This page provides YAML configurations for services I often use via a Docker Compose file usually as part of bringing up a development enviornment.
Overview
Some overarching rules for the following manifests are:
All usernames will be user unless setting it as such is impossible
All passwords will be password unless setting it as such is impossible
Persistence for data is enabled by default will be on local disk at a directory ./data and will follow the image's recommended configuration path
Configuration for services is done via environment variables as far as possible
Configuraton for services which have to be via file will be on local disk at a directory ./config/%SERVICE_NAME%/*
Ports will always be forwarded from container to host AS-IS, this means if you have another instance of the same service running locally, the port will fail to listen on the host network. Configure as needed
# security configurations as documented at https://redis.io/topics/security
bind 0.0.0.0
rename-command CONFIG ""
# disable default user
requirepass password
user default off -@all
# setup appserver user
# to generate the password, run `printf -- 'password' | sha256sum | cut -f 1 -d ' '`
# the following password (after the '#' character) is the sha256 of "password" without the quotes
user user on ~* +ping +@read +@write +@set +@list #5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8
Rundeck
version: "3.7"
services:
rundeck:
# image reference: https://hub.docker.com/r/rundeck/rundeck
image: rundeck/rundeck:3.3.11
# environment reference: https://docs.rundeck.com/docs/administration/configuration/docker.html
environment:
RUNDECK_GRAILS_URL: http://localhost:4440
RUNDECK_SECURITY_HTTPHEADERS_ENABLED: "false"
ports: ["4440:4440"]
volumes: # [] # uncomment this and comment below to remove persistence
# you will have to run `sudo chmod 777 ./.data/rundeck/home/rundeck/server/data`
- ./.data/rundeck/home/rundeck/server/data:/home/rundeck/server/data