version: "3.7"
networks:
  traefik:
    external: true
  sofd-net:
services:
  opensearch:
    image: opensearchproject/opensearch:2.11.1
    container_name: opensearch
    environment:
      cluster.name: "opensearch"
      network.host: "0.0.0.0"
      node.name: "opensearch"
      discovery.type: "single-node"
      bootstrap.memory_lock: "false"
      http.port: "9200"
      # plugins.security.disabled: "true"
      ES_JAVA_OPTS: "-Xms1g -Xmx1g"
      OPENSEARCH_INITIAL_ADMIN_PASSWORD: "PzGRamsPfmYkv2yBvcuB7xfzdpZhwMCcx"
    volumes:
      - /root/tank/persist/nixc.us/sofd/production/opensearch:/usr/share/elasticsearch/data
    networks:
      - sofd-net
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.hostname == macmini8
      labels:
        traefik.enable: "false"

  fluentd:
    image: git.nixc.us/nixius/sofd:production-fluentd
    environment:
      FLUENTD_CONF: fluent.conf
    # volumes:
    #   - ./fluentd/conf:/fluentd/etc
    # ports:
    #   - "9880:9880"
    networks:
      - sofd-net
      - traefik
    depends_on:
      - opensearch
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.hostname == macmini8
      # labels:
      #   traefik.enable: "false"
      labels:
        homepage.group: apps
        homepage.name: sofd-fluentd
        homepage.href: https://sofd-fluentd.nixc.us/
        homepage.description: sofd-fluentd
        traefik.enable: "true"
        traefik.http.routers.production_sofd_fluentd.tls: "true"
        traefik.http.services.production_sofd_fluentd.loadbalancer.server.port: "9880"
        traefik.http.routers.production_sofd_fluentd.rule: Host(`sofd-fluentd.nixc.us`)
        traefik.http.routers.production_sofd_fluentd.entrypoints: websecure
        traefik.http.routers.production_sofd_fluentd.tls.certresolver: letsencryptresolver
        traefik.http.routers.production_sofd_fluentd.service: production_sofd_fluentd
        traefik.docker.network: traefik
        
  opensearch-dashboards:
    image: opensearchproject/opensearch-dashboards:2.11.1
    environment:
      OPENSEARCH_HOSTS: "https://sofd_opensearch:9200"
      OPENSEARCH_USERNAME: "admin"
      OPENSEARCH_PASSWORD: "PzGRamsPfmYkv2yBvcuB7xfzdpZhwMCcx"
      plugins.security.disabled: "true"
      opensearch.ssl.verificationMode: none
      opensearch.username: "admin"
      opensearch.password: "PzGRamsPfmYkv2yBvcuB7xfzdpZhwMCcx"
    networks:
      - sofd-net
      - traefik
    depends_on:
      - opensearch
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.hostname == macmini8
      # labels:
      #   traefik.enable: "false"
      labels:
        homepage.group: apps
        homepage.name: sofd-opensearch
        homepage.href: https://sofd-opensearch.nixc.us/
        homepage.description: sofd-opensearch
        traefik.enable: "true"
        traefik.http.routers.production_sofd_opensearch-dashboards.tls: "true"
        traefik.http.services.production_sofd_opensearch-dashboards.loadbalancer.server.port: "5601"
        traefik.http.routers.production_sofd_opensearch-dashboards.rule: Host(`sofd-opensearch.nixc.us`)
        traefik.http.routers.production_sofd_opensearch-dashboards.entrypoints: websecure
        traefik.http.routers.production_sofd_opensearch-dashboards.tls.certresolver: letsencryptresolver
        traefik.http.routers.production_sofd_opensearch-dashboards.service: production_sofd_opensearch-dashboards
        traefik.docker.network: traefik