haproxy-protection/docker-compose.yml at master · fatchan/haproxy-protection · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
services:

  haproxy:
    network_mode: host
    build:
      context: ./
      dockerfile: haproxy/Dockerfile
    volumes:
      - shared-socket:/shared-sockets
      - ./haproxy/haproxy.cfg:/etc/haproxy/haproxy.cfg
      - ./haproxy/errors/:/etc/haproxy/errors/
      - ./haproxy/map/:/etc/haproxy/map/
      - ./haproxy/template/:/etc/haproxy/template/
      - ./haproxy/certs/:/etc/haproxy/certs/
      - ./src/lua/scripts/:/etc/haproxy/scripts/
      - ./src/lua/libs/:/etc/haproxy/libs/
      - ./src/js/:/etc/haproxy/js/
      - ./src/locales/:/etc/haproxy/locales/
      - ../../Documents/dataplaneapi/build/dataplaneapi:/usr/local/bin/dataplaneapi
    environment:
      # test keys
      - HCAPTCHA_SITEKEY=20000000-ffff-ffff-ffff-000000000002
      - HCAPTCHA_SECRET=0x0000000000000000000000000000000000000000
      - HAPROXY_MAXCONN=5000
      # - VERIFY_BACKEND_SSL=1
      # - VERIFY_BACKEND_SSL_VERIFYNONE=1
      - CAPTCHA_COOKIE_SECRET=changeme
      - POW_COOKIE_SECRET=changeme
      - HMAC_COOKIE_SECRET=changeme
      - RAY_ID=docker
      - CHALLENGE_EXPIRY=43200
      - BACKEND_NAME=servers
      - SERVER_PREFIX=websrv
      - CHALLENGE_INCLUDES_IP=true
      - ARGON_TIME=2
      - ARGON_KB=512
      - POW_DIFFICULTY=20
      - POW_TYPE=argon2
      - TOR_CONTROL_PORT_PASSWORD=changeme
      - USE_INTER_FONT=1
      # - USE_POSTHOG=1

  nginx:
    ports:
      - "10080:80"
      - "18080:80"
      - "18880:80"
      - "12052:80"
      - "12084:80"
      - "12088:80"
      - "12097:80"
    image: "nginx:latest"
    volumes:
      - ./nginx/html:/usr/share/nginx/html

  # for testing with VERIFY_BACKEND_SSL=1
  nginx-tls:
    image: "nginx:latest"
    ports:
      - "10443:443"
      - "12054:2053"
      - "12083:2083"
      - "12087:2087"
      - "12096:2096"
      - "18443:8443"
      - "18888:8888"
    volumes:
      - ./nginx/html2:/usr/share/nginx/html
      - ./nginx/nginx.conf:/etc/nginx/conf.d/default.conf
      - ./nginx/ssl:/etc/nginx/certs

  varnish:
    network_mode: host
    ### regular image
    image: varnish:latest
    command: varnishd -F -a /shared-sockets/haproxy-to-varnish-cache.sock -f /etc/varnish/default.vcl -s file,/var/lib/varnish/cache.bin,1G -p feature=+http2
    ### custom dockerfile w/ logs
    # build:
    #   context: ./varnish
    #   dockerfile: Dockerfile
    deploy:
      resources:
        limits:
          memory: 2G
        reservations:
          memory: 1.5G
    volumes:
      - shared-socket:/shared-sockets
      - ./varnish/:/etc/varnish/
    user: root

  # tor:
  #   network_mode: host
  #   build:
  #     context: ./
  #     dockerfile: tor/Dockerfile
  #   volumes:
  #     - ./tor/torrc.default:/etc/tor/torrc

volumes:
  shared-socket: