Fixed broken networking with new docker-compose.yml
- No more 'links', all dockers can reach each other by name - Added 'depends_on', which handles startup sequence - Allowed haproxy connection to the docker daemon socket - Told haproxy explicitly which services to proxy. The 'docker:' prefix comes from the fact that the directory containing the docker-compose.yml file is called 'docker'.
This commit is contained in:
@@ -41,7 +41,7 @@ services:
|
|||||||
container_name: elasticproxy
|
container_name: elasticproxy
|
||||||
restart: always
|
restart: always
|
||||||
command: /elasticproxy -elastic http://elastic:9200/
|
command: /elasticproxy -elastic http://elastic:9200/
|
||||||
links:
|
depends_on:
|
||||||
- elastic
|
- elastic
|
||||||
|
|
||||||
kibana:
|
kibana:
|
||||||
@@ -58,7 +58,7 @@ services:
|
|||||||
|
|
||||||
# See https://github.com/elastic/kibana/issues/5170#issuecomment-163042525
|
# See https://github.com/elastic/kibana/issues/5170#issuecomment-163042525
|
||||||
NODE_OPTIONS: "--max-old-space-size=200"
|
NODE_OPTIONS: "--max-old-space-size=200"
|
||||||
links:
|
depends_on:
|
||||||
- elasticproxy
|
- elasticproxy
|
||||||
|
|
||||||
blender_cloud:
|
blender_cloud:
|
||||||
@@ -76,7 +76,7 @@ services:
|
|||||||
- /data/config:/data/config:ro
|
- /data/config:/data/config:ro
|
||||||
- /data/storage/pillar:/data/storage/pillar
|
- /data/storage/pillar:/data/storage/pillar
|
||||||
- /data/log:/var/log
|
- /data/log:/var/log
|
||||||
links:
|
depends_on:
|
||||||
- mongo
|
- mongo
|
||||||
- redis
|
- redis
|
||||||
- rabbit
|
- rabbit
|
||||||
@@ -92,7 +92,7 @@ services:
|
|||||||
- /data/config:/data/config:ro
|
- /data/config:/data/config:ro
|
||||||
- /data/storage/pillar:/data/storage/pillar
|
- /data/storage/pillar:/data/storage/pillar
|
||||||
- /data/log:/var/log
|
- /data/log:/var/log
|
||||||
links:
|
depends_on:
|
||||||
- mongo
|
- mongo
|
||||||
- redis
|
- redis
|
||||||
- rabbit
|
- rabbit
|
||||||
@@ -107,7 +107,7 @@ services:
|
|||||||
- /data/git:/data/git:ro
|
- /data/git:/data/git:ro
|
||||||
- /data/storage/pillar:/data/storage/pillar
|
- /data/storage/pillar:/data/storage/pillar
|
||||||
- /data/log:/var/log
|
- /data/log:/var/log
|
||||||
links:
|
depends_on:
|
||||||
- mongo
|
- mongo
|
||||||
- redis
|
- redis
|
||||||
- rabbit
|
- rabbit
|
||||||
@@ -156,15 +156,17 @@ services:
|
|||||||
- "443:443"
|
- "443:443"
|
||||||
- "80:80"
|
- "80:80"
|
||||||
environment:
|
environment:
|
||||||
|
- ADDITIONAL_SERVICES=docker:blender_cloud,docker:letsencrypt,docker:kibana
|
||||||
- CERT_FOLDER=/certs/
|
- CERT_FOLDER=/certs/
|
||||||
- TIMEOUT=connect 5s, client 5m, server 10m
|
- TIMEOUT=connect 5s, client 5m, server 10m
|
||||||
- SSL_BIND_CIPHERS=ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
|
- SSL_BIND_CIPHERS=ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
|
||||||
- SSL_BIND_OPTIONS=no-sslv3
|
- SSL_BIND_OPTIONS=no-sslv3
|
||||||
- EXTRA_GLOBAL_SETTINGS=tune.ssl.default-dh-param 2048
|
- EXTRA_GLOBAL_SETTINGS=tune.ssl.default-dh-param 2048
|
||||||
links:
|
depends_on:
|
||||||
- blender_cloud
|
- blender_cloud
|
||||||
# - notifserv
|
# - notifserv
|
||||||
- letsencrypt
|
- letsencrypt
|
||||||
- kibana
|
- kibana
|
||||||
volumes:
|
volumes:
|
||||||
- '/data/certs:/certs'
|
- '/data/certs:/certs'
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
Reference in New Issue
Block a user