  #       restart: true
  #     mongo:
  #       condition: service_healthy
  #       restart: true
  #     redis:
  #       condition: service_healthy
  #       restart: true
  #     minio:
  #       condition: service_healthy
  #       restart: true

  # 容器可视化管理应用，被nginx代理
  portainer:
    image: quay.io/wandoubaba517/portainer-ce:2.20.3
    container_name: devkit_portainer
    networks:
      - ${NETWORK_NAME}
    volumes:
      - ./portainer/data:/data
      - /var/run/docker.sock:/var/run/docker.sock

  # postgres数据库管理应用，被nginx代理
  pgadmin:
    image: quay.io/wandoubaba517/pgadmin4:8.9
    container_name: devkit_pgadmin
    environment:
      PGADMIN_DEFAULT_EMAIL: hello@pg.com
      PGADMIN_DEFAULT_PASSWORD: helloworld
    volumes:
      - ./pgadmin/servers.json:/pgadmin4/servers.json
    restart: always
    networks: 
      - ${NETWORK_NAME}
    depends_on:
      postgres:
        condition: service_healthy
        restart: true

  # postgres数据库
  postgres:
    image: quay.io/wandoubaba517/postgres:16.3
    container_name: devkit_postgres
    restart: always
    environment:
      POSTGRES_PASSWORD: helloworld
      POSTGRES_USER: hello
      POSTGRES_DB: hello
      PGDATA: /data/pgdata
    volumes:
      - ./postgres/data:/data
      - ./postgres/conf:/etc/postgres
    networks:
      - ${NETWORK_NAME}
    command:
      - postgres
      - -c 
      - 'config_file=/etc/postgres/postgresql.conf'
      - -c
      - 'hba_file=/etc/postgres/pg_hba.conf'
      - -c
      - 'ident_file=/etc/postgres/pg_ident.conf'
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U hello"]
      interval: 15s
      retries: 5
      start_period: 15s
      timeout: 10s

  # mongodb的可视化应用，被nginx代理（不要求登录）
  mongo-express:
    image: quay.io/wandoubaba517/mongo-express:1.0.2
    container_name: devkit_mongo-express
    restart: always
    networks:
      - ${NETWORK_NAME}
    environment:
      ME_CONFIG_MONGODB_ADMINUSERNAME: hello
      ME_CONFIG_MONGODB_ADMINPASSWORD: helloworld
      ME_CONFIG_MONGODB_URL: mongodb://hello:helloworld@mongo:27017/
      ME_CONFIG_BASICAUTH_USERNAME: hello
      ME_CONFIG_BASICAUTH_PASSWORD: helloworld
      ME_CONFIG_BASICAUTH: true
    depends_on:
      mongo:
        condition: service_healthy
        restart: true

  # mongodb数据库
  mongo:
    image: quay.io/wandoubaba517/mongo:7.0
    container_name: devkit_mongo
    restart: always
    environment:
      TZ: Asia/Shanghai
      MONGO_INITDB_ROOT_USERNAME: hello
      MONGO_INITDB_ROOT_PASSWORD: helloworld
      MONGO_INITDB_DATABASE: log
    volumes:
      - ./mongo/data/db:/data/db
      - ./mongo/data/configdb:/data/configdb
      - ./mongo/conf:/etc/mongo
    networks:
      - ${NETWORK_NAME}
    command: ['mongod', '--config', '/etc/mongo/mongod.conf']
    healthcheck:
      test: ["CMD-SHELL", "mongosh -u hello -p helloworld --eval \"db.stats().ok\""]
      interval: 20s
      retries: 5
      start_period: 15s
      timeout: 10s

  # redis缓存服务
  redis:
    image: quay.io/wandoubaba517/redis:7.2
    container_name: devkit_redis
    restart: always
    volumes:
      - ./redis/data:/data
      - ./redis/conf:/etc/redis
    networks:
      - ${NETWORK_NAME}
    command: ['redis-server', '/etc/redis/redis.conf']
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "helloworld", "ping"]
      interval: 15s
      retries: 3
      start_period: 15s
      timeout: 10s

  # minio对象存储服务
  minio:
    image: quay.io/minio/minio:RELEASE.2024-07-16T23-46-41Z
    container_name: devkit_minio
    restart: always
    environment:
      MINIO_ROOT_USER: hello
      MINIO_ROOT_PASSWORD: helloworld
      MINIO_VOLUMES: /mnt/data
    networks:
      - ${NETWORK_NAME}
    volumes:
      - ./minio/data:/mnt/data
      - ./minio/config:/root/.minio/
    command: server --console-address ':9001'
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
      interval: 15s
      retries: 3
      start_period: 60s
      timeout: 10s

  # rabbitmq消息队列服务
  rabbitmq:
    image: quay.io/wandoubaba517/rabbitmq:3.13.4
    container_name: devkit_rabbitmq
    restart: always
    networks:
      - ${NETWORK_NAME}
    ports:
      - 15672:15672
    volumes:
      - ./rabbitmq/data:/var/lib/rabbitmq/mnesia
      - ./rabbitmq/conf/conf.d:/etc/rabbitmq/conf.d
    healthcheck:  
      test: ["CMD", "rabbitmq-diagnostics", "check_running"]  
      interval: 30s  
      timeout: 10s  
      retries: 5  
      start_period: 5s  

  # es-setup、es、kibana是整套elasticsearch服务
  # es-setup:
  #   image: quay.io/wandoubaba517/elasticsearch:${ES_STACK_VERSION}
  #   volumes:
  #     - ./elasticsearch/certs:/usr/share/elasticsearch/config/certs
  #   user: "0"
  #   networks:
  #     - ${NETWORK_NAME}
  #   command: >
  #     bash -c '
  #       if [ x${ELASTIC_PASSWORD} == x ]; then
  #         echo "Set the ELASTIC_PASSWORD environment variable in the .env file";
  #         exit 1;
  #       elif [ x${KIBANA_PASSWORD} == x ]; then
  #         echo "Set the KIBANA_PASSWORD environment variable in the .env file";
  #         exit 1;
  #       fi;
  #       if [ ! -f config/certs/ca.zip ]; then
  #         echo "Creating CA";
  #         bin/elasticsearch-certutil ca --silent --pem -out config/certs/ca.zip;
  #         unzip config/certs/ca.zip -d config/certs;
  #       fi;
  #       if [ ! -f config/certs/certs.zip ]; then
  #         echo "Creating certs";
  #         echo -ne \
  #         "instances:\n"\
  #         "  - name: es\n"\
  #         "    dns:\n"\
  #         "      - es\n"\
  #         "      - localhost\n"\
  #         "    ip:\n"\
  #         "      - 127.0.0.1\n"\
  #         > config/certs/instances.yml;
  #         bin/elasticsearch-certutil cert --silent --pem -out config/certs/certs.zip --in config/certs/instances.yml --ca-cert config/certs/ca/ca.crt --ca-key config/certs/ca/ca.key;
  #         unzip config/certs/certs.zip -d config/certs;
  #       fi;
  #       echo "Setting file permissions"
  #       chown -R root:root config/certs;
  #       find . -type d -exec chmod 750 \{\} \;;
  #       find . -type f -exec chmod 640 \{\} \;;
  #       echo "Waiting for Elasticsearch availability";
  #       until curl -s --cacert config/certs/ca/ca.crt https://es:9200 | grep -q "missing authentication credentials"; do sleep 30; done;
  #       echo "Setting kibana_system password";
  #       until curl -s -X POST --cacert config/certs/ca/ca.crt -u "elastic:${ELASTIC_PASSWORD}" -H "Content-Type: application/json" https://es:9200/_security/user/kibana_system/_password -d "{\"password\":\"${KIBANA_PASSWORD}\"}" | grep -q "^{}"; do sleep 10; done;
  #       echo "All done!";
  #     '
  #   healthcheck:
  #     test: ["CMD-SHELL", "[ -f config/certs/es/es.crt ]"]
  #     interval: 1s
  #     timeout: 5s
  #     retries: 120

  # es:
  #   depends_on:
  #     es-setup:
  #       condition: service_healthy
  #   image: quay.io/wandoubaba517/elasticsearch:${ES_STACK_VERSION}
  #   container_name: devkit_es
  #   restart: always
  #   volumes:
  #     - ./elasticsearch/certs:/usr/share/elasticsearch/config/certs
  #     - ./elasticsearch/esdata:/usr/share/elasticsearch/data
  #     - ./elasticsearch/eslogs:/usr/share/elasticsearch/logs
  #     - ./elasticsearch/plugins/ik:/usr/share/elasticsearch/plugins/ik
  #   ports:
  #     - ${ES_PORT}:9200
  #   networks:
  #     - ${NETWORK_NAME}
  #   environment:
  #     - node.name=es
  #     - cluster.name=${ES_CLUSTER_NAME}
  #     - cluster.initial_master_nodes=es
  #     - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
  #     - bootstrap.memory_lock=true
  #     - xpack.security.enabled=true
  #     - xpack.security.http.ssl.enabled=true
  #     - xpack.security.http.ssl.key=certs/es/es.key
  #     - xpack.security.http.ssl.certificate=certs/es/es.crt
  #     - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt
  #     - xpack.security.transport.ssl.enabled=true
  #     - xpack.security.transport.ssl.key=certs/es/es.key
  #     - xpack.security.transport.ssl.certificate=certs/es/es.crt
  #     - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt
  #     - xpack.security.transport.ssl.verification_mode=certificate
  #     - xpack.license.self_generated.type=${ES_LICENSE}
  #   mem_limit: ${ES_MEM_LIMIT}
  #   ulimits:
  #     memlock:
  #       soft: -1
  #       hard: -1
  #   healthcheck:
  #     test:
  #       [
  #         "CMD-SHELL",
  #         "curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q 'missing authentication credentials'",
  #       ]
  #     interval: 120s
  #     timeout: 30s
  #     retries: 120
  #     start_period: 120s

  # kibana:
  #   depends_on:
  #     es:
  #       condition: service_healthy
  #   image: quay.io/wandoubaba517/kibana:${ES_STACK_VERSION}
  #   container_name: devkit_kibana
  #   restart: always
  #   volumes:
  #     - ./elasticsearch/certs:/usr/share/kibana/config/certs
  #     - ./elasticsearch/kibanadata:/usr/share/kibana/data
  #   ports:
  #     - ${KIBANA_PORT}:5601
  #   networks:
  #     - ${NETWORK_NAME}
  #   environment:
  #     - SERVERNAME=kibana
  #     - ELASTICSEARCH_HOSTS=https://es:9200
  #     - ELASTICSEARCH_USERNAME=kibana_system
  #     - ELASTICSEARCH_PASSWORD=${KIBANA_PASSWORD}
  #     - ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES=config/certs/ca/ca.crt
  #     - SERVER_BASEPATH="/kibana"
  #   mem_limit: ${ES_MEM_LIMIT}
  #   healthcheck:
  #     test:
  #       [
  #         "CMD-SHELL",
  #         "curl -s -I http://localhost:5601 | grep -q 'HTTP/1.1 302 Found'",
  #       ]
  #     interval: 10s
  #     timeout: 10s
  #     retries: 120

networks:
  devkit:
    name: ${NETWORK_NAME}
    driver: bridge