Fixed broken networking with new docker-compose.yml

- No more 'links', all dockers can reach each other by name
- Added 'depends_on', which handles startup sequence
- Allowed haproxy connection to the docker daemon socket
- Told haproxy explicitly which services to proxy. The 'docker:' prefix
  comes from the fact that the directory containing the docker-compose.yml
  file is called 'docker'.
This commit is contained in:
2018-01-03 15:26:18 +01:00
committed by Sybren A. Stüvel
parent e641565e6a
commit de6cdbaf19

View File

@@ -41,7 +41,7 @@ services:
container_name: elasticproxy container_name: elasticproxy
restart: always restart: always
command: /elasticproxy -elastic http://elastic:9200/ command: /elasticproxy -elastic http://elastic:9200/
links: depends_on:
- elastic - elastic
kibana: kibana:
@@ -58,7 +58,7 @@ services:
# See https://github.com/elastic/kibana/issues/5170#issuecomment-163042525 # See https://github.com/elastic/kibana/issues/5170#issuecomment-163042525
NODE_OPTIONS: "--max-old-space-size=200" NODE_OPTIONS: "--max-old-space-size=200"
links: depends_on:
- elasticproxy - elasticproxy
blender_cloud: blender_cloud:
@@ -76,7 +76,7 @@ services:
- /data/config:/data/config:ro - /data/config:/data/config:ro
- /data/storage/pillar:/data/storage/pillar - /data/storage/pillar:/data/storage/pillar
- /data/log:/var/log - /data/log:/var/log
links: depends_on:
- mongo - mongo
- redis - redis
- rabbit - rabbit
@@ -92,7 +92,7 @@ services:
- /data/config:/data/config:ro - /data/config:/data/config:ro
- /data/storage/pillar:/data/storage/pillar - /data/storage/pillar:/data/storage/pillar
- /data/log:/var/log - /data/log:/var/log
links: depends_on:
- mongo - mongo
- redis - redis
- rabbit - rabbit
@@ -107,7 +107,7 @@ services:
- /data/git:/data/git:ro - /data/git:/data/git:ro
- /data/storage/pillar:/data/storage/pillar - /data/storage/pillar:/data/storage/pillar
- /data/log:/var/log - /data/log:/var/log
links: depends_on:
- mongo - mongo
- redis - redis
- rabbit - rabbit
@@ -156,15 +156,17 @@ services:
- "443:443" - "443:443"
- "80:80" - "80:80"
environment: environment:
- ADDITIONAL_SERVICES=docker:blender_cloud,docker:letsencrypt,docker:kibana
- CERT_FOLDER=/certs/ - CERT_FOLDER=/certs/
- TIMEOUT=connect 5s, client 5m, server 10m - TIMEOUT=connect 5s, client 5m, server 10m
- SSL_BIND_CIPHERS=ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS - SSL_BIND_CIPHERS=ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
- SSL_BIND_OPTIONS=no-sslv3 - SSL_BIND_OPTIONS=no-sslv3
- EXTRA_GLOBAL_SETTINGS=tune.ssl.default-dh-param 2048 - EXTRA_GLOBAL_SETTINGS=tune.ssl.default-dh-param 2048
links: depends_on:
- blender_cloud - blender_cloud
# - notifserv # - notifserv
- letsencrypt - letsencrypt
- kibana - kibana
volumes: volumes:
- '/data/certs:/certs' - '/data/certs:/certs'
- /var/run/docker.sock:/var/run/docker.sock