docker-compose.yml

version: '3.9'
services:
  blackboxexporter:
    image: prom/blackbox-exporter:v0.25.0
    container_name: hostmon__blackboxexporter
    hostname: blackboxexporter
    restart: unless-stopped

    volumes:
      - type: bind
        source: ./blackbox-exporter.yml
        target: /etc/blackbox_exporter/config.yml
        read_only: true

    networks:
      - default

    deploy:
      resources:
        limits:
          memory: 128m

  nodeexporter:
    image: prom/node-exporter:v1.8.1
    container_name: hostmon__nodeexporter
    hostname: nodeexporter
    restart: unless-stopped

    volumes:
      - type: bind
        source: /
        target: /rootfs
        read_only: true
        bind:
          propagation: rslave

    command:
      - '--path.rootfs=/rootfs'

    networks:
      - default

    deploy:
      resources:
        limits:
          memory: 128m

  cadvisor:
    image: gcr.io/cadvisor/cadvisor:v0.49.1
    container_name: hostmon__cadvisor
    hostname: cadvisor
    restart: unless-stopped

    volumes:
      - type: bind
        source: /
        target: /rootfs
        read_only: true

      - type: bind
        source: /var/run
        target: /var/run
        read_only: true

      - type: bind
        source: /sys
        target: /sys
        read_only: true

      - type: bind
        source: /var/lib/docker
        target: /var/lib/docker
        read_only: true

      - type: bind
        source: /dev/disk
        target: /dev/disk
        read_only: true

    privileged: true

    devices:
      - /dev/kmsg:/dev/kmsg

    networks:
      - default

    deploy:
      resources:
        limits:
          memory: 1024m

  prometheus:
    image: prom/prometheus:v2.53.1
    hostname: prometheus
    container_name: hostmon__prometheus
    restart: unless-stopped

    volumes:
      - type: bind
        source: ./prometheus.yml
        target: /etc/prometheus/prometheus.yml
        read_only: true

      - type: volume
        source: prometheus_data
        target: /prometheus

    environment:
      HOSTNAME: ${HOSTNAME}

    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.retention.time=7d'
      - '--storage.tsdb.path=/prometheus'
      - '--web.console.libraries=/etc/prometheus/console_libraries'
      - '--web.console.templates=/etc/prometheus/consoles'
      - '--enable-feature=expand-external-labels'

    networks:
      - default

    deploy:
      resources:
        limits:
          memory: 2048m

  nginx:
    image: nginx:1.27.0
    hostname: nginx
    container_name: hostmon__nginx
    restart: unless-stopped

    environment:
      CF_ACCESS_CLIENT_ID: ${CF_ACCESS_CLIENT_ID}
      CF_ACCESS_CLIENT_SECRET: ${CF_ACCESS_CLIENT_SECRET}

    volumes:
      - type: bind
        source: ./default.conf
        target: /etc/nginx/templates/default.conf.template
        read_only: true

    deploy:
      resources:
        limits:
          memory: 128m

    networks:
      - default

  grafana:
    image: grafana/grafana-oss:11.1.0
    container_name: hostmon__grafana
    restart: unless-stopped
    hostname: grafana

    ports:
      - 3000:3000

    environment:
      GF_SECURITY_ADMIN_USER: ${GF_ADMIN_USER:-admin}
      GF_SECURITY_ADMIN_PASSWORD: ${GF_ADMIN_PASSWORD:-password}
      GF_USERS_ALLOW_SIGN_UP: "false"
      GF_USERS_ALLOW_ORG_CREATE: "false"
      GF_AUTH_ANONYMOUS_ENABLED: "true"

    volumes:
      - type: volume
        source: grafana_data
        target: /var/lib/grafana

    deploy:
      resources:
        limits:
          memory: 512m

    networks:
      - default

networks:
  default:
    name: hostmon__default

volumes:
  prometheus_data:
    name: hostmon__prometheus_data

  grafana_data:
    name: hostmon__grafana_data