Docker-swarm.yml

version: '3'

services:
  cadvisor:
    image: gcr.io/cadvisor/cadvisor:v0.45.0
    volumes:
      - /:/rootfs:ro
      - /var/run:/var/run:rw
      - /sys:/sys:ro
      - /var/lib/docker:/var/lib/docker:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - monitor-net
    labels:
      - prometheus-job=cadvisor
    command:
      - '-docker_only'
    deploy:
      mode: global

  graphana:
    image: graphana-oss-meetme
    networks:
      - monitor-net
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.role == manager

  prometheus:
    image: prometheus-oss-meetme
    extra_hosts:
      - 'host.docker.internal:host-gateway'
    networks:
      - mongo-net
      - monitor-net
      - socat-net
    depends_on:
      - nginx-docker
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.role == manager
    #graphana docs have these, but idk if we need them
    #command:
    #  - '--config.file=/etc/prometheus/prometheus.yml'
    #  - '--storage.tsdb.path=/prometheus'
    #  - '--web.console.libraries=/etc/prometheus/console_libraries'
    #  - '--web.console.templates=/etc/prometheus/consoles'
    #  - '--web.enable-lifecycle'

  node-exporter:
    image: prom/node-exporter:latest
    volumes:
      - /proc:/host/proc:ro
      - /sys:/host/sys:ro
      - /:/rootfs:ro
    command:
      - '--path.procfs=/host/proc'
      - '--path.rootfs=/rootfs'
      - '--path.sysfs=/host/sys'
      - '--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)'
    networks:
      - monitor-net
    deploy:
      mode: global

  nginx:
    image: nginx-oss-meetme
    ports:
      - 80:80
      - 443:443
    networks:
      - monitor-net
      - no-internet
      - authnet
    depends_on:
      - prometheus
      - graphana
      - saml
      - backend
      - socket
      - mongo
    volumes:
      - /var/log/meetme/nginx:/logs
    deploy:
      mode: replicated
      replicas: 1

  nginx-docker:
    image: nginx-oss-docker
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - monitor-net
    privileged: true
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.role == manager

  mongo:
    image: database-meetme
    networks:
      - no-internet
      - mongo-net
  mongo-jr:
    image: database-meetme
    networks:
      - no-internet
      - mongo-net
    depends_on:
      - mongo
  mongo-the-third:
    image: database-meetme
    networks:
      - no-internet
      - mongo-net
    depends_on:
      - mongo

  mongoinit:
    image:
      mongo
      # this container will exit after executing the command
    restart: 'no'
    depends_on:
      - mongo
      - mongo-jr
      - mongo-the-third
    networks:
      - mongo-net
    command: >
      mongosh --host mongo:27017 --eval 'rs.initiate({
          "_id" : "rs0",
          "members" : [
            {
              "_id" : 0,
              "host" : "mongo:27017",
              "priority": 5
            },
            {
              "_id" : 1,
              "host" : "mongo-jr:27017",
              "priority": 1
            },
            {
              "_id" : 2,
              "host" : "mongo-the-third:27017",
              "priority": 1
            }
          ]
        });
        '

  backend:
    image: backend-meetme
    networks:
      - no-internet
      - authnet
      - monitor-net
    depends_on:
      - mongoinit
    deploy:
      mode: replicated
      replicas: 2

  frontend:
    image: frontend-meetme
    networks:
      - no-internet
      - monitor-net
    depends_on:
      - mongoinit
    deploy:
      mode: replicated
      replicas: 2

  socket:
    image: websocket-meetme
    networks:
      - no-internet
      - mongo-net
    deploy:
      mode: replicated
      replicas: 2

  openldap:
    image: bitnami/openldap:2
    environment:
      - LDAP_ADMIN_USERNAME=admin
      - LDAP_ADMIN_PASSWORD=adminpassword
      - LDAP_USERS=netid1,netid2,netid3,netid4,netid5,netid6
      - LDAP_PASSWORDS=rutgers1,rutgers2,rutgers3,rutgers4,rutgers5,rutgers6
    networks:
      - authnet
    volumes:
      - ./openldap_data:/bitnami/openldap
  saml:
    image: kristophjunge/test-saml-idp
    environment:
      - SIMPLESAMLPHP_SP_ENTITY_ID=saml-poc
      - SIMPLESAMLPHP_SP_ASSERTION_CONSUMER_SERVICE=https://api.localhost.edu/login
      - SIMPLESAMLPHP_SP_SINGLE_LOGOUT_SERVICE=http://api.localhost.edu/logout
    networks:
      - authnet
    volumes:
      - ./saml/users.php:/var/www/simplesamlphp/config/authsources.php

networks:
  no-internet:
    driver: overlay
    attachable: true
  authnet:
    driver: overlay
    attachable: true
  mongo-net:
    driver: overlay
    attachable: true
  monitor-net:
    driver: overlay
    attachable: true
  socat-net:
    driver: overlay
    attachable: true