101 lines
2.5 KiB
YAML
101 lines
2.5 KiB
YAML
|
version: '3.8'
|
||
|
|
|
||
|
|
# Multi-User Mode - Add collaboration features
|
||
|
|
# Usage: docker-compose -f docker-compose.yaml -f docker-compose/docker-compose.multi-user.yaml up
|
||
|
|
|
||
|
|
services:
|
||
|
|
orchestrator:
|
||
|
|
environment:
|
||
|
|
- PROVISIONING_MODE=multi-user
|
||
|
|
- ORCHESTRATOR_MAX_CONCURRENT_TASKS=10
|
||
|
|
- ORCHESTRATOR_AUTH_ENABLED=true
|
||
|
|
deploy:
|
||
|
|
resources:
|
||
|
|
limits:
|
||
|
|
cpus: '2.0'
|
||
|
|
memory: 2048M
|
||
|
|
|
||
|
|
control-center:
|
||
|
|
environment:
|
||
|
|
- PROVISIONING_MODE=multi-user
|
||
|
|
- CONTROL_CENTER_AUTH_REQUIRED=true
|
||
|
|
- CONTROL_CENTER_MULTI_USER=true
|
||
|
|
- CONTROL_CENTER_SESSION_MANAGEMENT=true
|
||
|
|
deploy:
|
||
|
|
resources:
|
||
|
|
limits:
|
||
|
|
cpus: '1.0'
|
||
|
|
memory: 1024M
|
||
|
|
|
||
|
|
# Enable Gitea for source control
|
||
|
|
gitea:
|
||
|
|
profiles:
|
||
|
|
- multi-user
|
||
|
|
environment:
|
||
|
|
- GITEA__service__DISABLE_REGISTRATION=${GITEA_DISABLE_REGISTRATION:-false}
|
||
|
|
- GITEA__service__REQUIRE_SIGNIN_VIEW=${GITEA_REQUIRE_SIGNIN:-false}
|
||
|
|
- GITEA__repository__ENABLE_PUSH_CREATE_USER=true
|
||
|
|
deploy:
|
||
|
|
resources:
|
||
|
|
limits:
|
||
|
|
cpus: '${GITEA_CPU_LIMIT:-1000m}'
|
||
|
|
memory: ${GITEA_MEMORY_LIMIT:-1024M}
|
||
|
|
|
||
|
|
# Enable PostgreSQL for shared database
|
||
|
|
postgres:
|
||
|
|
profiles:
|
||
|
|
- multi-user
|
||
|
|
image: postgres:16-alpine
|
||
|
|
container_name: provisioning-postgres
|
||
|
|
environment:
|
||
|
|
- POSTGRES_DB=${POSTGRES_DB:-provisioning}
|
||
|
|
- POSTGRES_USER=${POSTGRES_USER:-provisioning}
|
||
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
||
|
|
volumes:
|
||
|
|
- postgres-data:/var/lib/postgresql/data
|
||
|
|
healthcheck:
|
||
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-provisioning}"]
|
||
|
|
interval: 10s
|
||
|
|
timeout: 5s
|
||
|
|
retries: 5
|
||
|
|
restart: unless-stopped
|
||
|
|
networks:
|
||
|
|
- provisioning-net-backend
|
||
|
|
deploy:
|
||
|
|
resources:
|
||
|
|
limits:
|
||
|
|
cpus: '${POSTGRES_CPU_LIMIT:-2000m}'
|
||
|
|
memory: ${POSTGRES_MEMORY_LIMIT:-2048M}
|
||
|
|
|
||
|
|
# Update OCI registry with authentication
|
||
|
|
oci-registry:
|
||
|
|
environment:
|
||
|
|
- ZOT_AUTH_ENABLED=true
|
||
|
|
- ZOT_EXTENSIONS_SYNC=true
|
||
|
|
- ZOT_EXTENSIONS_SEARCH=true
|
||
|
|
volumes:
|
||
|
|
- ./oci-registry/htpasswd:/etc/zot/htpasswd:ro
|
||
|
|
deploy:
|
||
|
|
resources:
|
||
|
|
limits:
|
||
|
|
cpus: '1.0'
|
||
|
|
memory: 1024M
|
||
|
|
|
||
|
|
extension-registry:
|
||
|
|
environment:
|
||
|
|
- PROVISIONING_MODE=multi-user
|
||
|
|
- AUTH_REQUIRED=true
|
||
|
|
- USER_MANAGEMENT_ENABLED=true
|
||
|
|
depends_on:
|
||
|
|
postgres:
|
||
|
|
condition: service_healthy
|
||
|
|
deploy:
|
||
|
|
resources:
|
||
|
|
limits:
|
||
|
|
cpus: '0.5'
|
||
|
|
memory: 512M
|
||
|
|
|
||
|
|
volumes:
|
||
|
|
postgres-data:
|
||
|
|
driver: local
|