mirror of
https://github.com/hanzozt/zt.git
synced 2026-10-30 15:04:55 +00:00
- Repo names: ziti-* → zt-* - Go modules: github.com/hanzozt/ziti → github.com/hanzozt/zt - Docker images: hanzozt/ziti-* → hanzozt/zt-* - C/Java/JS symbols: ziti_* → zt_* - File and directory names updated
227 lines
8.2 KiB
YAML
227 lines
8.2 KiB
YAML
services:
|
|
zt-controller:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
healthcheck:
|
|
test: curl -m 1 -s -k https://${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}:${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}/edge/client/v1/version
|
|
interval: 1s
|
|
timeout: 3s
|
|
retries: 30
|
|
env_file:
|
|
- ./.env
|
|
ports:
|
|
- ${ZITI_INTERFACE:-0.0.0.0}:${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}:${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
- ${ZITI_INTERFACE:-0.0.0.0}:${ZITI_CTRL_ADVERTISED_PORT:-6262}:${ZITI_CTRL_ADVERTISED_PORT:-6262}
|
|
environment:
|
|
- ZITI_CTRL_NAME=${ZITI_CTRL_NAME:-zt-edge-controller}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS=${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_PORT=${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
- ZITI_CTRL_EDGE_IP_OVERRIDE=${ZITI_CTRL_EDGE_IP_OVERRIDE:-127.0.0.1}
|
|
- ZITI_CTRL_ADVERTISED_PORT=${ZITI_CTRL_ADVERTISED_PORT:-6262}
|
|
- ZITI_EDGE_IDENTITY_ENROLLMENT_DURATION=${ZITI_EDGE_IDENTITY_ENROLLMENT_DURATION}
|
|
- ZITI_ROUTER_ENROLLMENT_DURATION=${ZITI_ROUTER_ENROLLMENT_DURATION}
|
|
- ZITI_USER=${ZITI_USER:-admin}
|
|
- ZITI_PWD=${ZITI_PWD}
|
|
networks:
|
|
ztblue:
|
|
aliases:
|
|
- zt-edge-controller
|
|
ztred:
|
|
aliases:
|
|
- zt-edge-controller
|
|
volumes:
|
|
- zt-fs:/persistent
|
|
entrypoint:
|
|
- "/var/hanzozt/scripts/run-controller.sh"
|
|
|
|
zt-controller-init-container:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
depends_on:
|
|
zt-controller:
|
|
condition: service_healthy
|
|
environment:
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS=${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_PORT=${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
env_file:
|
|
- ./.env
|
|
networks:
|
|
ztblue:
|
|
aliases:
|
|
- zt-edge-controller-init-container
|
|
ztred:
|
|
aliases:
|
|
- zt-edge-controller-init-container
|
|
volumes:
|
|
- zt-fs:/persistent
|
|
entrypoint:
|
|
- "/var/hanzozt/scripts/run-with-zt-cli.sh"
|
|
command:
|
|
- "/var/hanzozt/scripts/access-control.sh"
|
|
|
|
zt-edge-router:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
env_file:
|
|
- ./.env
|
|
depends_on:
|
|
zt-controller:
|
|
condition: service_healthy
|
|
ports:
|
|
- ${ZITI_INTERFACE:-0.0.0.0}:${ZITI_ROUTER_PORT:-3022}:${ZITI_ROUTER_PORT:-3022}
|
|
- ${ZITI_INTERFACE:-0.0.0.0}:${ZITI_ROUTER_LISTENER_BIND_PORT:-10080}:${ZITI_ROUTER_LISTENER_BIND_PORT:-10080}
|
|
environment:
|
|
- ZITI_CTRL_ADVERTISED_ADDRESS=${ZITI_CTRL_ADVERTISED_ADDRESS:-zt-controller}
|
|
- ZITI_CTRL_ADVERTISED_PORT=${ZITI_CTRL_ADVERTISED_PORT:-6262}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS=${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_PORT=${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
- ZITI_ROUTER_NAME=${ZITI_ROUTER_NAME:-zt-edge-router}
|
|
- ZITI_ROUTER_ADVERTISED_ADDRESS=${ZITI_ROUTER_ADVERTISED_ADDRESS:-zt-edge-router}
|
|
- ZITI_ROUTER_PORT=${ZITI_ROUTER_PORT:-3022}
|
|
- ZITI_ROUTER_LISTENER_BIND_PORT=${ZITI_ROUTER_LISTENER_BIND_PORT:-10080}
|
|
- ZITI_ROUTER_ROLES=public
|
|
networks:
|
|
- ztblue
|
|
- ztred
|
|
volumes:
|
|
- zt-fs:/persistent
|
|
entrypoint: /bin/bash
|
|
command: "/var/hanzozt/scripts/run-router.sh edge"
|
|
|
|
zt-edge-router-wss:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
env_file:
|
|
- ./.env
|
|
depends_on:
|
|
zt-controller:
|
|
condition: service_healthy
|
|
ports:
|
|
- ${ZITI_INTERFACE:-0.0.0.0}:${ZITI_ROUTER_WSS_PORT:-3023}:${ZITI_ROUTER_WSS_PORT:-3023}
|
|
- ${ZITI_INTERFACE:-0.0.0.0}:${ZITI_ROUTER_LISTENER_BIND_PORT:-10081}:${ZITI_ROUTER_LISTENER_BIND_PORT:-10081}
|
|
environment:
|
|
- ZITI_CTRL_ADVERTISED_ADDRESS=${ZITI_CTRL_ADVERTISED_ADDRESS:-zt-controller}
|
|
- ZITI_CTRL_ADVERTISED_PORT=${ZITI_CTRL_ADVERTISED_PORT:-6262}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS=${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_PORT=${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
- ZITI_ROUTER_NAME=${ZITI_ROUTER_NAME:-zt-edge-router-wss}
|
|
- ZITI_ROUTER_ADVERTISED_ADDRESS=${ZITI_ROUTER_ADVERTISED_ADDRESS:-zt-edge-router-wss}
|
|
- ZITI_ROUTER_PORT=${ZITI_ROUTER_WSS_PORT:-3023}
|
|
- ZITI_ROUTER_LISTENER_BIND_PORT=${ZITI_ROUTER_LISTENER_BIND_PORT:-10081}
|
|
- ZITI_ROUTER_ROLES=public
|
|
- ZITI_PKI_ALT_SERVER_CERT=${ZITI_PKI_ALT_SERVER_CERT:-}
|
|
- ZITI_PKI_ALT_SERVER_KEY=${ZITI_PKI_ALT_SERVER_KEY:-}
|
|
networks:
|
|
- ztblue
|
|
- ztred
|
|
volumes:
|
|
- zt-fs:/persistent
|
|
entrypoint: /bin/bash
|
|
command: "/var/hanzozt/scripts/run-router.sh wss"
|
|
|
|
zt-fabric-router-br:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
env_file:
|
|
- ./.env
|
|
depends_on:
|
|
zt-controller:
|
|
condition: service_healthy
|
|
environment:
|
|
- ZITI_CTRL_ADVERTISED_ADDRESS=${ZITI_CTRL_ADVERTISED_ADDRESS:-zt-controller}
|
|
- ZITI_CTRL_ADVERTISED_PORT=${ZITI_CTRL_ADVERTISED_PORT:-6262}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS=${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_PORT=${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
- ZITI_ROUTER_NAME=zt-fabric-router-br
|
|
- ZITI_ROUTER_ADVERTISED_ADDRESS=zt-fabric-router-br
|
|
- ZITI_ROUTER_ROLES="fabric-only"
|
|
networks:
|
|
- ztblue
|
|
- ztred
|
|
volumes:
|
|
- zt-fs:/persistent
|
|
entrypoint: /bin/bash
|
|
command: "/var/hanzozt/scripts/run-router.sh fabric"
|
|
|
|
zt-private-red:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
env_file:
|
|
- ./.env
|
|
depends_on:
|
|
zt-controller:
|
|
condition: service_healthy
|
|
environment:
|
|
- ZITI_CTRL_ADVERTISED_ADDRESS=${ZITI_CTRL_ADVERTISED_ADDRESS:-zt-controller}
|
|
- ZITI_CTRL_ADVERTISED_PORT=${ZITI_CTRL_ADVERTISED_PORT:-6262}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS=${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_PORT=${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
- ZITI_ROUTER_NAME=zt-private-red
|
|
- ZITI_ROUTER_ADVERTISED_ADDRESS=zt-private-red
|
|
- ZITI_ROUTER_ROLES=ztred
|
|
networks:
|
|
- ztred
|
|
volumes:
|
|
- zt-fs:/persistent
|
|
entrypoint: /bin/bash
|
|
command: "/var/hanzozt/scripts/run-router.sh private"
|
|
|
|
zt-private-blue:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
env_file:
|
|
- ./.env
|
|
depends_on:
|
|
zt-controller:
|
|
condition: service_healthy
|
|
environment:
|
|
- ZITI_CTRL_ADVERTISED_ADDRESS=${ZITI_CTRL_ADVERTISED_ADDRESS:-zt-controller}
|
|
- ZITI_CTRL_ADVERTISED_PORT=${ZITI_CTRL_ADVERTISED_PORT:-6262}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS=${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_PORT=${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
- ZITI_ROUTER_NAME=zt-private-blue
|
|
- ZITI_ROUTER_ADVERTISED_ADDRESS=zt-private-blue
|
|
- ZITI_ROUTER_ROLES=ztblue
|
|
networks:
|
|
- ztblue
|
|
volumes:
|
|
- zt-fs:/persistent
|
|
entrypoint: /bin/bash
|
|
command: "/var/hanzozt/scripts/run-router.sh private"
|
|
|
|
web-test-blue:
|
|
image: hanzozt/hello-world
|
|
ports:
|
|
- ${ZITI_INTERFACE:-0.0.0.0}:80:8000
|
|
networks:
|
|
ztblue:
|
|
aliases:
|
|
- web-test-blue
|
|
- web-test.blue
|
|
- web.test.blue
|
|
|
|
zt-console:
|
|
image: hanzozt/zac
|
|
working_dir: /usr/src/app
|
|
environment:
|
|
- ZAC_SERVER_CERT_CHAIN=/persistent/pki/${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}-intermediate/certs/${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}-server.cert
|
|
- ZAC_SERVER_KEY=/persistent/pki/${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}-intermediate/keys/${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}-server.key
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS=${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-zt-edge-controller}
|
|
- ZITI_CTRL_EDGE_ADVERTISED_PORT=${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
- ZITI_CTRL_NAME=${ZITI_CTRL_NAME:-zt-edge-controller}
|
|
- ZAC_CONTROLLER_URLS=${ZAC_CONTROLLER_URLS:-zt-edge-controller:1280}
|
|
- PORTTLS=8443
|
|
depends_on:
|
|
zt-controller:
|
|
condition: service_healthy
|
|
ports:
|
|
- ${ZITI_INTERFACE:-0.0.0.0}:8443:8443
|
|
volumes:
|
|
- zt-fs:/persistent
|
|
networks:
|
|
- ztblue
|
|
- ztred
|
|
|
|
networks:
|
|
ztred:
|
|
driver: bridge
|
|
ztblue:
|
|
driver: bridge
|
|
|
|
volumes:
|
|
zt-fs:
|
|
|