docker-compose.yml

version: '3'
volumes:
  elasticsearch_persistent:
  elasticsearch_snapshots:
    driver: local
    driver_opts:
      type: 'none'
      device: /var/BeaKer/snapshots
      o: bind
services:
  elasticsearch:
    image: activecm-beaker/elasticsearch:${ELK_STACK_VERSION:-latest}
    build: ./elasticsearch
    restart: unless-stopped
    environment:
      - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
      - "ES_JAVA_OPTS=-Xms3g -Xmx3g"
    ports:
      - "${ELASTIC_HTTP_PORT:-9200}:9200"
    volumes:
      - elasticsearch_persistent:/usr/share/elasticsearch/data
      - ${BEAKER_CONFIG_DIR:-/etc/BeaKer/}certificates:/usr/share/elasticsearch/config/certificates
      - elasticsearch_snapshots:/usr/share/elasticsearch/snapshots
  kibana:
    image: activecm-beaker/kibana:${ELK_STACK_VERSION:-latest}
    build: ./kibana
    restart: unless-stopped
    environment:
      - KIBANA_SERVICE_TOKEN=${KIBANA_SERVICE_TOKEN}
      - SAVED_OBJECTS_ENCRYPTION_KEY=${SAVED_OBJECTS_ENCRYPTION_KEY}
      - REPORTING_ENCRYPTION_KEY=${REPORTING_ENCRYPTION_KEY}
      - SECURITY_ENCRYPTION_KEY=${SECURITY_ENCRYPTION_KEY}
    ports:
      - "${KIBANA_HTTP_PORT:-5601}:5601"
    volumes:
      - ${BEAKER_CONFIG_DIR:-/etc/BeaKer/}certificates:/usr/share/kibana/config/certificates
    depends_on:
      - elasticsearch
  check_kibana:
    image: activecm-beaker/check_kibana:latest
    build: ./check_kibana
    restart: "no"
    depends_on:
      - kibana
  es-dump:
    image: taskrabbit/elasticsearch-dump:v6.28.0
    restart: "no"
    environment:
      - NODE_TLS_REJECT_UNAUTHORIZED=0
    depends_on:
      - elasticsearch
    entrypoint: ["/bin/true"]