diff --git a/README.md b/README.md index be4eacb..751e2a6 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,8 @@ # netdata -> One line description of the recipe +> System monitoring and observability (alternative to Prometheus & Grafana) + +TODO: authentication diff --git a/compose.yml b/compose.yml index a2c3805..0674315 100644 --- a/compose.yml +++ b/compose.yml @@ -1,9 +1,34 @@ --- version: "3.8" + +version: "3.8" services: app: - image: nginx:1.20.0 + image: netdata/netdata + # container_name: netdata + hostname: ${DOMAIN} + pid: host + network_mode: host + restart: unless-stopped + cap_add: + - SYS_PTRACE + - SYS_ADMIN + security_opt: + - apparmor:unconfined + volumes: + - netdataconfig:/etc/netdata + - netdatalib:/var/lib/netdata + - netdatacache:/var/cache/netdata + - /etc/passwd:/host/etc/passwd:ro + - /etc/group:/host/etc/group:ro + - /etc/localtime:/etc/localtime:ro + - /proc:/host/proc:ro + - /sys:/host/sys:ro + - /etc/os-release:/host/etc/os-release:ro + - /var/log:/host/var/log:ro + - /var/run/docker.sock:/var/run/docker.sock:ro + - /run/dbus:/run/dbus:ro # for systemd units networks: - proxy deploy: @@ -11,7 +36,7 @@ services: condition: on-failure labels: - "traefik.enable=true" - - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=80" + - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=19999" - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})" - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure" - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}" @@ -20,13 +45,17 @@ services: #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true" #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}" - "coop-cloud.${STACK_NAME}.version=" - healthcheck: - test: ["CMD", "curl", "-f", "http://localhost"] + healthcheck: # TODO: see https://github.com/netdata/netdata/blob/master/packaging/docker/README.md#health-checks + test: ["CMD", "curl", "-f", "http://localhost:19999"] interval: 30s timeout: 10s retries: 10 start_period: 1m - +volumes: + netdataconfig: + netdatalib: + netdatacache: + networks: proxy: external: true