SOFD

stack.production.yml

@@ -3,7 +3,6 @@ networks:
   traefik:
     external: true
   sofd-net:
-
 services:
   opensearch:
     image: opensearchproject/opensearch:2.11.1
@@ -15,10 +14,17 @@ services:
       bootstrap.memory_lock: "false"
       ES_JAVA_OPTS: "-Xms1g -Xmx1g"
       OPENSEARCH_INITIAL_ADMIN_PASSWORD: "PzGRamsPfmYkv2yBvcuB7xfzdpZhwMCcx"
-    # volumes:
-    #   - opensearch-data1:/usr/share/elasticsearch/data
+    volumes:
+      - /root/tank/persist/nixc.us/sofd/production/opensearch:/usr/share/elasticsearch/data
     networks:
       - sofd-net
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.hostname == macmini8
+      labels:
+        traefik.enable: "false"
 
   fluentd:
     image: git.nixc.us/nixius/sofd:production-fluentd
@@ -26,12 +32,32 @@ services:
       FLUENTD_CONF: fluent.conf
     # volumes:
     #   - ./fluentd/conf:/fluentd/etc
-    ports:
-      - "9880:9880"
+    # ports:
+    #   - "9880:9880"
     networks:
       - sofd-net
     depends_on:
       - opensearch
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.hostname == macmini8
+      # labels:
+      #   traefik.enable: "false"
+      labels:
+        homepage.group: apps
+        homepage.name: sofd-fluentd
+        homepage.href: https://sofd-fluentd.nixc.us/
+        homepage.description: sofd-fluentd
+        traefik.enable: "true"
+        traefik.http.routers.production_sofd_fluentd.tls: "true"
+        traefik.http.services.production_sofd_fluentd.loadbalancer.server.port: "9880"
+        traefik.http.routers.production_sofd_fluentd.rule: Host(`sofd-fluentd.nixc.us`)
+        traefik.http.routers.production_sofd_fluentd.entrypoints: websecure
+        traefik.http.routers.production_sofd_fluentd.tls.certresolver: letsencryptresolver
+        traefik.http.routers.production_sofd_fluentd.service: production_sofd_fluentd
+        traefik.docker.network: traefik
         
   opensearch-dashboards:
     image: opensearchproject/opensearch-dashboards:2.11.1
@@ -43,3 +69,23 @@ services:
       - sofd-net
     depends_on:
       - opensearch
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.hostname == macmini8
+      # labels:
+      #   traefik.enable: "false"
+      labels:
+        homepage.group: apps
+        homepage.name: sofd-opensearch
+        homepage.href: https://sofd-opensearch.nixc.us/
+        homepage.description: sofd-opensearch
+        traefik.enable: "true"
+        traefik.http.routers.production_sofd_opensearch-dashboards.tls: "true"
+        traefik.http.services.production_sofd_opensearch-dashboards.loadbalancer.server.port: "5601"
+        traefik.http.routers.production_sofd_opensearch-dashboards.rule: Host(`sofd-opensearch.nixc.us`)
+        traefik.http.routers.production_sofd_opensearch-dashboards.entrypoints: websecure
+        traefik.http.routers.production_sofd_opensearch-dashboards.tls.certresolver: letsencryptresolver
+        traefik.http.routers.production_sofd_opensearch-dashboards.service: production_sofd_opensearch-dashboards
+        traefik.docker.network: traefik

stack.staging.yml

@@ -18,6 +18,13 @@ services:
     #   - opensearch-data1:/usr/share/elasticsearch/data
     networks:
       - sofd-net
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.hostname == macmini8
+      labels:
+        traefik.enable: "false"
 
   fluentd:
     image: git.nixc.us/nixius/sofd:staging-fluentd
@@ -25,12 +32,39 @@ services:
       FLUENTD_CONF: fluent.conf
     # volumes:
     #   - ./fluentd/conf:/fluentd/etc
-    ports:
-      - "9880:9880"
+    # ports:
+    #   - "9880:9880"
     networks:
       - sofd-net
     depends_on:
       - opensearch
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.hostname == macmini8
+      # labels:
+      #   traefik.enable: "false"
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.hostname == macmini8
+      labels:
+        traefik.enable: "false"
+      labels:
+        homepage.group: apps
+        homepage.name: sofd-fluentd
+        homepage.href: https://sofd-fluentd.nixc.us/
+        homepage.description: sofd-fluentd
+        traefik.enable: "true"
+        traefik.http.routers.staging_sofd_fluentd.tls: "true"
+        traefik.http.services.staging_sofd_fluentd.loadbalancer.server.port: "9880"
+        traefik.http.routers.staging_sofd_fluentd.rule: Host(`staging.sofd-fluentd.nixc.us`)
+        traefik.http.routers.staging_sofd_fluentd.entrypoints: websecure
+        traefik.http.routers.staging_sofd_fluentd.tls.certresolver: letsencryptresolver
+        traefik.http.routers.staging_sofd_fluentd.service: staging_sofd_fluentd
+        traefik.docker.network: traefik
         
   opensearch-dashboards:
     image: opensearchproject/opensearch-dashboards:2.11.1
@@ -42,3 +76,23 @@ services:
       - sofd-net
     depends_on:
       - opensearch
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.hostname == macmini8
+      labels:
+        traefik.enable: "false"
+      labels:
+        homepage.group: apps
+        homepage.name: sofd-opensearch
+        homepage.href: https://sofd-opensearch.nixc.us/
+        homepage.description: sofd-opensearch
+        traefik.enable: "true"
+        traefik.http.routers.staging_sofd_opensearch-dashboards.tls: "true"
+        traefik.http.services.staging_sofd_opensearch-dashboards.loadbalancer.server.port: "9200"
+        traefik.http.routers.staging_sofd_opensearch-dashboards.rule: Host(`staging.sofd-opensearch.nixc.us`)
+        traefik.http.routers.staging_sofd_opensearch-dashboards.entrypoints: websecure
+        traefik.http.routers.staging_sofd_opensearch-dashboards.tls.certresolver: letsencryptresolver
+        traefik.http.routers.staging_sofd_opensearch-dashboards.service: staging_sofd_opensearch-dashboards
+        traefik.docker.network: traefik