import files

stack/node/.env.dist

@@ -0,0 +1,8 @@
+CONSUL_ACL_TOKENS_MASTER=01234567-89AB-CDEF-0123-456789ABCDEF
+CONSUL_CONSUL_HTTP_TOKEN=01234567-89AB-CDEF-0123-456789ABCDEF
+CONSUL_SERVICE_8500_TAGS=urlprefix-consul.${APP_DOMAIN}/
+FABIO_CONSUL_HTTP_TOKEN=01234567-89AB-CDEF-0123-456789ABCDEF
+FABIO_SERVICE_9998_TAGS=urlprefix-fabio.${APP_DOMAIN}/
+PORTAINER_SERVICE_9000_TAGS=urlprefix-portainer.${APP_DOMAIN}/
+REGISTRATOR_CONSUL_HTTP_TOKEN=01234567-89AB-CDEF-0123-456789ABCDEF
+SSL_HOSTNAME=${APP_DOMAIN}

stack/node/exporter/.env.dist

@@ -0,0 +1,2 @@
+CADVISOR_EXPORTER_SERVICE_8080_TAGS=urlprefix-cadvisor-exporter.${APP_DOMAIN}/
+NODE_EXPORTER_SERVICE_9100_TAGS=urlprefix-node-exporter.${APP_DOMAIN}/

stack/node/exporter/exporter.yml

@@ -0,0 +1,49 @@
+version: '3.6'
+
+services:
+  cadvisor-exporter:
+    image: google/cadvisor:latest
+    hostname: ${HOSTNAME}
+    labels:
+    - SERVICE_8080_NAME=${COMPOSE_SERVICE_NAME}-cadvisor-exporter-8080
+    - SERVICE_8080_CHECK_TCP=true
+    - SERVICE_8080_CHECK_INITIAL_STATUS=passing
+    - SERVICE_8080_TAGS=${CADVISOR_SERVICE_EXPORTER_8080_TAGS}
+    - SERVICE_9200_IGNORE=true
+    networks:
+    - public
+    ports:
+    - 8080
+    restart: always
+    volumes:
+    - /:/rootfs:ro
+    - /sys:/sys:ro
+    - /var/lib/docker/:/var/lib/docker:ro
+    - /var/run:/var/run:rw
+  node-exporter:
+    command:
+    - --collector.filesystem.ignored-mount-points
+    - "^/(sys|proc|dev|host|etc|rootfs/var/lib/docker/containers|rootfs/var/lib/docker/overlay2|rootfs/run/docker/netns|rootfs/var/lib/docker/aufs)($$|/)"
+    - '--path.procfs=/host/proc'
+    - '--path.sysfs=/host/sys'
+    image: prom/node-exporter:latest
+    hostname: ${HOSTNAME}
+    labels:
+    - SERVICE_9100_NAME=${COMPOSE_SERVICE_NAME}-node-exporter-9100
+    - SERVICE_9100_CHECK_TCP=true
+    - SERVICE_9100_CHECK_INITIAL_STATUS=passing
+    - SERVICE_9100_TAGS=${SERVICE_NODE_EXPORTER_HTTP_TAGS}
+    networks:
+    - public
+    ports:
+    - 9100
+    restart: always
+    volumes:
+    - /:/rootfs:ro
+    - /proc:/host/proc:ro
+    - /sys:/host/sys:ro
+
+networks:
+  public:
+    external: true
+    name: ${DOCKER_NETWORK_PUBLIC}

stack/node/node.yml

@@ -0,0 +1,110 @@
+version: '3.6'
+
+services:
+  consul:
+    build:
+      args:
+      - DOCKER_BUILD_DIR=docker/consul
+      context: ../..
+      dockerfile: docker/consul/Dockerfile
+    image: ${DOCKER_REPOSITORY_INFRA_NODE}/consul:${DOCKER_IMAGE_TAG}
+    environment:
+      CONSUL_BIND_INTERFACE: '${DOCKER_HOST_IFACE}'
+      CONSUL_CLIENT_INTERFACE: '${DOCKER_HOST_IFACE}'
+      CONSUL_HTTP_TOKEN: '${CONSUL_CONSUL_HTTP_TOKEN}'
+      CONSUL_LOCAL_CONFIG: '{ "log_level": "warn"
+                            , "enable_script_checks": true
+                            , "acl": { "enabled": true
+                                     , "default_policy": "deny"
+                                     , "enable_token_persistence": true
+                                     , "tokens": { "master": "$CONSUL_ACL_TOKENS_MASTER"
+                                                 , "agent": "$CONSUL_CONSUL_HTTP_TOKEN"
+                                                 }
+                                     }
+                            }'
+    hostname: ${HOSTNAME}
+    labels:
+    - SERVICE_8300_IGNORE=true
+    - SERVICE_8301_IGNORE=true
+    - SERVICE_8302_IGNORE=true
+    - SERVICE_8500_CHECK_HTTP=/ui
+    - SERVICE_8500_NAME=${COMPOSE_SERVICE_NAME}-consul-8500
+    - SERVICE_8500_TAGS=${CONSUL_SERVICE_8500_TAGS}
+    - SERVICE_8600_IGNORE=true
+    - SERVICE_ADDRESS=${DOCKER_HOST_INET}
+    network_mode: host
+    restart: always
+    volumes:
+    - consul:/consul/data
+    - /var/run/docker.sock:/var/run/docker.sock
+  fabio:
+    command: -registry.backend "consul" -registry.consul.addr "consul:8500" -registry.consul.token "$FABIO_CONSUL_HTTP_TOKEN" -proxy.addr ":80,:443;cs=local" -proxy.cs "cs=local;type=file;cert=/certs/${SSL_HOSTNAME}.crt.pem;key=/certs/${SSL_HOSTNAME}.key.pem"
+    depends_on:
+    - consul
+    extra_hosts:
+    - consul:${DOCKER_HOST_INET}
+    hostname: ${HOSTNAME}
+    image: fabiolb/fabio:latest
+    labels:
+    - SERVICE_80_CHECK_TCP=true
+    - SERVICE_80_NAME=${COMPOSE_SERVICE_NAME}-fabio-80
+    - SERVICE_443_CHECK_TCP=true
+    - SERVICE_443_NAME=${COMPOSE_SERVICE_NAME}-fabio-443
+    - SERVICE_9998_CHECK_TCP=true
+    - SERVICE_9998_NAME=${COMPOSE_SERVICE_NAME}-fabio-9998
+    - SERVICE_9998_TAGS=${FABIO_SERVICE_9998_TAGS}
+    - SERVICE_9999_IGNORE=true
+    ports:
+    - 80:80
+    - 443:443
+    - 9998
+    networks:
+    - public
+    restart: always
+    volumes:
+      - ssl-certs:/certs
+  portainer:
+    image: portainer/portainer:latest
+    labels:
+    - SERVICE_8000_IGNORE=true
+    - SERVICE_9000_CHECK_HTTP=/
+    - SERVICE_9000_NAME=${COMPOSE_SERVICE_NAME}-portainer-9000
+    - SERVICE_9000_TAGS=${PORTAINER_SERVICE_9000_TAGS}
+    networks:
+    - public
+    ports:
+    - 8000
+    - 9000
+    restart: always
+    volumes:
+    - /var/run/docker.sock:/var/run/docker.sock
+    - portainer:/data
+  registrator:
+    build:
+      args:
+      - DOCKER_BUILD_DIR=docker/registrator
+      context: ../..
+      dockerfile: docker/registrator/Dockerfile
+    command: -internal -cleanup -deregister always -resync=30 -useIpFromNetwork node -useIpFromLabel SERVICE_ADDRESS consul://consul:8500
+    depends_on:
+    - consul
+    environment:
+    - CONSUL_HTTP_TOKEN=${REGISTRATOR_CONSUL_HTTP_TOKEN}
+    extra_hosts:
+    - consul:${DOCKER_HOST_INET}
+    hostname: ${HOSTNAME}
+    image: ${DOCKER_REPOSITORY_INFRA_NODE}/registrator:${DOCKER_IMAGE_TAG}
+    network_mode: host
+    restart: always
+    volumes:
+    - /var/run/docker.sock:/tmp/docker.sock
+
+volumes:
+  consul:
+  portainer:
+  ssl-certs:
+
+networks:
+  public:
+    external: true
+    name: ${DOCKER_NETWORK_PUBLIC}

stack/node/pdns/pdns-recursor.yml

@@ -0,0 +1,14 @@
+version: '3.6'
+
+services:
+  pdns-recursor:
+    build:
+      args:
+      - DOCKER_BUILD_DIR=docker/pdns-server
+      context: ../../..
+      dockerfile: docker/pdns-server/Dockerfile
+    command: /usr/local/sbin/pdns_recursor --local-address='192.168.0.1:53' --allow-from='127.0.0.0/8, 192.168.1.0/24, 172.16.0.0/12'
+    image: ${DOCKER_REPOSITORY}/pdns-recursor:${DOCKER_IMAGE_TAG}
+    hostname: ${HOSTNAME}
+    network_mode: host
+    restart: always

stack/node/vsftpd/.env.dist

@@ -0,0 +1,3 @@
+VSFTPD_S3_AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
+VSFTPD_S3_AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
+VSFTPD_S3_FTPD_USERS=ftpuser::ftppass::ftpbucket

stack/node/vsftpd/vsftpd-s3.yml

@@ -0,0 +1,39 @@
+version: '3.6'
+
+services:
+  vsftpd-s3:
+    build:
+      args:
+      - DOCKER_BUILD_DIR=docker/vsftpd-s3
+      context: ../../..
+      dockerfile: docker/vsftpd-s3/Dockerfile
+    cap_add:
+    - sys_admin
+    devices:
+    - /dev/fuse
+    environment:
+    - AWS_ACCESS_KEY_ID=${VSFTPD_S3_AWS_ACCESS_KEY_ID}
+    - AWS_SECRET_ACCESS_KEY=${VSFTPD_S3_AWS_SECRET_ACCESS_KEY}
+    - DIR_REMOTE=${VSFTPD_S3_DIR_REMOTE}
+    - FTP_HOST=${VSFTPD_S3_FTP_HOST}
+    - FTP_PASS=${VSFTPD_S3_FTP_PASS}
+    - FTP_SYNC=${VSFTPD_S3_FTP_SYNC}
+    - FTP_USER=${VSFTPD_S3_FTP_USER}
+    - FTPD_USER=${VSFTPD_S3_FTPD_USER}
+    - FTPD_USERS=${VSFTPD_S3_FTPD_USERS}
+    - PASV_MAX_PORT=${VSFTPD_S3_PASV_MAX_PORT}
+    - PASV_MIN_PORT=${VSFTPD_S3_PASV_MIN_PORT}
+    image: ${DOCKER_REPOSITORY}/vsftpd-s3:${DOCKER_IMAGE_TAG}
+    labels:
+    - SERVICE_21_NAME=${COMPOSE_SERVICE_NAME}-vsftpd-s3-21
+    - SERVICE_21_CHECK_TCP=true
+    - SERVICE_21_CHECK_INITIAL_STATUS=passing
+    - SERVICE_22_NAME=${COMPOSE_SERVICE_NAME}-vsftpd-s3-22
+    - SERVICE_22_CHECK_TCP=true
+    - SERVICE_22_CHECK_INITIAL_STATUS=passing
+    - SERVICE_65000_IGNORE=true
+    hostname: ${HOSTNAME}
+    security_opt:
+    - apparmor:unconfined
+    network_mode: host
+    restart: always