version: '3'

services:
  logs:
    image: graylog/graylog:5.0
    container_name: graylog
    hostname: logs
    entrypoint: "/usr/bin/tini -- wait-for-it search:9200 --  /docker-entrypoint.sh"
    volumes:
      - /root/graylog/data/graylog_data:/usr/share/graylog/data/data
      - /root/graylog/data/graylog_journal:/usr/share/graylog/data/journal
    networks:
      - proxy
      - backend
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.logs.entrypoints=http"
      - "traefik.http.routers.logs.rule=Host(`logs.office.kh3group.com`)"
      - "traefik.http.middlewares.logs-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.logs.middlewares=logs-https-redirect"
      - "traefik.http.routers.logs-secure.entrypoints=https"
      - "traefik.http.routers.logs-secure.rule=Host(`logs.office.kh3group.com`)||Host(`logs.kh3group.com`)"
      - "traefik.http.routers.logs-secure.tls=true"
      - "traefik.http.routers.logs-secure.service=logs"
      - "traefik.http.services.logs.loadbalancer.server.port=9000"
      - "traefik.docker.network=proxy"
    environment:
      - GRAYLOG_PASSWORD_SECRET=${GRAYLOG_PASSWORD_SECRET}
      - GRAYLOG_ROOT_PASSWORD_SHA2=${GRAYLOG_ROOT_PASSWORD_SHA2}
      - GRAYLOG_HTTP_BIND_ADDRESS=0.0.0.0:9000
      - GRAYLOG_HTTP_EXTERNAL_URI=http://logs.office.kh3group.com/
      - GRAYLOG_ELASTICSEARCH_HOSTS=http://search:9200
      - GRAYLOG_MONGODB_URI=mongodb://nosqldb:27017/graylog
      - GRAYLOG_ROOT_TIMEZONE=Africa/Accra
    healthcheck:
      test: [ "CMD", "curl", "-f", "http://127.0.0.1:9000" ]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 30s
    ports:
      - "5044:5044/tcp"   # Beats
      - "5140:5140/udp"   # Syslog
      - "5140:5140/tcp"   # Syslog
      - "5141:5141/udp"   # Syslog 2
      - "5141:5141/tcp"   # Syslog 2
      - "5142:5142/udp"   # Syslog 3
      - "5142:5142/tcp"   # Syslog 3
      - "5143:5143/udp"   # Syslog 4
      - "5143:5143/tcp"   # Syslog 4
      - "5144:5144/udp"   # Syslog 5
      - "5144:5144/tcp"   # Syslog 5
      - "5145:5145/udp"   # Syslog 6
      - "5145:5145/tcp"   # Syslog 6
      - "5146:5146/udp"   # Syslog 7
      - "5146:5146/tcp"   # Syslog 7
      - "5555:5555/tcp"   # RAW TCP
      - "5555:5555/udp"   # RAW TCP
      - "9000:9000/tcp"   # Server API
      - "12201:12201/tcp" # GELF TCP
      - "12201:12201/udp" # GELF UDP
      #- "10000:10000/tcp" # Custom TCP port
      #- "10000:10000/udp" # Custom UDP port
      - "13301:13301/tcp" # Forwarder data
      - "13302:13302/tcp" # Forwarder config

networks:
  backend:
    external: true
  proxy:
    external: true