mirror of
https://github.com/openziti/ziti.git
synced 2026-10-12 15:28:05 +00:00
77f8316456
Signed-off-by: gberl002 <geoff.berl@netfoundry.io>
92 lines
2.6 KiB
YAML
92 lines
2.6 KiB
YAML
version: '2.4'
|
|
services:
|
|
ziti-controller:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
env_file:
|
|
- ./.env
|
|
ports:
|
|
- ${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}:${ZITI_CTRL_EDGE_ADVERTISED_PORT:-1280}
|
|
- ${ZITI_CTRL_LISTENER_PORT:-6262}:${ZITI_CTRL_LISTENER_PORT:-6262}
|
|
environment:
|
|
- ZITI_EDGE_IDENTITY_ENROLLMENT_DURATION=${ZITI_EDGE_IDENTITY_ENROLLMENT_DURATION}
|
|
- ZITI_EDGE_ROUTER_ENROLLMENT_DURATION=${ZITI_EDGE_ROUTER_ENROLLMENT_DURATION}
|
|
networks:
|
|
zitiblue:
|
|
aliases:
|
|
- ziti-edge-controller
|
|
zitired:
|
|
aliases:
|
|
- ziti-edge-controller
|
|
volumes:
|
|
- ziti-fs:/persistent
|
|
entrypoint:
|
|
- "/var/openziti/scripts/run-controller.sh"
|
|
|
|
ziti-controller-init-container:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
depends_on:
|
|
- ziti-controller
|
|
environment:
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS="${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS}"
|
|
- ZITI_CTRL_EDGE_ADVERTISED_PORT="${ZITI_CTRL_EDGE_ADVERTISED_PORT}"
|
|
env_file:
|
|
- ./.env
|
|
networks:
|
|
zitiblue:
|
|
aliases:
|
|
- ziti-edge-controller-init-container
|
|
zitired:
|
|
aliases:
|
|
- ziti-edge-controller-init-container
|
|
volumes:
|
|
- ziti-fs:/persistent
|
|
entrypoint:
|
|
- "/var/openziti/scripts/run-with-ziti-cli.sh"
|
|
command:
|
|
- "/var/openziti/scripts/access-control.sh"
|
|
|
|
ziti-edge-router:
|
|
image: "${ZITI_IMAGE}:${ZITI_VERSION}"
|
|
depends_on:
|
|
- ziti-controller
|
|
environment:
|
|
- ZITI_CTRL_EDGE_ADVERTISED_ADDRESS="${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS}"
|
|
- ZITI_EDGE_ROUTER_NAME=${ZITI_EDGE_ROUTER_NAME:-ziti-edge-router}
|
|
- ZITI_EDGE_ROUTER_ROLES=public
|
|
ports:
|
|
- ${ZITI_EDGE_ROUTER_PORT:-3022}:${ZITI_EDGE_ROUTER_PORT:-3022}
|
|
networks:
|
|
- zitiblue
|
|
- zitired
|
|
volumes:
|
|
- ziti-fs:/persistent
|
|
entrypoint: /bin/bash
|
|
command: "/var/openziti/scripts/run-router.sh edge"
|
|
|
|
ziti-console:
|
|
image: openziti/zac
|
|
working_dir: /usr/src/app
|
|
environment:
|
|
- ZAC_SERVER_CERT_CHAIN=/persistent/pki/${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-ziti-controller}-intermediate/certs/${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-ziti-controller}-server.cert
|
|
- ZAC_SERVER_KEY=/persistent/pki/${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-ziti-controller}-intermediate/keys/${ZITI_CTRL_EDGE_ADVERTISED_ADDRESS:-ziti-controller}-server.key
|
|
- PORTTLS=8443
|
|
depends_on:
|
|
- ziti-controller
|
|
ports:
|
|
- 1408:1408
|
|
- 8443:8443
|
|
volumes:
|
|
- ziti-fs:/persistent
|
|
|
|
networks:
|
|
- zitiblue
|
|
- zitired
|
|
|
|
networks:
|
|
zitired:
|
|
zitiblue:
|
|
|
|
volumes:
|
|
ziti-fs:
|
|
|