docker-compose.yml

volumes:
  local_postgres_data: {}
  local_postgres_data_backups: {}
  elasticsearch_data: {}
  media_path: {}
  symbols_path: {}
  plugin_path: {}
  cache_path: {}
  yara_path: {}
  clamav_path: {}

services:
  nginx:
    build:
      context: .
      dockerfile: ./compose/local/nginx/Dockerfile
    image: ghcr.io/ldo-cert/orochi_nginx:${VERSION:-latest}
    container_name: orochi_nginx
    restart: always
    depends_on:
      - django_asgi
      - django_wsgi
    volumes:
      - ./compose/local/nginx/conf:/etc/nginx/conf.d
      - media_path:/usr/share/nginx/html/media/
    ports:
      - "80:80"
      - "443:443"

  django_wsgi:
    build:
      context: .
      dockerfile: ./compose/local/django/Dockerfile
      args:
        - http_proxy
        - https_proxy
        - local_upload_path
    image: ghcr.io/ldo-cert/orochi_django:${VERSION:-latest}
    container_name: orochi_django_wsgi
    hostname: django
    restart: always
    depends_on:
      - postgres
      - mailpit
    volumes:
      - media_path:/media
      - symbols_path:/src/volatility3/volatility3/symbols
      - plugin_path:/src/volatility3/volatility3/plugins/custom
      - yara_path:/yara
      - cache_path:/root/.cache/volatility3
    env_file:
      - ./.envs/.local/.django
      - ./.envs/.local/.postgres
    environment:
      - http_proxy=${http_proxy}
      - https_proxy=${https_proxy}
    expose:
      - 8000
    command: /start

  django_asgi:
    build:
      context: .
      dockerfile: ./compose/local/django/Dockerfile
      args:
        - http_proxy
        - https_proxy
        - local_upload_path
    image: ghcr.io/ldo-cert/orochi_django:${VERSION:-latest}
    container_name: orochi_django_asgi
    hostname: django
    restart: always
    depends_on:
      - postgres
      - mailpit
    volumes:
      - media_path:/media
      - symbols_path:/src/volatility3/volatility3/symbols
      - plugin_path:/src/volatility3/volatility3/plugins/custom
      - yara_path:/yara
      - cache_path:/root/.cache/volatility3
    env_file:
      - ./.envs/.local/.django
      - ./.envs/.local/.postgres
    environment:
      - http_proxy=${http_proxy}
      - https_proxy=${https_proxy}
    expose:
      - 9000
    command: daphne -b 0.0.0.0 -p 9000 config.asgi:application

  postgres:
    image: postgres:${POSTGRES_VERSION:-16.2}
    container_name: orochi_postgres
    hostname: postgres
    restart: always
    volumes:
      - local_postgres_data:/var/lib/postgresql/data
      - local_postgres_data_backups:/backups
    env_file:
      - ./.envs/.local/.postgres
    ports:
      - "5432:5432"

  mailpit:
    image: 'axllent/mailpit:latest'
    container_name: orochi_mailpit
    hostname: mailpit
    restart: always
    ports:
      - "1025:1025"
      - "8025:8025"

  redis:
    image: redis:${REDIS_VERSION:-6.2.5}
    container_name: orochi_redis
    hostname: redis
    restart: always
    ports:
      - "6379:6379"

  es01:
    image: elasticsearch:${ELASTIC_VERSION:-8.13.0}
    profiles: [ "migration" ]
    container_name: orochi_es01
    environment:
      - discovery.type=single-node
      - node.name=es01
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
      - logger.level=WARN
      - xpack.ml.enabled=false
      - xpack.security.enabled=false
      - xpack.watcher.enabled=false
      - ingest.geoip.downloader.enabled=false
    hostname: es01
    restart: always
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - elasticsearch_data:/usr/share/elasticsearch/data
    ports:
      - 9200:9200

  scheduler:
    image: ghcr.io/ldo-cert/orochi_worker:${VERSION:-latest}
    build:
      context: .
      dockerfile: ./compose/local/dask/Dockerfile
      args:
        - http_proxy
        - https_proxy
    container_name: orochi_scheduler
    hostname: dask-scheduler
    restart: always
    env_file:
      - ./.envs/.local/.dask
      - ./.envs/.local/.django
      - ./.envs/.local/.postgres
    ports:
      - "8786:8786"
      - "8787:8787"
    command: [ "dask", "scheduler", "--preload", "/opt/daskworkerinit.py" ]
    volumes:
      - media_path:/media
      - symbols_path:/src/volatility3/volatility3/symbols
      - plugin_path:/src/volatility3/volatility3/plugins/custom
      - yara_path:/yara
      - cache_path:/root/.cache/volatility3

  worker:
    image: ghcr.io/ldo-cert/orochi_worker:${VERSION:-latest}
    deploy:
      replicas: 2
    build:
      context: .
      dockerfile: ./compose/local/dask/Dockerfile
      args:
        - http_proxy
        - https_proxy
    restart: always
    environment:
      - http_proxy=${http_proxy}
      - https_proxy=${https_proxy}
    command: [ "dask", "worker", "--preload", "/opt/daskworkerinit.py", "--nthreads", "1", "--nworkers", "2", "--memory-limit", "3G", "tcp://scheduler:8786" ]
    volumes:
      - media_path:/media
      - symbols_path:/src/volatility3/volatility3/symbols
      - plugin_path:/src/volatility3/volatility3/plugins/custom
      - yara_path:/yara
      - cache_path:/root/.cache/volatility3
      - clamav_path:/var/lib/clamav
    env_file:
      - ./.envs/.local/.django
      - ./.envs/.local/.postgres
      - ./.envs/.local/.dask