This repository was archived by the owner on Jul 1, 2025. It is now read-only.
forked from sebtiem/dependency-track-demo
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathdocker-compose.yml
More file actions
159 lines (155 loc) · 6.13 KB
/
Copy pathdocker-compose.yml
File metadata and controls
159 lines (155 loc) · 6.13 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
#####################################################
# This Docker Compose file contains two services
# Dependency-Track API Server
# Dependency-Track FrontEnd
#####################################################
services:
apiserver:
image: dependencytrack/apiserver
depends_on:
postgres:
condition: service_healthy
# The Dependency-Track container can be configured using any of the
# available configuration properties defined in:
# https://docs.dependencytrack.org/getting-started/configuration/
# All properties are upper case with periods replaced by underscores.
#
# Database Properties
# ALPINE_DATABASE_MODE: "external"
# ALPINE_DATABASE_URL: "jdbc:postgresql://postgres10:5432/dtrack"
# ALPINE_DATABASE_DRIVER: "org.postgresql.Driver"
# ALPINE_DATABASE_USERNAME: "dtrack"
# ALPINE_DATABASE_PASSWORD: "changeme"
# ALPINE_DATABASE_POOL_ENABLED: "true"
# ALPINE_DATABASE_POOL_MAX_SIZE: "20"
# ALPINE_DATABASE_POOL_MIN_IDLE: "10"
# ALPINE_DATABASE_POOL_IDLE_TIMEOUT: "300000"
# ALPINE_DATABASE_POOL_MAX_LIFETIME: "600000"
#
# Optional LDAP Properties
# ALPINE_LDAP_ENABLED: "true"
# ALPINE_LDAP_SERVER_URL: "ldap://ldap.example.com:389"
# ALPINE_LDAP_BASEDN: "dc=example,dc=com"
# ALPINE_LDAP_SECURITY_AUTH: "simple"
# ALPINE_LDAP_BIND_USERNAME: ""
# ALPINE_LDAP_BIND_PASSWORD: ""
# ALPINE_LDAP_AUTH_USERNAME_FORMAT: "%s@example.com"
# ALPINE_LDAP_ATTRIBUTE_NAME: "userPrincipalName"
# ALPINE_LDAP_ATTRIBUTE_MAIL: "mail"
# ALPINE_LDAP_GROUPS_FILTER: "(&(objectClass=group)(objectCategory=Group))"
# ALPINE_LDAP_USER_GROUPS_FILTER: "(member:1.2.840.113556.1.4.1941:={USER_DN})"
# ALPINE_LDAP_GROUPS_SEARCH_FILTER: "(&(objectClass=group)(objectCategory=Group)(cn=*{SEARCH_TERM}*))"
# ALPINE_LDAP_USERS_SEARCH_FILTER: "(&(objectClass=user)(objectCategory=Person)(cn=*{SEARCH_TERM}*))"
# ALPINE_LDAP_USER_PROVISIONING: "false"
# ALPINE_LDAP_TEAM_SYNCHRONIZATION: "false"
#
# Optional OpenID Connect (OIDC) Properties
# ALPINE_OIDC_ENABLED: "true"
# ALPINE_OIDC_ISSUER: "https://auth.example.com/auth/realms/example"
# ALPINE_OIDC_CLIENT_ID: ""
# ALPINE_OIDC_USERNAME_CLAIM: "preferred_username"
# ALPINE_OIDC_TEAMS_CLAIM: "groups"
# ALPINE_OIDC_USER_PROVISIONING: "true"
# ALPINE_OIDC_TEAM_SYNCHRONIZATION: "true"
#
# Optional HTTP Proxy Settings
# ALPINE_HTTP_PROXY_ADDRESS: "proxy.example.com"
# ALPINE_HTTP_PROXY_PORT: "8888"
# ALPINE_HTTP_PROXY_USERNAME: ""
# ALPINE_HTTP_PROXY_PASSWORD: ""
# ALPINE_NO_PROXY: ""
#
# Optional HTTP Outbound Connection Timeout Settings. All values are in seconds.
# ALPINE_HTTP_TIMEOUT_CONNECTION: "30"
# ALPINE_HTTP_TIMEOUT_SOCKET: "30"
# ALPINE_HTTP_TIMEOUT_POOL: "60"
#
# Optional Cross-Origin Resource Sharing (CORS) Headers
# ALPINE_CORS_ENABLED: "true"
# ALPINE_CORS_ALLOW_ORIGIN: "*"
# ALPINE_CORS_ALLOW_METHODS: "GET, POST, PUT, DELETE, OPTIONS"
# ALPINE_CORS_ALLOW_HEADERS: "Origin, Content-Type, Authorization, X-Requested-With, Content-Length, Accept, Origin, X-Api-Key, X-Total-Count, *"
# ALPINE_CORS_EXPOSE_HEADERS: "Origin, Content-Type, Authorization, X-Requested-With, Content-Length, Accept, Origin, X-Api-Key, X-Total-Count"
# ALPINE_CORS_ALLOW_CREDENTIALS: "true"
# ALPINE_CORS_MAX_AGE: "3600"
#
# Optional logging configuration
# LOGGING_LEVEL: "INFO"
# LOGGING_CONFIG_PATH: "logback.xml"
#
# Optional metrics properties
# ALPINE_METRICS_ENABLED: "true"
# ALPINE_METRICS_AUTH_USERNAME: ""
# ALPINE_METRICS_AUTH_PASSWORD: ""
#
# Optional environmental variables to enable default notification publisher templates override and set the base directory to search for templates
# DEFAULT_TEMPLATES_OVERRIDE_ENABLED: "false"
# DEFAULT_TEMPLATES_OVERRIDE_BASE_DIRECTORY: "/data"
#
# Optional configuration for the Snyk analyzer
# SNYK_THREAD_BATCH_SIZE: "10"
#
# Optional environmental variables to provide more JVM arguments to the API Server JVM, i.e. "-XX:ActiveProcessorCount=8"
# EXTRA_JAVA_OPTIONS: ""
environment:
ALPINE_DATABASE_MODE: "external"
ALPINE_DATABASE_URL: "jdbc:postgresql://postgres:5432/dtrack"
ALPINE_DATABASE_DRIVER: "org.postgresql.Driver"
ALPINE_DATABASE_USERNAME: "dtrack"
ALPINE_DATABASE_PASSWORD: "dtrack"
EXTRA_JAVA_OPTIONS: "-Xmx4G"
deploy:
resources:
limits:
memory: 12288m
reservations:
memory: 8192m
restart_policy:
condition: on-failure
ports:
- '8081:8080'
healthcheck:
test: curl --fail -s http://127.0.0.1:8081/health || exit 1
interval: 1500s
start_period: 6000s
timeout: 10s
retries: 3
volumes:
- 'dtrack-data:/data'
restart: unless-stopped
frontend:
image: dependencytrack/frontend
environment:
# The base URL of the API server.
# NOTE:
# * This URL must be reachable by the browsers of your users.
# * The frontend container itself does NOT communicate with the API server directly, it just serves static files.
# * When deploying to dedicated servers, please use the external IP or domain of the API server.
API_BASE_URL: "https://${PUBLIC_DOMAIN}/api"
# OIDC_ISSUER: ""
# OIDC_CLIENT_ID: ""
# OIDC_SCOPE: ""
# OIDC_FLOW: ""
# OIDC_LOGIN_BUTTON_TEXT: ""
# volumes:
# - "/host/path/to/config.json:/app/static/config.json"
ports:
- "8080:8080"
restart: unless-stopped
postgres:
image: postgres:17-alpine
environment:
POSTGRES_DB: "dtrack"
POSTGRES_USER: "dtrack"
POSTGRES_PASSWORD: "dtrack"
PGDATA: "/var/lib/postgresql/data/db-files"
healthcheck:
test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
interval: 5s
timeout: 3s
retries: 3
volumes:
- "/dependencytrack-data:/var/lib/postgresql/data"
restart: unless-stopped
volumes:
dtrack-data: {}