passage/docker-compose.yml at master · hightouchio/passage · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
version: "3.9"
services:
  # passage is the tunnel service
  passage:
    build: ./
    command: server
    environment:
      PASSAGE_ENV: dev
      PASSAGE_LOG_LEVEL: debug
      PASSAGE_HTTP_ADDR: 0.0.0.0:6000
      PASSAGE_API_ENABLED: 'true'
      PASSAGE_TUNNEL_NORMAL_ENABLED: 'true'

      # Configure keystore via minio
      AWS_ACCESS_KEY_ID: 'passage'
      AWS_SECRET_ACCESS_KEY: 'passage123'
      PASSAGE_KEYSTORE_S3_BUCKET_NAME: 'keystore'
      PASSAGE_KEYSTORE_S3_BUCKET_REGION: 'us-east-1'
      PASSAGE_KEYSTORE_S3_ENDPOINT: 'http://minio:9079'
      PASSAGE_KEYSTORE_S3_DISABLE_SSL: 'true'
      PASSAGE_KEYSTORE_S3_FORCE_PATH_STYLE: 'true'

      PGHOST: postgres
      PGPORT: 5432
      PGUSER: passage
      PGDBNAME: passage
      PGSSLMODE: disable
    ports:
      - "6000:6000"
    networks:
      - passage_dev
    depends_on:
      postgres:
        condition: service_healthy
    healthcheck:
      test: "curl -f http://localhost:6000/healthcheck"

  # Passage uses Postgres as the datastore for the control plane.
  postgres:
    image: postgres:11.6
    restart: always
    environment:
      POSTGRES_USER: "passage"
      POSTGRES_DB: "passage"
      POSTGRES_HOST_AUTH_METHOD: trust
    ports:
      - '6432:5432'
    networks:
      - passage_dev
    healthcheck:
      test: "pg_isready -U passage -d passage"

  # Passage uses Minio in development as a keystore.
  minio:
    image: minio/minio:RELEASE.2021-12-20T22-07-16Z
    environment:
      MINIO_ROOT_USER: passage
      MINIO_ROOT_PASSWORD: passage123
    networks:
      - passage_dev
    ports:
      - "9079:9079"
      - "9080:9080"
    volumes:
      - minio:/data
    entrypoint:
      - "sh"
      - "-c"
      - "mkdir -p /data/keystore && minio server --address \":9079\" --console-address \":9080\" /data"
    restart: always

  # Passage uses Consul for service discovery
  consul:
    image: consul:1.15
    networks:
      - passage_dev
    ports:
      - "8600:8600"
      - "8500:8500"
    restart: always

volumes:
  # Persistent volume for Minio keystore.
  minio:

networks:
  passage_dev:
    name: passage_dev