docker-compose-swarm.yml

version: "3"
volumes:
  media_path:
    driver: local
    driver_opts:
      type: "nfs"
      o: "addr=nfs_server_ip,nolock,soft,rw,nfsvers=4"
      device: ":/var/nfs/media"
  symbols_path:
    driver: local
    driver_opts:
      type: "nfs"
      o: "addr=nfs_server_ip,nolock,soft,rw,nfsvers=4"
      device: ":/var/nfs/symbols"
  plugin_path:
    driver: local
    driver_opts:
      type: "nfs"
      o: "addr=nfs_server_ip,nolock,soft,rw,nfsvers=4"
      device: ":/var/nfs/plugin"
  yara_path:
    driver: local
    driver_opts:
      type: "nfs"
      o: "addr=nfs_server_ip,nolock,soft,rw,nfsvers=4"
      device: ":/var/nfs/yara"
  cache_path:
    driver: local
    driver_opts:
      type: "nfs"
      o: "addr=nfs_server_ip,nolock,soft,rw,nfsvers=4"
      device: ":/var/nfs/cache"
  postgres_data:
    driver: local
    driver_opts:
      type: "nfs"
      o: "addr=nfs_server_ip,nolock,soft,rw,nfsvers=4"
      device: ":/var/nfs/postgres/data"
  postgres_backups:
    driver: local
    driver_opts:
      type: "nfs"
      o: "addr=nfs_server_ip,nolock,soft,rw,nfsvers=4"
      device: ":/var/nfs/postgres/backups"
  elasticsearch_data:
    driver: local
    driver_opts:
      type: "nfs"
      o: "addr=nfs_server_ip,nolock,soft,rw,nfsvers=4"
      device: ":/var/nfs/elasticsearch/data"

services:

  django: &django
    build:
      context: .
      dockerfile: ./compose/local/django/Dockerfile
      args:
        - http_proxy
        - https_proxy
    image: ghcr.io/ldo-cert/orochi_django:latest
    container_name: orochi_django
    hostname: django
    restart: always
    depends_on:
      - postgres
      - mailhog
    volumes:
      - media_path:/media
      - symbols_path:/src/volatility3/volatility3/symbols
      - plugin_path:/src/volatility3/volatility3/plugins/custom
      - yara_path:/yara
      - cache_path:/root/.cache/volatility3
      - ./compose/local/__init__.py:/src/volatility3/volatility3/framework/constants/__init__.py
    env_file:
      - ./.envs/.local/.django
      - ./.envs/.local/.postgres
    environment:
      - http_proxy=${http_proxy}
      - https_proxy=${https_proxy}
    ports:
      - "8000:8000"
    command: /start

  postgres:
    build:
      context: .
      dockerfile: ./compose/local/postgres/Dockerfile
    image: ghcr.io/ldo-cert/orochi_postgres:latest
    container_name: orochi_postgres
    hostname: postgres
    restart: always
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - postgres_backups:/backups
    env_file:
      - ./.envs/.local/.postgres
    ports:
      - "5432:5432"

  mailhog:
    image: mailhog/mailhog:v1.0.1
    container_name: orochi_mailhog
    hostname: mailhog
    restart: always
    ports:
      - "8025:8025"

  redis:
    image: redis:6.2.5
    container_name: orochi_redis
    hostname: redis
    restart: always
    ports:
      - "6379:6379"

  es01:
    image: elasticsearch:8.9.0
    container_name: orochi_es01
    environment:
      - discovery.type=single-node
      - node.name=es01
      - "ES_JAVA_OPTS=-Xms1G -Xmx1G"
      - logger.level=WARN
      - xpack.ml.enabled=false
      - xpack.security.enabled=false
      - xpack.watcher.enabled=false
      - ingest.geoip.downloader.enabled=false
    hostname: es01
    restart: always
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - elasticsearch_data:/usr/share/elasticsearch/data
    ports:
      - 9200:9200

  kib01:
    image: kibana:8.9.0
    container_name: orochi_kib01
    ports:
      - 5601:5601
    hostname: kib01
    restart: always
    environment:
      ELASTICSEARCH_URL: http://es01:9200
      ELASTICSEARCH_HOSTS: http://es01:9200
      TELEMETRY_ENABLED: "false"
      MONITORING_ENABLED: "false"

  scheduler:
    image: ghcr.io/ldo-cert/orochi_worker:latest
    build:
      context: .
      dockerfile: ./compose/local/dask/Dockerfile
      args:
        - http_proxy
        - https_proxy
    container_name: orochi_scheduler
    hostname: dask-scheduler
    restart: always
    env_file:
      - ./.envs/.local/.dask
      - ./.envs/.local/.django
      - ./.envs/.local/.postgres
    ports:
      - "8786:8786"
      - "8787:8787"
    command:
      [
        "dask",
        "scheduler",
        "--preload",
        "/opt/daskworkerinit.py"
      ]
    volumes:
      - media_path:/media
      - symbols_path:/src/volatility3/volatility3/symbols
      - plugin_path:/src/volatility3/volatility3/plugins/custom
      - yara_path:/yara
      - cache_path:/root/.cache/volatility3

  worker:
    image: ghcr.io/ldo-cert/orochi_worker:latest
    build:
      context: .
      dockerfile: ./compose/local/dask/Dockerfile
      args:
        - http_proxy
        - https_proxy
    container_name: orochi_worker
    hostname: dask-worker
    restart: always
    environment:
      - http_proxy=${http_proxy}
      - https_proxy=${https_proxy}
    command:
      [
        "dask",
        "worker",
        "--preload",
        "/opt/daskworkerinit.py",
        "--nthreads",
        "1",
        "--nworkers",
        "4",
        "--memory-limit",
        "3G",
        "tcp://scheduler:8786"
      ]
    volumes:
      - media_path:/media
      - symbols_path:/src/volatility3/volatility3/symbols
      - plugin_path:/src/volatility3/volatility3/plugins/custom
      - yara_path:/yara
      - cache_path:/root/.cache/volatility3
      - ./compose/local/__init__.py:/src/volatility3/volatility3/framework/constants/__init__.py
    env_file:
      - ./.envs/.local/.django
      - ./.envs/.local/.postgres
      - ./.envs/.local/.dask