zammad/compose.yml

---
version: "3.8"

x-shared:
  zammad-service: &zammad-service
    environment: &zammad-environment
      MEMCACHE_SERVERS: zammad-memcached:11211
      POSTGRESQL_DB: zammad_production
      POSTGRESQL_HOST: zammad-postgresql
      POSTGRESQL_USER: zammad
      POSTGRESQL_PASS_FILE: /run/secrets/db_password
      POSTGRESQL_PORT: 5432
      POSTGRESQL_OPTIONS: ?pool=50
      POSTGRESQL_DB_CREATE:
      REDIS_URL: redis://zammad-redis:6379
      # Backup settings
      BACKUP_DIR: "/var/tmp/zammad"
      BACKUP_TIME: "${BACKUP_TIME:-03:00}"
      #BACKUP_SLEEP: 86400
      HOLD_DAYS: 10
      TZ: "${TZ:-Europe/Berlin}"
      # Allow passing in these variables via .env:
      AUTOWIZARD_JSON:
      AUTOWIZARD_RELATIVE_PATH:
      ELASTICSEARCH_ENABLED:
      ELASTICSEARCH_HOST:
      ELASTICSEARCH_PORT:
      ELASTICSEARCH_SCHEMA:
      ELASTICSEARCH_NAMESPACE:
      ELASTICSEARCH_REINDEX:
      ELASTICSEARCH_SSL_VERIFY:
      NGINX_PORT:
      NGINX_SERVER_NAME:
      NGINX_SERVER_SCHEME: https
      RAILS_TRUSTED_PROXIES:
      ZAMMAD_WEB_CONCURRENCY:
      ZAMMAD_SESSION_JOBS:
      ZAMMAD_PROCESS_SCHEDULED:
      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS:
      TEXT_MUTED: "${TEXT_MUTED:-hsl(213, 3%, 64%)}"
      MENU_TEXT: "${MENU_TEXT:-hsl(0, 0%, 74%)}"
      BACKGROUND_1: "${BACKGROUND_1:-hsl(231, 9%, 16%)}"
      BACKGROUND_2: "${BACKGROUND_2:-hsl(233, 9%, 19%)}"
      PRODUCT_NAME:
      ORGANIZATION:
      LOCALE:
      ADMIN_EMAIL:
      SMTP_HOST:
      SMTP_LOGIN:
      SMTP_PORT:
      DOMAIN:
      SSO_PROVIDER_DOMAIN:
      IDP_SSO_TARGET_URL:
      IDP_SLO_SERVICE_URL:
    image: ghcr.io/zammad/zammad:6.3.1-95
    deploy:
      restart_policy:
        condition: on-failure
    volumes:
      - zammad-storage:/opt/zammad/storage
      #old: - zammad-data:/opt/zammad
    depends_on:
      - zammad-memcached
      - zammad-postgresql
      - zammad-redis
    entrypoint: /custom-entrypoint.sh
    configs:
        - source: entrypoint
          target: /custom-entrypoint.sh
          mode: 0555
        - source: auto_wizard
          target: /opt/zammad/contrib/auto_wizard.json
        - source: custom_style
          target: /opt/zammad/app/assets/stylesheets/custom/custom_style.css
    secrets:
      - db_password
      - smtp_password
      - admin_password

services:
  zammad-backup:
    <<: *zammad-service
    command: ["zammad-backup"]
    volumes:
      - zammad-backup:/var/tmp/zammad
      - zammad-storage:/opt/zammad/storage:ro
      #old: - zammad-data:/opt/zammad
    user: 0:0
    deploy:
      labels:
        - "backupbot.backup=true"
        - "backupbot.backup.path=/var/tmp/zammad"

  zammad-elasticsearch:
    image: bitnami/elasticsearch:8.14.3
    deploy:
      restart_policy:
        condition: on-failure
    volumes:
      - elasticsearch-data:/bitnami/elasticsearch/data
    environment:
      - discovery.type=single-node
    healthcheck:
      test: "/opt/bitnami/scripts/elasticsearch/healthcheck.sh"
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 5m
    deploy:
      resources:
        limits:
          memory: 4G
        reservations:
          memory: 2G
  
  zammad-init:
    <<: *zammad-service
    command: ["zammad-init"]
    depends_on:
      - zammad-postgresql
    user: 0:0

  zammad-memcached:
    command: memcached -m 256M
    image: memcached:1.6.29-alpine
    healthcheck:
      test: 'echo "version" | nc -vn -w 1 127.0.0.1 11211'
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 5m
    deploy:
      restart_policy:
        condition: on-failure

  app:
    <<: *zammad-service
    command: ["zammad-nginx"]
    #expose:
    #  - 8080
    #ports:
    #  - "8080:8080"
    depends_on:
      - zammad-railsserver
    networks:
      - proxy
      - default
    deploy:
      labels:
        - "traefik.enable=true"
        - "traefik.docker.network=proxy"
        - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=8080"
        - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
        - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
        - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
        - "coop-cloud.${STACK_NAME}.version=1.0.2+6.3.1-95"
        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080"]
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 5m

  zammad-postgresql:
    image: postgres:15.7-alpine
    environment:
      POSTGRES_DB: zammad_production
      POSTGRES_USER: zammad
      POSTGRES_PASSWORD_FILE: /run/secrets/db_password
    deploy:
      restart_policy:
        condition: on-failure
    volumes:
      - postgresql-data:/var/lib/postgresql/data
     # Backup Restore
     #- zammad-backup:/var/tmp/zammad:ro
    secrets:
      - db_password
    healthcheck:
      test: ["CMD", "pg_isready", "-U", "zammad"]
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 2m

  zammad-railsserver:
    <<: *zammad-service
    command: ["zammad-railsserver"]
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000"]
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 5m


  zammad-redis:
    image: redis:7.2.5-alpine
    deploy:
      restart_policy:
        condition: on-failure
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping | grep PONG"]
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 1m

  zammad-scheduler:
    <<: *zammad-service
    command: ["zammad-scheduler"]
    healthcheck:
      test: 'ps x | grep "[b]ackground-worker.rb"'
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 5m

  zammad-websocket:
    <<: *zammad-service
    command: ["zammad-websocket"]
    healthcheck:
      test: 'ruby -rsocket -e "s = TCPSocket.new(''localhost'', 6042); s.close"'
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 5m

volumes:
  elasticsearch-data:
  postgresql-data:
  redis-data:
  zammad-backup:
  zammad-storage:

networks:
  default:
  proxy:
    external: true

configs:
  entrypoint:
    name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_VERSION}
    file: entrypoint.sh
  auto_wizard:
    name: ${STACK_NAME}_auto_wizard_${AUTO_WIZARD_VERSION}
    file: auto_wizard.json.tmpl
    template_driver: golang
  custom_style:
    name: ${STACK_NAME}_custom_style_${CUSTOM_STYLE_VERSION}
    file: custom_style.css.tmpl
    template_driver: golang

secrets:
  db_password:
    external: true
    name: ${STACK_NAME}_db_password_${SECRET_DB_PASSWORD_VERSION}
  smtp_password:
    external: true
    name: ${STACK_NAME}_smtp_password_${SECRET_SMTP_PASSWORD_VERSION}
  admin_password:
    external: true
    name: ${STACK_NAME}_admin_password_${SECRET_ADMIN_PASSWORD_VERSION}