heiDPI/docker-compose.yml at main · stefanDeveloper/heiDPI · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
services:
  producer:
    image: stefan96/heidpi-producer:latest
    container_name: heidpi_producer
    network_mode: host
    # platform: linux/amd64
    security_opt:
      - no-new-privileges
#    pids_limit: 8192
    restart: on-failure:5
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 32G
    environment:
      - HOSTNAME=test
      - TUNE_PARAM=max-reader-threads=4,max-flows-per-thread=65536,max-idle-flows-per-thread=2048,daemon-status-interval=15000000,flow-scan-interval=15000000,generic-max-idle-time=15000001,icmp-max-idle-time=15000001,udp-max-idle-time=15000001,tcp-max-idle-time=15000001,tcp-max-post-end-flow-time=5000000
      - MAX_BUFFERED_LINES=32768
      - JA3_URL=https://sslbl.abuse.ch/blacklist/ja3_fingerprints.csv
      - SSL_SHA1_URL=https://sslbl.abuse.ch/blacklist/sslblacklist.csv
    healthcheck:
      test: ["CMD-SHELL", "pgrep -f /root/nDPId || exit 1"]
      interval: 1m
      timeout: 10s
      retries: 3
      start_period: 30s


  consumer:
    build:
      context: .
      dockerfile: Dockerfile.consumer
    #image: stefan96/heidpi-consumer:latest
    container_name: heidpi_consumer
    # platform: linux/amd64
    volumes:
      - ./heidpi-logs:/var/log/:rw
      - ./config.yml:/usr/src/app/config.yml:ro
      # - .../GeoLite2-City.mmdb:/tmp/city.mmdb:ro
    network_mode: host
    security_opt:
      - no-new-privileges
#    pids_limit: 8192
    restart: on-failure:5
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 2G
    depends_on:
      producer:
        condition: service_healthy
    environment:
      - SHOW_DAEMON_EVENTS=1
      - SHOW_PACKET_EVENTS=1
      - SHOW_ERROR_EVENTS=1
      - SHOW_FLOW_EVENTS=1