edr-graph/docker-compose.yml at main · ticfinack/edr-graph · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
services:
  neo4j:
    image: neo4j:5-community
    ports:
      - "7474:7474"   # Neo4j Browser
      - "7687:7687"   # Bolt protocol
    environment:
      - NEO4J_AUTH=neo4j/${NEO4J_PASSWORD}
      - NEO4J_PLUGINS=["apoc"]
    volumes:
      - neo4j_data:/data
      - neo4j_logs:/logs
    healthcheck:
      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:7474 || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 30s

  fleet-server:
    build:
      context: .
      dockerfile: server/Dockerfile
    ports:
      - "50051:50051"  # gRPC (agent connections)
      - "8080:8080"    # Fleet dashboard
    environment:
      - NEO4J_URI=bolt://neo4j:7687
      - NEO4J_USER=neo4j
      - NEO4J_PASSWORD=${NEO4J_PASSWORD}
      - ADMIN_USER=${ADMIN_USER:-admin}
      - ADMIN_PASSWORD=${ADMIN_PASSWORD}
      - JWT_SECRET=${JWT_SECRET}
      - SETTINGS_DB_PATH=/app/data/settings.db
      - DEEPINFRA_API_KEY=${DEEPINFRA_API_KEY}
      # Uncomment for mTLS:
      # - TLS_CA_CERT=/app/certs/ca.pem
      # - TLS_SERVER_CERT=/app/certs/server.pem
      # - TLS_SERVER_KEY=/app/certs/server-key.pem
    depends_on:
      neo4j:
        condition: service_healthy
    volumes:
      - ./certs:/app/certs:ro
      - fleet_settings:/app/data

volumes:
  neo4j_data:
  neo4j_logs:
  fleet_settings: