ClickDOOM/docker-compose.yml at main · MarcusKainth/ClickDOOM · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
# The pinned ClickHouse. CI starts it from this file too (`make up`), so the
# image digest and the server configuration live here and nowhere else.
# Bumping the pin needs a `ci:` pull request carrying nightly deep-diff evidence.
services:
  clickhouse:
    image: clickhouse/clickhouse-server:26.8.2.7@sha256:fa394da808cc53f76d0344429421d6c422a6ee85fe7450135c0e3cff4df9bcbb
    container_name: clickdoom-ch
    ports:
      - "8123:8123"   # HTTP
      - "9000:9000"   # native
    ulimits:
      nofile: 262144
    # `make up` runs `docker compose up --wait`, which returns on "healthy"
    # when a healthcheck exists and on "running" otherwise. The server takes
    # a few seconds to listen after the container starts.
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8123/ping || exit 1"]
      interval: 2s
      timeout: 3s
      retries: 30
      start_period: 5s
    environment:
      CLICKHOUSE_DB: clickdoom
      # The image ships users.d/default-user.xml restricting `default` to
      # 127.0.0.1/::1 *inside the container*, so every host-side and CI
      # connection is refused with REQUIRED_PASSWORD. Setting a password makes
      # `default` reachable over the network. Keep in sync with the workflows.
      CLICKHOUSE_PASSWORD: clickdoom
    volumes:
      - ch-data:/var/lib/clickhouse
      - ./docker/clickhouse/config.d/clickdoom.xml:/etc/clickhouse-server/config.d/clickdoom.xml:ro
      - ./docker/clickhouse/users.d/clickdoom.xml:/etc/clickhouse-server/users.d/clickdoom.xml:ro
volumes:
  ch-data: