docker-compose.yml

services:
  #
  # mender-iot-manager
  #
  mender-iot-manager:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/iot-manager:${MENDER_SERVER_TAG}
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    depends_on:
      mender-mongo:
        condition: service_healthy

  #
  # mender-deployments
  #
  mender-deployments:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/deployments:${MENDER_SERVER_TAG}
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    depends_on:
      mender-mongo:
        condition: service_healthy

  #
  # mender-gui
  #
  mender-gui:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/gui:${MENDER_SERVER_TAG}
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    environment:
      - GATEWAY_IP
      - INTEGRATION_VERSION
      - MENDER_ARTIFACT_VERSION
      - MENDER_VERSION
      - MENDER_DEB_PACKAGE_VERSION
      - HAVE_DEVICECONNECT=1
      - HAVE_DEVICECONFIG=1
    healthcheck:
      test: ["CMD-SHELL", "wget -q --spider http://127.0.0.1:8090/ui/ || exit 1"]
      interval: 10s
      timeout: 3s
      retries: 10
      start_period: 10s

  #
  # mender-api-gateway
  #
  mender-api-gateway:
    image: traefik:v3.3
    extends:
      file: common.yml
      service: mender-base
    # Avoid Too many open files error
    ulimits:
      nofile:
        soft: 65536
        hard: 65536
    # Enables the web UI and tells Traefik to listen to docker
    command:
      - --accesslog=true
      - --ping=true
      - --entrypoints.http.address=:80
      - --entrypoints.http.http.redirections.entryPoint.scheme=https
      - --entrypoints.http.http.redirections.entryPoint.to=https
      - --entrypoints.https.address=:443
      - --entryPoints.https.transport.respondingTimeouts.idleTimeout=7200
      - --entryPoints.https.transport.respondingTimeouts.readTimeout=7200
      - --entryPoints.https.transport.respondingTimeouts.writeTimeout=7200
      - --providers.file.directory=/etc/traefik/config
    volumes:
      # So that Traefik can listen to the Docker events
      - /var/run/docker.sock:/var/run/docker.sock:ro
      # Dynamic configuration files
      - ./config/traefik/traefik.yaml:/etc/traefik/config/traefik.yaml:ro
      - ./config/traefik/traefik.middlewares.yaml:/etc/traefik/config/traefik.middlewares.yaml:ro

    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8080/ping | grep -q 'OK'"]
      interval: 10s
      timeout: 3s
      retries: 5
      start_period: 10s
    networks:
      - mender
    # critical - otherwise nginx may not detect
    # these servers and exits with 'upstream server not found'
    depends_on:
      - mender-device-auth
      - mender-gui
      - mender-useradm
      - mender-inventory

  #
  # mender-device-auth
  #
  mender-device-auth:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/deviceauth:${MENDER_SERVER_TAG}
    environment:
      DEVICEAUTH_ORCHESTRATOR_ADDR: http://mender-workflows-server:8080/
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    depends_on:
      mender-mongo:
        condition: service_healthy
      mender-workflows-server:
        condition: service_started

  #
  # mender-inventory
  #
  mender-inventory:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/inventory:${MENDER_SERVER_TAG}
    environment:
      INVENTORY_ORCHESTRATOR_ADDR: http://mender-workflows-server:8080/
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    depends_on:
      mender-mongo:
        condition: service_healthy

  #
  # mender-useradm
  #
  mender-useradm:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/useradm:${MENDER_SERVER_TAG}
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    depends_on:
      mender-mongo:
        condition: service_healthy

  #
  # mender-workflows-server
  #
  mender-workflows-server:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/workflows:${MENDER_SERVER_TAG}
    environment:
      WORKFLOWS_MONGO_URL: mongodb://mender-mongo:27017
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    depends_on:
      mender-mongo:
        condition: service_healthy
      mender-nats:
        condition: service_healthy

  #
  # mender-workflows-worker
  #
  mender-workflows-worker:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/workflows${MENDER_LEGACY_IMAGE:+-worker}:${MENDER_SERVER_TAG}
    command:
      - worker
      - --excluded-workflows=generate_artifact,generate_delta_artifact
      - --automigrate
    environment:
      WORKFLOWS_MONGO_URL: mongodb://mender-mongo:27017
      DEVICECONNECT_ADDR: "mender-deviceconnect:8080"
      HAVE_DEVICECONNECT: 1
      HAVE_DEVICECONFIG: 1
      DEVICECONFIG_ADDR: "mender-deviceconfig:8080"
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    depends_on:
      mender-mongo:
        condition: service_healthy
      mender-nats:
        condition: service_healthy

  #
  # mender-create-artifact-worker
  #
  mender-create-artifact-worker:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/create-artifact-worker:${MENDER_SERVER_TAG}
    extends:
      file: common.yml
      service: mender-base
    environment:
      - CREATE_ARTIFACT_DEPLOYMENTS_URL=http://mender-deployments:8080
    networks:
      - mender
    depends_on:
      mender-mongo:
        condition: service_healthy
      mender-nats:
        condition: service_healthy

  #
  # mender-deviceconnect
  #
  mender-deviceconnect:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/deviceconnect:${MENDER_SERVER_TAG}
    command: server --automigrate
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    environment:
      DEVICECONNECT_MONGO_URL: "mongodb://mender-mongo"
      DEVICECONNECT_NATS_URI: "nats://mender-nats:4222"
    depends_on:
      mender-mongo:
        condition: service_healthy
      mender-nats:
        condition: service_healthy

  #
  # mender-deviceconfig
  #
  mender-deviceconfig:
    image: ${MENDER_SERVER_REGISTRY}/${MENDER_SERVER_REPOSITORY}/deviceconfig:${MENDER_SERVER_TAG}
    extends:
      file: common.yml
      service: mender-base
    networks:
      - mender
    command: server --automigrate
    depends_on:
      mender-mongo:
        condition: service_healthy

  mender-mongo:
    image: mongo:8.0
    extends:
      file: common.yml
      service: mender-base
    tmpfs:
      - /data/db:size=1G
    healthcheck:
      test: ["CMD", "mongosh", "mongodb://localhost:27017/test", "--quiet", "--eval", "db.runCommand('ping').ok"]
      interval: 10s
      timeout: 3s
      retries: 5
      start_period: 10s
    networks:
      mender:
        aliases:
          - mongo-tenantadm
          - mongo-deployments
          - mongo-device-auth
          - mongo-inventory
          - mongo-useradm
          - mongo-workflows

  mender-nats:
    image: nats:2.10.24-alpine
    command: ["-js", "-m", "8222"]
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:8222/healthz | grep -q 'ok'"]
      interval: 10s
      timeout: 3s
      retries: 5
      start_period: 5s
    networks:
      - mender

networks:
  mender: {}