@@ -38,15 +38,11 @@ services:
3838 user : " 0"
3939 environment :
4040 - ELASTIC_PASSWORD=secretsecret
41- - KIBANA_PASSWORD=${KIBANA_PASSWORD:-kibanakibana}
4241 command : >
4342 bash -c '
4443 if [ x$${ELASTIC_PASSWORD} == x ]; then
4544 echo "Set the ELASTIC_PASSWORD environment variable";
4645 exit 1;
47- elif [ x$${KIBANA_PASSWORD} == x ]; then
48- echo "Set the KIBANA_PASSWORD environment variable";
49- exit 1;
5046 fi;
5147 if [ ! -f config/certs/ca.zip ]; then
5248 echo "Creating CA";
@@ -67,28 +63,19 @@ services:
6763 bin/elasticsearch-certutil cert --silent --pem -out config/certs/certs.zip --in config/certs/instances.yml --ca-cert config/certs/ca/ca.crt --ca-key config/certs/ca/ca.key;
6864 unzip config/certs/certs.zip -d config/certs;
6965 fi
70- echo "Setting file permissions"
66+ echo "Setting cert file permissions (give read permission to all users -- may not be suitable for production) "
7167 chown -R root:root config/certs;
72- find . -type d -exec chmod 750 \{\} \;;
73- find . -type f -exec chmod 640 \{\} \;;
74- echo "Waiting for Elasticsearch availability";
75- until curl -s --cacert config/certs/ca/ca.crt https://elastic8:9200 | grep -q "missing authentication credentials"; do sleep 1; done;
76- echo "Setting kibana_system password";
77- until curl -s -X POST --cacert config/certs/ca/ca.crt -u "elastic:$${ELASTIC_PASSWORD}" -H "Content-Type: application/json" https://elastic8:9200/_security/user/kibana_system/_password -d "{\"password\":\"$${KIBANA_PASSWORD}\"}" | grep -q "^{}"; do sleep 1; done;
68+ find . -type d -exec chmod 755 \{\} \;;
69+ find . -type f -exec chmod 644 \{\} \;;
7870 echo "All done!";
7971 '
80- healthcheck :
81- test : ["CMD-SHELL", "[ -f config/certs/singlenode/singlenode.crt ]"]
82- interval : 1s
83- timeout : 5s
84- retries : 120
8572 networks :
8673 - share_network
8774
8875 elastic8 :
8976 depends_on :
9077 elastic8_setup :
91- condition : service_healthy
78+ condition : service_completed_successfully
9279 image : docker.elastic.co/elasticsearch/elasticsearch:8.18.3
9380 ports :
9481 - 9208:9200
@@ -115,7 +102,7 @@ services:
115102 - share_network
116103
117104 rabbitmq :
118- image : rabbitmq:management
105+ image : rabbitmq:3.8- management
119106 ports :
120107 - 5673:5672
121108 - 15673:15672
@@ -165,8 +152,7 @@ services:
165152 context : .
166153 dockerfile : Dockerfile
167154 target : dev
168- command :
169- /bin/bash -c 'cp -r /elastic8_certs /elastic_certs && chown -R daemon:daemon /elastic_certs/ && /usr/local/bin/celery --app project worker --uid daemon -l INFO'
155+ command : /usr/local/bin/celery --app project worker --uid daemon -l INFO
170156 depends_on :
171157 - postgres
172158 - rabbitmq
@@ -181,7 +167,7 @@ services:
181167 - .docker-compose.env
182168 environment :
183169 - ELASTICSEARCH8_SECRET=secretsecret
184- - ELASTICSEARCH8_CERT_PATH=/elastic_certs /ca/ca.crt
170+ - ELASTICSEARCH8_CERT_PATH=/elastic8_certs /ca/ca.crt
185171 stdin_open : true
186172 networks :
187173 - share_network
0 commit comments