Repository navigation
Expand file tree
/
Copy pathdocker-compose.storage.yml
More file actions
158 lines (150 loc) · 4.11 KB
/
Copy pathdocker-compose.storage.yml
File metadata and controls
158 lines (150 loc) · 4.11 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
version: '3.8'
services:
# Neo4j Graph Database for Indexer Layer
neo4j:
image: neo4j:5.15-community
container_name: drp-neo4j
ports:
- "7474:7474" # HTTP
- "7687:7687" # Bolt
environment:
- NEO4J_AUTH=neo4j/${DRP_NEO4J_PASSWORD:-YOUR_NEO4J_PASSWORD_HERE}
- NEO4J_PLUGINS=["apoc"]
- NEO4J_dbms_security_procedures_unrestricted=apoc.*
- NEO4J_dbms_security_procedures_allowlist=apoc.*
- NEO4J_dbms_memory_heap_initial__size=512m
- NEO4J_dbms_memory_heap_max__size=2G
- NEO4J_dbms_memory_pagecache_size=1G
volumes:
- neo4j_data:/data
- neo4j_logs:/logs
- neo4j_import:/var/lib/neo4j/import
- neo4j_plugins:/plugins
networks:
- drp-storage-network
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "cypher-shell -u neo4j -p \"$${DRP_NEO4J_PASSWORD:-YOUR_NEO4J_PASSWORD_HERE}\" \"RETURN 1\""]
interval: 30s
timeout: 10s
retries: 3
# IPFS Node for Proof Storage
ipfs:
image: ipfs/kubo:latest
container_name: drp-ipfs
ports:
- "4001:4001" # IPFS swarm
- "5001:5001" # IPFS API
- "8080:8080" # IPFS Gateway
environment:
- IPFS_PROFILE=server
volumes:
- ipfs_data:/data/ipfs
networks:
- drp-storage-network
restart: unless-stopped
healthcheck:
test: ["CMD", "ipfs", "id"]
interval: 30s
timeout: 10s
retries: 3
# Cassandra (wide-column) for off-chain indexing / analytics (NO secrets, no raw evidence on-chain)
cassandra:
image: cassandra:5.0
container_name: drp-cassandra
ports:
- "9042:9042" # CQL
environment:
- CASSANDRA_CLUSTER_NAME=drp
- CASSANDRA_DC=dc1
- CASSANDRA_RACK=rack1
- CASSANDRA_ENDPOINT_SNITCH=GossipingPropertyFileSnitch
- MAX_HEAP_SIZE=1G
- HEAP_NEWSIZE=256M
volumes:
- cassandra_data:/var/lib/cassandra
networks:
- drp-storage-network
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "cqlsh -e \"DESCRIBE KEYSPACES\" 127.0.0.1 9042 >/dev/null 2>&1 || exit 1"]
interval: 30s
timeout: 10s
retries: 10
# Redis for caching and session management
redis:
image: redis:7-alpine
container_name: drp-redis
ports:
- "6379:6379"
volumes:
- redis_data:/data
networks:
- drp-storage-network
restart: unless-stopped
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 30s
timeout: 10s
retries: 3
# Prometheus for monitoring
prometheus:
image: prom/prometheus:latest
container_name: drp-prometheus
ports:
- "9090:9090"
volumes:
- ./scripts/monitoring/prometheus.yml:/etc/prometheus/prometheus.yml
- prometheus_data:/prometheus
command:
- '--config.file=/etc/prometheus/prometheus.yml'
- '--storage.tsdb.path=/prometheus'
- '--web.console.libraries=/etc/prometheus/console_libraries'
- '--web.console.templates=/etc/prometheus/consoles'
- '--storage.tsdb.retention.time=200h'
- '--web.enable-lifecycle'
networks:
- drp-storage-network
restart: unless-stopped
# Grafana for visualization
grafana:
image: grafana/grafana:latest
container_name: drp-grafana
ports:
- "3000:3000"
environment:
- GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD:-YOUR_GRAFANA_ADMIN_PASSWORD_HERE}
volumes:
- grafana_data:/var/lib/grafana
- ./scripts/monitoring/grafana/dashboards:/etc/grafana/provisioning/dashboards
- ./scripts/monitoring/grafana/datasources:/etc/grafana/provisioning/datasources
networks:
- drp-storage-network
restart: unless-stopped
depends_on:
- prometheus
volumes:
neo4j_data:
driver: local
neo4j_logs:
driver: local
neo4j_import:
driver: local
neo4j_plugins:
driver: local
ipfs_data:
driver: local
cassandra_data:
driver: local
redis_data:
driver: local
prometheus_data:
driver: local
grafana_data:
driver: local
networks:
drp-storage-network:
driver: bridge
ipam:
config:
- subnet: 172.20.0.0/16