docker-compose.yml

version: '3.8'

networks:
  monitoring:
    external:
      name: "host"
    attachable: true

volumes:
  vmagent_data:
  vmgateway_data:
  grafana-storage:
  caddy_data:
    external: true
  caddy_config:

services:
  # The services listed below are a part of the monitoring gateway
  #
  # grafana is a single instance installation of grafana to display the metrics in a dashboard format
  grafana:
    image: grafana/grafana-oss
    volumes:
      - grafana-storage:/var/lib/grafana
    networks:
      - monitoring
    environment:
      GF_SECURITY_ADMIN_PASSWORD__FILE: "/run/secrets/gf_admin_password"
      GF_DASHBOARDS_DEFAULT_HOME_DASHBOARD_PATH: "/etc/grafana/provisioning/dashboards.d/home.json"
      GF_SERVER_DOMAIN: "${MAIS_DOMAIN}"
      GF_SERVER_ROOT_URL: "https://${MIAS_DOMAIN}"
      MIAS_DOMAIN: ${MIAS_DOMAIN}
    secrets:
      - gf_admin_password
    configs:
      - source: gfautomaticdashboard
        target: /etc/grafana/provisioning/dashboards/automatic.yml
      - source: gfhomedashboard
        target: /etc/grafana/provisioning/dashboards.d/home.json
      - source: gfdatasource
        target: /etc/grafana/provisioning/datasources/automatic.yml
    ports:
      - target: 3000
        published: 3000
        protocol: tcp
        mode: host
    depends_on:
      - caddy
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.labels.monitoringrole == gateway
        max_replicas_per_node: 1
      resources:
        limits:
          memory: 1G

  # vmgateway is a single node "gateway" instance of victoriametrics.  Replication and multiple gateways are unsupported in this stack
  #
  # vmgateway only runs on nodes that have been labeled with monitoringrole set to gateway
  vmgateway:
    image: victoriametrics/victoria-metrics:v1.76.1
    volumes:
      - vmgateway_data:/opt/vmgateway/storage
    command:
      - '-promscrape.config=./prometheus.yml'
      - '-storageDataPath=/opt/vmgateway/storage'
      - '-httpListenAddr=0.0.0.0:8428'
    networks:
      - monitoring
    configs:
      - source: vmgateway
        target: /prometheus.yml
    ports:
      - target: 8428
        published: 8428
        protocol: tcp
        mode: host
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.labels.monitoringrole == gateway
        max_replicas_per_node: 1
      resources:
        limits:
          memory: 512M
  # caddyserver is a reverse proxy featuring automatic letsencrypt certificates.  It is used to expose the Grafana dashboard to the Internet.
  caddy:
    image: caddy:latest
    volumes:
      - caddy_data:/data
      - caddy_config:/config
    networks:
      - monitoring
    environment:
      MIAS_DOMAIN: ${MIAS_DOMAIN}
    ports:
      - target: 80
        published: 80
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: tcp
        mode: host
    configs:
      - source: caddy
        target: /etc/caddy/Caddyfile
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.labels.monitoringrole == gateway
        max_replicas_per_node: 1
      resources:
        limits:
          memory: 512M

  # The services listed below are part of the monitoring agent
  #
  # vmagent is a bundled multi-service image that scrapes metrics exported from node-exporter and then pushes them to the remote victory-metrics gateway node
  vmagent:
    image: keith/mias-agent-host:v0.0.1
    volumes:
      - vmagent_data:/opt/vmagent/storage
      - /proc:/host/proc:ro
      - /sys:/host/sys:ro
      - /:/rootfs:ro
    environment:
      # We replace the "job" value to the friendlier node hostname so that it appears as such in the Grafana dashboard
      VMAGENT_JOB: "{{.Node.Hostname}}"
      MIAS_DOMAIN: ${MIAS_DOMAIN}
    depends_on:
      - vmgateway
    networks:
      - monitoring
    configs:
      - source: vmagent
        target: /project/prometheus.yml
    deploy:
      mode: global
      resources:
        limits:
          memory: 512M
configs:
  vmagent:
    template_driver: golang
    file: ./vmagent/configs/prometheus.yml.tmpl
    external: false
  vmgateway:
    template_driver: golang
    file: ./vmgateway/configs/prometheus.yml.tmpl
    external: false
  gfautomaticdashboard:
    template_driver: golang
    file: ./vmgateway/configs/provisioning/dashboards/automatic.yml
    external: false
  gfhomedashboard:
    template_driver: golang
    file: ./vmgateway/configs/provisioning/dashboards.d/home.json
    external: false
  gfdatasource:
    template_driver: golang
    file: ./vmgateway/configs/provisioning/datasources/automatic.yml
    external: false
  caddy:
    template_driver: golang
    file: ./caddy/configs/Caddyfile.tmpl
    external: false

secrets:
  gf_admin_password:
    file: ./vmgateway/secrets/gf_admin_password.txt