docker-compose.yml

---

version: '3.7'

services:
  grafana:
   image: grafana/grafana:8.5.4
   volumes:
     - grafana_data:/var/lib/grafana
     - ./grafana/provisioning:/etc/grafana/provisioning
   environment:
     - GF_INSTALL_PLUGINS=grafana-piechart-panel
     - GF_SERVER_ROOT_URL=https://grafana.${TRAEFIK_HOST}
   restart: unless-stopped
   networks:
     - traefik_network
   labels:
     - "org.label-schema.group=monitoring"
     - "traefik.docker.network=traefik_network"
     - "traefik.enable=true"
     - "traefik.http.routers.grafana-secure.entrypoints=https"
     - "traefik.http.routers.grafana-secure.rule=Host(`grafana.${TRAEFIK_HOST}`)"

  prometheus:
    image: prom/prometheus:v2.36.0
    container_name: prometheus
    volumes:
      - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
      - ./prometheus/rules/:/etc/prometheus/rules/
      - prometheus_data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.console.libraries=/etc/prometheus/console_libraries'
      - '--web.console.templates=/etc/prometheus/consoles'
      - '--storage.tsdb.retention.time=${PROM_RETENTION_TIME:-200h}'
      - '--web.enable-lifecycle'
      - '--web.external-url=https://prometheus.${TRAEFIK_HOST}'
    restart: unless-stopped
    networks:
      - traefik_network
    labels:
      - "org.label-schema.group=monitoring"
      - "traefik.docker.network=traefik_network"
      - "traefik.enable=true"
      - "traefik.http.routers.prometheus-secure.entrypoints=https"
      - "traefik.http.routers.prometheus-secure.rule=Host(`prometheus.${TRAEFIK_HOST}`)"
      - "traefik.http.routers.prometheus-secure.middlewares=prometheus-auth"
      - "traefik.http.middlewares.prometheus-auth.basicauth.users=${TRAEFIK_BASICAUTH}"

  alertmanager:
    image: prom/alertmanager:v0.24.0
    container_name: alertmanager
    volumes:
      - ./alertmanager/config.yml:/etc/alertmanager/config.yml
    command:
      - '--config.file=/etc/alertmanager/config.yml'
      - '--storage.path=/alertmanager'
      - '--web.external-url=https://alertmanager.${TRAEFIK_HOST}'
    restart: unless-stopped
    networks:
      - traefik_network
    labels:
      - "org.label-schema.group=monitoring"
      - "traefik.docker.network=traefik_network"
      - "traefik.enable=true"
      - "traefik.http.routers.alertmanager-secure.entrypoints=https"
      - "traefik.http.routers.alertmanager-secure.rule=Host(`alertmanager.${TRAEFIK_HOST}`)"
      - "traefik.http.routers.alertmanager-secure.middlewares=alertmanager-auth"
      - "traefik.http.middlewares.alertmanager-auth.basicauth.users=${TRAEFIK_BASICAUTH}"

  pushgateway:
    image: prom/pushgateway:v1.4.3
    container_name: pushgateway
    restart: unless-stopped
    networks:
      - traefik_network
    labels:
      - "org.label-schema.group=monitoring"

  blackboxexporter:
    image: prom/blackbox-exporter:v0.19.0
    container_name: blackboxexporter
    volumes:
    - ./blackbox_exporter:/etc/blackbox_exporter
    restart: unless-stopped
    networks:
      - traefik_network
    labels:
      - "org.label-schema.group=monitoring"
      - "traefik.docker.network=traefik_network"
      - "traefik.enable=true"
      - "traefik.http.routers.blackboxexporter-secure.entrypoints=https"
      - "traefik.http.routers.blackboxexporter-secure.rule=Host(`bbe.${TRAEFIK_HOST}`)"
      - "traefik.http.routers.blackboxexporter-secure.middlewares=blackboxexporter-auth"
      - "traefik.http.middlewares.blackboxexporter-auth.basicauth.users=${TRAEFIK_BASICAUTH}"

volumes:
  prometheus_data: {}
  grafana_data: {}

networks:
  traefik_network:
    external: true