feat(demo): add complete TSYS developer support stack demo implementation
Add full demo environment with 13 services across 4 categories: - Infrastructure: Homepage, Docker Socket Proxy, Pi-hole, Portainer - Monitoring: InfluxDB, Grafana - Documentation: Draw.io, Kroki - Developer Tools: Atomic Tracker, ArchiveBox, Tube Archivist, Wakapi, MailHog, Atuin Includes: - Docker Compose templates with dynamic environment configuration - Deployment orchestration scripts with user ID detection - Comprehensive test suite (unit, integration, e2e) - Pre-deployment validation with yamllint, shellcheck - Full documentation (PRD, AGENTS, README) - Service configurations for all components All services configured for demo purposes with: - Dynamic UID/GID mapping - Docker socket proxy security - Health checks and monitoring - Service discovery via Homepage labels Ports allocated 4000-4099 range with sequential assignment. 💘 Generated with Crush Assisted-by: GLM-4.7 via Crush <crush@charm.land>
This commit is contained in:
445
demo/docker-compose.yml
Normal file
445
demo/docker-compose.yml
Normal file
@@ -0,0 +1,445 @@
|
||||
---
|
||||
# TSYS Developer Support Stack - Docker Compose Template
|
||||
# Version: 1.0
|
||||
# Purpose: Demo deployment with dynamic configuration
|
||||
# ⚠️ DEMO CONFIGURATION ONLY - NOT FOR PRODUCTION
|
||||
|
||||
networks:
|
||||
tsysdevstack-supportstack-demo-network:
|
||||
driver: bridge
|
||||
ipam:
|
||||
config:
|
||||
- subnet: 192.168.3.0/24
|
||||
gateway: 192.168.3.1
|
||||
|
||||
volumes:
|
||||
tsysdevstack-supportstack-demo_homepage_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_pihole_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_portainer_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_influxdb_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_grafana_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_drawio_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_kroki_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_atomictracker_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_archivebox_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_tubearchivist_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_wakapi_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_mailhog_data:
|
||||
driver: local
|
||||
tsysdevstack-supportstack-demo_atuin_data:
|
||||
driver: local
|
||||
|
||||
services:
|
||||
# Docker Socket Proxy - Security Layer
|
||||
docker-socket-proxy:
|
||||
image: tecnativa/docker-socket-proxy:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-docker-socket-proxy"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
environment:
|
||||
- CONTAINERS=1
|
||||
- IMAGES=1
|
||||
- NETWORKS=1
|
||||
- VOLUMES=1
|
||||
- EXEC=0
|
||||
- PRIVILEGED=0
|
||||
- SERVICES=0
|
||||
- TASKS=0
|
||||
- SECRETS=0
|
||||
- CONFIGS=0
|
||||
- PLUGINS=0
|
||||
labels:
|
||||
homepage.group: "Infrastructure"
|
||||
homepage.name: "Docker Socket Proxy"
|
||||
homepage.icon: "docker"
|
||||
homepage.href: "http://localhost:4005"
|
||||
homepage.description: "Secure proxy for Docker socket access"
|
||||
|
||||
# Homepage - Central Dashboard
|
||||
homepage:
|
||||
image: ghcr.io/gethomepage/homepage:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-homepage"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4000:3000"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_homepage_data:/app/config
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Developer Tools"
|
||||
homepage.name: "Homepage"
|
||||
homepage.icon: "homepage"
|
||||
homepage.href: "http://localhost:4000"
|
||||
homepage.description: "Central dashboard for service discovery"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:3000"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# Pi-hole - DNS Management
|
||||
pihole:
|
||||
image: pihole/pihole:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-pihole"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4006:80"
|
||||
- "53:53/tcp"
|
||||
- "53:53/udp"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_pihole_data:/etc/pihole
|
||||
environment:
|
||||
- TZ=UTC
|
||||
- WEBPASSWORD=demo_password
|
||||
- WEBTHEME=default-darker
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Infrastructure"
|
||||
homepage.name: "Pi-hole"
|
||||
homepage.icon: "pihole"
|
||||
homepage.href: "http://localhost:4006"
|
||||
homepage.description: "DNS management with ad blocking"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost/admin"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# Portainer - Container Management
|
||||
portainer:
|
||||
image: portainer/portainer-ce:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-portainer"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4007:9000"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_portainer_data:/data
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Infrastructure"
|
||||
homepage.name: "Portainer"
|
||||
homepage.icon: "portainer"
|
||||
homepage.href: "http://localhost:4007"
|
||||
homepage.description: "Web-based container management"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:9000"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# InfluxDB - Time Series Database
|
||||
influxdb:
|
||||
image: influxdb:2.7-alpine
|
||||
container_name: "tsysdevstack-supportstack-demo-influxdb"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4008:8086"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_influxdb_data:/var/lib/influxdb2
|
||||
environment:
|
||||
- DOCKER_INFLUXDB_INIT_MODE=setup
|
||||
- DOCKER_INFLUXDB_INIT_USERNAME=demo_admin
|
||||
- DOCKER_INFLUXDB_INIT_PASSWORD=demo_password
|
||||
- DOCKER_INFLUXDB_INIT_ORG=tsysdemo
|
||||
- DOCKER_INFLUXDB_INIT_BUCKET=demo_metrics
|
||||
- DOCKER_INFLUXDB_INIT_ADMIN_TOKEN=demo_token_replace_in_production
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Monitoring"
|
||||
homepage.name: "InfluxDB"
|
||||
homepage.icon: "influxdb"
|
||||
homepage.href: "http://localhost:4008"
|
||||
homepage.description: "Time series database for metrics"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:8086/ping"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# Grafana - Visualization Platform
|
||||
grafana:
|
||||
image: grafana/grafana:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-grafana"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4009:3000"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_grafana_data:/var/lib/grafana
|
||||
environment:
|
||||
- GF_SECURITY_ADMIN_USER=admin
|
||||
- GF_SECURITY_ADMIN_PASSWORD=demo_password
|
||||
- GF_INSTALL_PLUGINS=grafana-clock-panel,grafana-simple-json-datasource
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Monitoring"
|
||||
homepage.name: "Grafana"
|
||||
homepage.icon: "grafana"
|
||||
homepage.href: "http://localhost:4009"
|
||||
homepage.description: "Analytics and visualization platform"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:3000/api/health"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# Draw.io - Diagramming Server
|
||||
drawio:
|
||||
image: fjudith/draw.io:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-drawio"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4010:8080"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_drawio_data:/root
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Documentation"
|
||||
homepage.name: "Draw.io"
|
||||
homepage.icon: "drawio"
|
||||
homepage.href: "http://localhost:4010"
|
||||
homepage.description: "Web-based diagramming application"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:8080"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# Kroki - Diagrams as a Service
|
||||
kroki:
|
||||
image: yuzutech/kroki:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-kroki"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4011:8000"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_kroki_data:/data
|
||||
environment:
|
||||
- KROKI_SAFE_MODE=secure
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Documentation"
|
||||
homepage.name: "Kroki"
|
||||
homepage.icon: "kroki"
|
||||
homepage.href: "http://localhost:4011"
|
||||
homepage.description: "Diagrams as a service"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:8000/health"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# Atomic Tracker - Habit Tracking
|
||||
atomictracker:
|
||||
image: ghcr.io/majorpeter/atomic-tracker:v1.3.1
|
||||
container_name: "tsysdevstack-supportstack-demo-atomictracker"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4012:3000"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_atomictracker_data:/app/data
|
||||
environment:
|
||||
- NODE_ENV=production
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Developer Tools"
|
||||
homepage.name: "Atomic Tracker"
|
||||
homepage.icon: "atomic-tracker"
|
||||
homepage.href: "http://localhost:4012"
|
||||
homepage.description: "Habit tracking and personal dashboard"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:3000"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# ArchiveBox - Web Archiving
|
||||
archivebox:
|
||||
image: archivebox/archivebox:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-archivebox"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4013:8000"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_archivebox_data:/data
|
||||
environment:
|
||||
- SECRET_KEY=demo_secret_replace_in_production
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Developer Tools"
|
||||
homepage.name: "ArchiveBox"
|
||||
homepage.icon: "archivebox"
|
||||
homepage.href: "http://localhost:4013"
|
||||
homepage.description: "Web archiving solution"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:8000"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# Tube Archivist - YouTube Archiving
|
||||
tubearchivist:
|
||||
image: bbilly1/tubearchivist:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-tubearchivist"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4014:8000"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_tubearchivist_data:/cache
|
||||
environment:
|
||||
- TA_HOST=tubearchivist
|
||||
- TA_PORT=4014
|
||||
- TA_DEBUG=false
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Developer Tools"
|
||||
homepage.name: "Tube Archivist"
|
||||
homepage.icon: "tube-archivist"
|
||||
homepage.href: "http://localhost:4014"
|
||||
homepage.description: "YouTube video archiving"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:8000"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# Wakapi - Time Tracking
|
||||
wakapi:
|
||||
image: ghcr.io/muety/wakapi:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-wakapi"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4015:3000"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_wakapi_data:/data
|
||||
environment:
|
||||
- WAKAPI_PASSWORD_SALT=demo_salt_replace_in_production
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Developer Tools"
|
||||
homepage.name: "Wakapi"
|
||||
homepage.icon: "wakapi"
|
||||
homepage.href: "http://localhost:4015"
|
||||
homepage.description: "Open-source WakaTime alternative"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:3000"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# MailHog - Email Testing
|
||||
mailhog:
|
||||
image: mailhog/mailhog:latest
|
||||
container_name: "tsysdevstack-supportstack-demo-mailhog"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4017:8025"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_mailhog_data:/maildir
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Developer Tools"
|
||||
homepage.name: "MailHog"
|
||||
homepage.icon: "mailhog"
|
||||
homepage.href: "http://localhost:4017"
|
||||
homepage.description: "Web and API based SMTP testing"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:8025"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
|
||||
# Atuin - Shell History
|
||||
atuin:
|
||||
image: ghcr.io/atuinsh/atuin:v18.10.0
|
||||
container_name: "tsysdevstack-supportstack-demo-atuin"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- tsysdevstack-supportstack-demo-network
|
||||
ports:
|
||||
- "4018:8888"
|
||||
volumes:
|
||||
- tsysdevstack-supportstack-demo_atuin_data:/config
|
||||
environment:
|
||||
- ATUIN_HOST=atuin
|
||||
- ATUIN_PORT=4018
|
||||
- ATUIN_OPEN_REGISTRATION=true
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
labels:
|
||||
homepage.group: "Developer Tools"
|
||||
homepage.name: "Atuin"
|
||||
homepage.icon: "atuin"
|
||||
homepage.href: "http://localhost:4018"
|
||||
homepage.description: "Magical shell history synchronization"
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
|
||||
"http://localhost:8888"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
Reference in New Issue
Block a user