docker.gateway.yaml

networks:
  ferrum:
  fg-base_ferrum:
    external: true

volumes:
  ferrum:
  lmdb:

services:
  prepare:
    image: alpine:3.17
    labels:
      FerrumGatewayId: "??GATEWAY_ID"
    command:
      - /bin/sh
      - -c
      - |
        CONF_FILE=/data/conf
        if [ ! -f $$CONF_FILE ];then
          echo "file does not exits"
          echo "FerrumGatewayId: "??GATEWAY_ID""> $$CONF_FILE
        fi
    networks:
      - ferrum
    volumes:
      - ferrum:/data
    profiles:
      - worker


  server-quic:
    image: "??PRIVATE_REGISTRY/ferrumgate/secure.server.quic:1.1.0"
    labels:
      FerrumGatewayId: "??GATEWAY_ID"
    restart: always
    ports:
      - "??SSH_PORT:9999/tcp"
      - "??SSH_PORT:9999/udp"
    environment:
      - REDIS_HOST=${REDIS_PROXY_HOST}
      - REDIS_PASS=${REDIS_PASS}
      - PORT=9999
      - GATEWAY_ID=??GATEWAY_ID
    cap_add:
      - NET_ADMIN
    extra_hosts:
      - "registry.ferrumgate.zero:192.168.88.40"
    deploy:
      mode: global
      restart_policy:
        delay: 5s
    depends_on:
      - prepare
    volumes:
      - /dev/net/tun:/dev/net/tun
      - /dev/urandom:/dev/urandom
      - ferrum:/etc/ferrumgate
    networks:
      - ferrum
      - fg-base_ferrum
    logging:
      driver: local
    profiles:
      - worker

  admin:
    image: "??PRIVATE_REGISTRY/ferrumgate/job.admin:2.2.0"
    labels:
      FerrumGatewayId: "??GATEWAY_ID"
    restart: always
    privileged: true
    environment:
      - MODE=gateway
      - ROLES=${ROLES}
      - REDIS_HOST=${REDIS_PROXY_HOST}
      - REDIS_PASS=${REDIS_PASS}
      - REDIS_LOCAL_HOST=${REDIS_LOCAL_HOST}
      - REDIS_LOCAL_PASS=${REDIS_LOCAL_PASS}
      - REDIS_INTEL_HOST=${REDIS_INTEL_PROXY_HOST}
      - REDIS_INTEL_PASS=${REDIS_INTEL_PASS}
      - FERRUM_IO_IMAGE=??PRIVATE_REGISTRY/ferrumgate/ferrum.io:1.6.0
      - ENCRYPT_KEY=${ENCRYPT_KEY}
      - GATEWAY_ID=??GATEWAY_ID
      - NODE_ID=${NODE_ID}
      - ES_HOST=${ES_PROXY_HOST}
      - ES_USER=${ES_USER}
      - ES_PASS=${ES_PASS}
      - LOG_LEVEL=${LOG_LEVEL}
      - SYSLOG_HOST=log:9292
      - DB_FOLDER=/var/lib/ferrumgate/db
    depends_on:
      - prepare
      - server-quic
    deploy:
      mode: global
      restart_policy:
        delay: 5s
    volumes:
      - ferrum:/etc/ferrumgate
      - lmdb:/var/lib/ferrumgate
      - /etc/docker:/etc/docker
      - /var/run/docker.sock:/var/run/docker.sock
    network_mode: service:server-quic
    logging:
      driver: local
    profiles:
      - worker