docker-compose.yml

services:

  caddy-proxy-waf:
    image: ghcr.io/altersec/caddy-proxy-waf:latest
    container_name: caddy-proxy-waf
    restart: always
    ports:
      - "80:80"
      - "443:443"
      - "443:443/udp"
    environment:
      - SERVER_NAME=${SERVER_NAME:-localhost}
    volumes:
      - caddy_data:/data
    networks:
      - proxy

  api:
    image: ghcr.io/ciso360ai/api:latest
    build:
      context: ./api/.
    container_name: api
    restart: always
    depends_on:
      cache:
        condition: service_healthy
      scan_tls:
        condition: service_healthy
      postgres:
        condition: service_healthy
    ports:
      - "8055:8055"
    env_file:
      - .env
    environment:
      - TELEMETRY="false"
      # - LOGGER_HTTP_USE_LEVEL="silent" # DO NOT log api since rproxy logs traffic already 
      - DB_CLIENT="pg"
      - DB_HOST="postgres"
      - DB_PORT=5432
      - DB_DATABASE=${PG1_DB}
      - DB_USER=${PG1_USER}
      - DB_PASSWORD=${PG1_PASS}
      - DB_SEARCH_PATH=public,timetable
      - CACHE_ENABLED="true"
      - CACHE_STORE=redis"
      - CACHE_REDIS"redis://cache:6379"
    volumes:
      - ./api/extensions:/directus/extensions
      - ./api/migrations:/directus/migrations
      - ./api/uploads:/directus/uploads
      - ./results:/results
    networks:
      - db
      - proxy
      - internal

  cache:
    container_name: cache
    image: redis:7-alpine
    restart: always
    healthcheck:
      test: [ "CMD", "redis-cli", "ping" ]
    networks:
      - db

  postgres:
    image: postgres:16.2
    container_name: postgres
    restart: always
    healthcheck:
      test: [ "CMD", "pg_isready", "-d", "${PG1_DB}" ]
      timeout: 1s
      retries: 5
      interval: 1s
    ports:
      - 5432:5432
    command: ["postgres", "-c", "log_statement=none", "-c", "log_checkpoints=off"]
    environment:
      POSTGRES_DB: ${PG1_DB}
      POSTGRES_USER: ${PG1_USER}
      POSTGRES_PASSWORD: ${PG1_PASS}
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./backup:/backup
    networks:
      - db

  scan_tls:
    image: ghcr.io/ciso360ai/scan_tls:latest
    build:
      context: ./scan_tls/.
    container_name: scan_tls
    hostname: scan_tls
    restart: always
    depends_on:
      postgres:
        condition: service_healthy
    #FIX IPv6 issue
    # sysctls:
    #   net.ipv6.conf.lo.disable_ipv6: 1
    healthcheck:
      # test: ["CMD-SHELL", "curl -f http://localhost:8008/readiness || exit 1"]
      test: ["CMD-SHELL", "exit 0"]
      timeout: 1s
      interval: 1s
      retries: 5
    environment:
      POSTGRES_HOST: ${PG1_HOST}
      POSTGRES_PORT: ${PG1_PORT}
      POSTGRES_DB: ${PG1_DB}
      POSTGRES_USER: ${PG1_USER}
      POSTGRES_PASSWORD: ${PG1_PASS}
      SERVER_NAME: ${SERVER_NAME}
      USER_AGENT: ${USER_AGENT} #TBD
    # command: ["--cron-workers=4"]
    volumes:
      - ./results:/results
      - ./logs:/logs
      - ./scan_tls/scripts/scan_tls:/usr/local/bin/scan_tls
      - ./scan_tls/scripts/import_scan:/usr/local/bin/import_scan
    networks:
      - internal
      - db

  scan_domain:
    image: ghcr.io/ciso360ai/scan_domain:latest
    build:
      context: ./scan_domain/.
    container_name: scan_domain
    hostname: scan_domain
    restart: always
    depends_on:
      scan_tls:
        condition: service_healthy
    healthcheck:
      # test: ["CMD-SHELL", "curl -f http://localhost:8008/readiness || exit 1"]
      test: ["CMD-SHELL", "exit 0"]
      timeout: 1s
      interval: 1s
      retries: 5
    environment:
      POSTGRES_HOST: ${PG1_HOST}
      POSTGRES_PORT: ${PG1_PORT}
      POSTGRES_DB: ${PG1_DB}
      POSTGRES_USER: ${PG1_USER}
      POSTGRES_PASSWORD: ${PG1_PASS}
      SERVER_NAME: ${SERVER_NAME}
      USER_AGENT: ${USER_AGENT} #TBD
    # command: ["--cron-workers=4"]
    volumes:
      - ./results:/results
      - ./logs:/logs
      - ./scan_domain/scripts/scan_domain:/usr/local/bin/scan_domain
      - ./scan_domain/scripts/import_scan:/usr/local/bin/import_scan
      - ./scan_domain/config:/scan_domain/config
    networks:
      - internal
      - db

  scan_email:
    image: ghcr.io/ciso360ai/scan_email:latest
    build:
      context: ./scan_email/.
    container_name: scan_email
    hostname: scan_email
    restart: always
    depends_on:
      scan_tls:
        condition: service_healthy
    healthcheck:
      # test: ["CMD-SHELL", "curl -f http://localhost:8008/readiness || exit 1"]
      test: ["CMD-SHELL", "exit 0"]
      timeout: 1s
      interval: 1s
      retries: 5
    environment:
      POSTGRES_HOST: ${PG1_HOST}
      POSTGRES_PORT: ${PG1_PORT}
      POSTGRES_DB: ${PG1_DB}
      POSTGRES_USER: ${PG1_USER}
      POSTGRES_PASSWORD: ${PG1_PASS}
      SERVER_NAME: ${SERVER_NAME}
      USER_AGENT: ${USER_AGENT}
      HIBP_API_KEY: ${HIBP_API_KEY}
      PYTHONUNBUFFERED: 1
    # command: ["--cron-workers=4"]
    volumes:
      - ./results:/results
      - ./logs:/logs
      - ./scan_email/scripts/scan_domain_hibp:/usr/local/bin/scan_domain_hibp
      - ./scan_email/scripts/scan_email_hibp:/usr/local/bin/scan_email_hibp
      - ./scan_email/config:/scan_domain/config
    networks:
      - internal
      - db

networks:
  proxy:
  db:
  internal:

volumes:
  postgres_data:
    driver: local
  caddy_data:
    driver: local