SOARCA/docker-compose.yaml at development · COSSAS/SOARCA · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
version: "3.7"
services:
  mongodb_container:
    image: mongo:latest
    container_name: mongo_soarca_stack
    environment:
      MONGO_INITDB_ROOT_USERNAME: "root"
      MONGO_INITDB_ROOT_PASSWORD: "rootpassword"
    networks:
      - db-net
    volumes:
      - mongodb_data_container:/data/db

  cert-generator:
    image: alpine
    container_name: cert-generator
    volumes:
      - certs_data_containter:/certs
    environment:
      - DOMAIN=localhost
    command: >
      sh -c "
        apk add --no-cache openssl &&
        cd /certs &&
        openssl req -x509 -newkey rsa:4096 -keyout server.key -out server.crt -days 365 -nodes -subj '/CN=${DOMAIN}' &&
        chmod 644 server.key server.crt
      "

  soarca:
    build:
      dockerfile: Dockerfile
      args:
        VERSION: "${GIT_VERSION}"
    container_name: soarca_server
    volumes:
      - certs_data_containter:/app/certs
    environment:
      PORT: 8080
      ENABLE_TLS: "true"
      CERT_FILE: "/app/certs/server.crt"
      CERT_KEY_FILE: "/app/certs/server.key"
      SOARCA_ALLOWED_ORIGINS: "*"
      GIN_MODE: "release"
      MONGODB_URI: "mongodb://mongodb_container:27017"
      DATABASE_NAME: "soarca"
      DB_USERNAME: "root"
      DB_PASSWORD: "rootpassword"
      PLAYBOOK_API_LOG_LEVEL: trace
      DATABASE: "false"
      HTTP_SKIP_CERT_VALIDATION: false
      AUTH_ENABLED: false #OPTIONAL for OIDC Based auth
      OIDC_PROVIDER: "https://authentikuri:9443/application/o/soarca/"
      OIDC_CLIENT_ID: "some client ID"
      OIDC_SKIP_TLS_VERIFY: false
    ports:
      - 127.0.0.1:8080:8080
    depends_on:
      - mongodb_container
      - cert-generator

  loki:
    image: grafana/loki:3.0.0
    container_name: loki
    command: -config.file=/etc/loki/loki-config.yaml
    volumes:
      - ./deployments/docker/soarca/observability/loki-config.yaml:/etc/loki/loki-config.yaml:ro
      - loki_data_container:/loki
    ports:
      - 127.0.0.1:3100:3100

  alloy:
    image: grafana/alloy:latest
    container_name: alloy
    command: run /etc/alloy/config.alloy
    volumes:
      - ./deployments/docker/soarca/observability/alloy-config.alloy:/etc/alloy/config.alloy:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    depends_on:
      - loki

networks:
  db-net:

volumes:
  mongodb_data_container:
  certs_data_containter:
  loki_data_container: