docker-compose.yml

---
version: '3.2'

secrets:
  cyhy_read_creds:
    file: ./secrets/cyhy_read_creds.yml
  scan_read_creds:
    file: ./secrets/scan_read_creds.yml
  scan_write_creds:
    file: ./secrets/scan_write_creds.yml
  aws_config:
    file: ./secrets/aws_config

services:
  gather:
    depends_on:
      - redis
    image: 'cisagov/gatherer:1.5.18'
    secrets:
      - source: cyhy_read_creds
        target: database_creds.yml
    volumes:
      - ./output:/home/cisa/shared
  pshtt_report:
    depends_on:
      - redis
    image: 'cisagov/pshtt_reporter:1.2.17'
    secrets:
      - source: scan_read_creds
        target: scan_read_creds.yml
    volumes:
      - ./output:/home/cisa/shared
  redis:
    image: 'redis:alpine'
    # ports:
    #   - host_ip: 127.0.0.1
    #     mode: host
    #     protocol: tcp
    #     # Note that we expose redis on a non-standard port to avoid
    #     # conflict with the Admiral:
    #     # https://github.com/cisagov/ansible-role-admiral
    #     published: 6378
    #     target: 6379
  save:
    depends_on:
      - redis
    image: 'cisagov/saver:1.3.7'
    secrets:
      - source: scan_write_creds
        target: scan_write_creds.yml
    volumes:
      - ./output:/home/cisa/shared
  scan:
    depends_on:
      - redis
    environment:
      - AWS_CONFIG_FILE=/run/secrets/aws_config
      - AWS_PROFILE=lambda
    image: 'cisagov/scanner:1.3.7'
    secrets:
      - source: aws_config
        target: aws_config
    volumes:
      - ./output:/home/cisa/shared
  trustymail_report:
    depends_on:
      - redis
    environment:
      - AWS_CONFIG_FILE=/run/secrets/aws_config
      - AWS_PROFILE=elasticsearch
    image: 'cisagov/trustymail_reporter:1.5.6'
    secrets:
      - source: scan_read_creds
        target: scan_read_creds.yml
      - source: aws_config
        target: aws_config
    volumes:
      - ./output:/home/cisa/shared