infra/passwords/docker-compose.yml
2026-04-01 11:43:26 -04:00

77 lines
1.8 KiB
YAML

services:
# --- THE VAULT ---
vaultwarden:
image: vaultwarden/server:latest
container_name: vaultwarden
restart: always
environment:
- SIGNUPS_ALLOWED=false
- PUSH_ENABLED=false
volumes:
- ./data:/data
networks:
- pass-net
# --- VW METRICS EXPORTER (Tricked-dev) ---
vwmetrics:
image: ghcr.io/tricked-dev/vwmetrics:latest
container_name: vwmetrics
restart: always
environment:
# Use read-only mode for the sqlite database
- DATABASE_URL=sqlite:///data/db.sqlite3?mode=ro
- PORT=3040
- UPDATE_SECONDS=60
volumes:
- ./data:/data:ro # Mount the same data folder as read-only
ports:
- "3040:3040"
networks:
- pass-net
# --- KOMODO AGENT ---
komodo-periphery:
image: ghcr.io/moghtech/komodo-periphery:2
container_name: komodo-periphery
restart: always
environment:
PERIPHERY_CORE_ADDRESS: 100.80.179.128:9120
PERIPHERY_CONNECT_AS: Mystic-Passwords
PERIPHERY_ONBOARDING_KEY: O_dPWwdaJNO7q87kgvPE4hnjaLlcsu_O
PERIPHERY_SERVER_ENABLED: "true"
ports:
- "8120:8120"
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ./komodo:/config
- /proc:/proc:ro
networks:
- pass-net
# --- MONITORING ---
node-exporter:
image: prom/node-exporter:latest
container_name: node-exporter
restart: always
ports:
- "9100:9100"
networks:
- pass-net
cadvisor:
image: gcr.io/cadvisor/cadvisor:latest
container_name: cadvisor
restart: always
ports:
- "8080:8080"
volumes:
- /:/rootfs:ro
- /var/run:/var/run:ro
- /sys:/sys:ro
- /var/lib/docker/:/var/lib/docker:ro
networks:
- pass-net
networks:
pass-net:
driver: bridge