feat(compose): remove version strings as they are deprecated since new compose version

docker-compose-apps.yaml

@@ -1,311 +1,310 b''
-version: '3.9'
 
 x-logging: &custom-logging
   # docker plugin install grafana/loki-docker-driver:2.7.1 --alias loki --grant-all-permissions
   # NOTE: loki logging driver ONLY works for host type networks...
   driver: loki
   options:
     #loki-url: "http://${RC_LOKI_AUTH}loki:3100/loki/api/v1/push"
     loki-url: "http://${RC_LOKI_AUTH}127.0.0.1:3100/loki/api/v1/push"
     loki-retries: "5"
     loki-timeout: "1s"
     loki-max-backoff: "800ms"
 
 
 services:
 
   # base shared options for RhodeCode type services
   common_base:
     image: rhodecode/rhodecode-${RC_EDITION}:${RC_VERSION:-4.28.0}
     stdin_open: true
     tty: true
     restart: always
     deploy:
       # override this in .custom/docker-compose-apps.override.yaml to scale up
       replicas: 0
     networks:
       - rhodecode_network
     extra_hosts:
       - "host.docker.internal:host-gateway"
     volumes:
       - confvolume:/etc/rhodecode/conf
       - rc_reposvolume:/var/opt/rhodecode_repo_store
       - rc_datavolume:/var/opt/rhodecode_data
     logging:
       *custom-logging
 
   # base definition WITHOUT labels to full control over override and custom service
   # main rhodecode will use extends + service from that base
   rhodecode_base:
     extends:
       service: common_base
 
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
 
     command: [
       "/usr/local/bin/rhodecode_bin/bin/gunicorn",
       "--error-logfile=-",
       "--paster=/etc/rhodecode/conf/rhodecode.ini",
       "--config=/etc/rhodecode/conf/gunicorn_conf_rc.py"
     ]
 
     build:
       context: .
       dockerfile: service/rhodecode/rhodecode_5.dockerfile
       args:
         TZ: ${TZ:-UTC}
         RHODECODE_VERSION: ${RC_VERSION:-4.28.0}
         RHODECODE_DB: postgresql://rhodecode:${DB_PASSWORD:?must-specify-db-password}@database/${DB_NAME:?must-specify-db-name}
         RHODECODE_USER_NAME: ${RHODECODE_USER_NAME}
         RHODECODE_USER_PASS: ${RHODECODE_USER_PASS}
         RHODECODE_USER_EMAIL: ${RHODECODE_USER_EMAIL}
 
     environment:
       RC_APP_TYPE: rhodecode_http
       RC_APP_PROC: 1
       RC_APP_PORT: "10020"
       SSL_CERT_FILE: "/etc/rhodecode/conf/ca-bundle.crt"
       REQUESTS_CA_BUNDLE: "/etc/rhodecode/conf/ca-bundle.crt"
       GIT_SSL_CAINFO: "/etc/rhodecode/conf/ca-bundle.crt"
       GEVENT_RESOLVER: "ares"
       GUNICORN_CMD_ARGS: "--bind=0.0.0.0:10020 --name=gunicorn-rhodecode-1 --workers=2"
 
       DB_UPGRADE: 1  # run the DB upgrade
       SETUP_APP: 1 # run the application default settings setup, can be turned off after initial run
       #FORCE_DB_INIT_FILE: 1 # force the database init, warning: destroys old DB
       #FORCE_RC_SETUP_APP: 1 # force running setup scripts for configuration/license application
       MAIN_INI_PATH: /etc/rhodecode/conf/rhodecode.ini
 
       # SVN Specific
       MOD_DAV_SVN_PORT: 8090
       MOD_DAV_SVN_LOG_LEVEL: info
       APACHE_LOG_DIR: /var/log
       MOD_DAV_SVN_CONF_FILE: /etc/rhodecode/conf/svn/mod_dav_svn.conf
 
     healthcheck:
       test: curl -A RhodeCode-Healthcheck -s -o /dev/null -w '%{http_code}' http://127.0.0.1:$${RC_APP_PORT}/_admin/ops/ping
       # requires docker engine 25
       #start_period: 2m
       #start_interval: 5s
       interval: 60s
       timeout: 30s
       retries: 10
 
     tmpfs:
       - /data_ramdisk:size=${RC_DATA_RAMDISK_SIZE:-256M}
 
   rhodecode:
 #    depends_on:
 #      - redis
 #      - database
 #      - channelstream
 #    ports:
 #      - "127.0.0.1::10020"
     extends:
       service: rhodecode_base
 
     deploy:
       # override this in .custom/docker-compose-apps.override.yaml to scale up
       # replicas of rhodecode and vcsserver should be equal in most cases
       replicas: 1
 
     volumes:
       - ./.custom/static_files:/var/opt/rhodecode_static_data
 
     labels:
       - "autoheal=true"
       - "traefik.enable=true"
       - "traefik.http.routers.rhodecode.entrypoints=http"
       - "traefik.http.routers.rhodecode.priority=10"
       - "traefik.http.routers.rhodecode.rule=Host(`${RC_HOSTNAME:?must-specify-rhodecode-hostname}`)"
       - "traefik.http.routers.rhodecode.service=rhodecode-web"
       - "traefik.http.services.rhodecode-web.loadbalancer.server.port=10020"
       # HTTP + SSL example, should be put into .custom/docker-compose-apps.override.yaml
       #- "traefik.http.routers.rhodecode.entrypoints=http,https"
 
   vcsserver:
 #    depends_on:
 #      - redis
 #    ports:
 #      - "127.0.0.1::10010"
     extends:
       service: common_base
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
     command: [
        "/usr/local/bin/rhodecode_bin/vcs_bin/gunicorn",
        "--error-logfile=-",
        "--paster=/etc/rhodecode/conf/vcsserver.ini",
        "--config=/etc/rhodecode/conf/gunicorn_conf_vcs.py"
     ]
     deploy:
       # override this in .custom/docker-compose-apps.override.yaml to scale up
       # replicas of rhodecode and vcsserver should be equal in most cases
       replicas: 1
     environment:
       RC_APP_TYPE: rhodecode_vcsserver
       RC_APP_PROC: 1
       RC_APP_PORT: "10010"
       MAIN_INI_PATH: /etc/rhodecode/conf/vcsserver.ini
       SSL_CERT_FILE: "/etc/rhodecode/conf/ca-bundle.crt"
       REQUESTS_CA_BUNDLE: "/etc/rhodecode/conf/ca-bundle.crt"
       GIT_SSL_CAINFO: "/etc/rhodecode/conf/ca-bundle.crt"
       GUNICORN_CMD_ARGS: "--bind=0.0.0.0:10010 --name=gunicorn-vcsserver-1 --workers=3"
 
     healthcheck:
       test: curl -A RhodeCode-Healthcheck -s -o /dev/null -w '%{http_code}' http://127.0.0.1:$${RC_APP_PORT}/status
       timeout: 30s
       start_period: 5s
       interval: 60s
       retries: 10
     labels:
       - "autoheal=true"
 
   celery:
     extends:
       service: common_base
 #    depends_on:
 #      - database
 #      - redis
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
     command: [
         "/usr/local/bin/rhodecode_bin/bin/celery",
         "--no-color",
         "--app=rhodecode.lib.celerylib.loader",
         "worker",
         "--autoscale=10,2",
         "--max-tasks-per-child=150",
         "--hostname=rc-celery-worker@%h",
         "--task-events",
         "--loglevel=DEBUG",
         "--ini=/etc/rhodecode/conf/rhodecode.ini"
     ]
     deploy:
       # override this in .custom/docker-compose-apps.override.yaml to scale up
       replicas: 1
     environment:
       RC_APP_TYPE: rhodecode_celery
       RC_APP_PROC: 1
       MAIN_INI_PATH: /etc/rhodecode/conf/rhodecode.ini
       SSL_CERT_FILE: "/etc/rhodecode/conf/ca-bundle.crt"
       REQUESTS_CA_BUNDLE: "/etc/rhodecode/conf/ca-bundle.crt"
       GIT_SSL_CAINFO: "/etc/rhodecode/conf/ca-bundle.crt"
     labels:
       - "autoheal=true"
 
   celery-beat:
     extends:
       service: common_base
 #    depends_on:
 #      - database
 #      - redis
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
     command: [
       "/usr/local/bin/rhodecode_bin/bin/celery",
       "--no-color",
       "--app=rhodecode.lib.celerylib.loader",
       "beat",
       "--scheduler=rhodecode.lib.celerylib.scheduler.RcScheduler",
       "--loglevel=DEBUG",
       "--ini=/etc/rhodecode/conf/rhodecode.ini"
     ]
     deploy:
       # override this in .custom/docker-compose-apps.override.yaml to scale up
       replicas: 1
     environment:
       RC_APP_TYPE: rhodecode_beat
       RC_APP_PROC: 1
       MAIN_INI_PATH: /etc/rhodecode/conf/rhodecode.ini
       SSL_CERT_FILE: "/etc/rhodecode/conf/ca-bundle.crt"
       REQUESTS_CA_BUNDLE: "/etc/rhodecode/conf/ca-bundle.crt"
       GIT_SSL_CAINFO: "/etc/rhodecode/conf/ca-bundle.crt"
     labels:
       - "autoheal=true"
 
   svn:
     extends:
       service: common_base
 #    depends_on:
 #      - database
 #      - redis
 
 #    build:
 #      context: .
 #      dockerfile: service/svn/rhodecode_svn.dockerfile
 #      args:
 #        APACHE_VER: 1.3
 
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
     command: [
         "apachectl",
         "-D",
         "FOREGROUND"
     ]
     deploy:
       # override this in .custom/docker-compose-apps.override.yaml to scale up
       replicas: 1
     environment:
       RC_APP_TYPE: rhodecode_svn
 
       # SVN Specific
       APACHE_LOG_DIR: /var/log
 
       MOD_DAV_SVN_PORT: 8090
       MOD_DAV_SVN_LOG_LEVEL: info
       MOD_DAV_SVN_CONF_FILE: /etc/rhodecode/conf/svn/mod_dav_svn.conf
       # image specific, can be skipped, as the info is stored inside the image
       #MOD_DAV_CORE_MODULES_DIR: /home/rhodecode/apache2/modules/
       #MOD_DAV_SVN_MODULE: /home/rhodecode/apache2/modules/mod_dav.so
 
     healthcheck:
       test: curl -A RhodeCode-Healthcheck -s -o /dev/null -w '%{http_code}' http://127.0.0.1:$${MOD_DAV_SVN_PORT}/_server_status
       timeout: 30s
       interval: 60s
       retries: 10
 #    ports:
 #      - "127.0.0.1::8090"
     labels:
       - "autoheal=true"
 
   sshd:
     extends:
       service: common_base
 #    depends_on:
 #      - database
 #      - redis
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
     command: [
         "/usr/sbin/sshd",
         "-f",
         "/etc/rhodecode/sshd_config",
         "-D",
         "-e"
     ]
     deploy:
       # override this in .custom/docker-compose-apps.override.yaml to scale up
       replicas: 1
     environment:
       RC_APP_TYPE: rhodecode_sshd
       SSH_BOOTSTRAP: 1
       SSH_ENSURE_PERMS: 1
     healthcheck:
       # we call ssh internally, to find permission denied, if SSH is DOWN it would be connection refused
       test: /usr/bin/ssh -p$${RC_SSH_PORT} -o StrictHostKeyChecking=no -o PasswordAuthentication=No rhodecode@localhost true 2>&1 | grep -c 'Permission denied' > /dev/null
       timeout: 30s
       interval: 60s
       retries: 10
 #    ports:
 #      # 9022 is set from .env file too.
 #      - "9022:$RC_SSH_PORT"
     labels:
       - "autoheal=true"
       - "traefik.enable=true"
       - "traefik.tcp.routers.sshd.entrypoints=ssh"
       - "traefik.tcp.routers.sshd.rule=HostSNI(`*`)"
       - "traefik.tcp.routers.sshd.service=rhodecode-ssh"
       - "traefik.tcp.services.rhodecode-ssh.loadbalancer.server.port=${RC_SSH_PORT}"

docker-compose-base.yaml

@@ -1,48 +1,47 b''
-version: '3.9'
 
 ## Shared base stuff for all compose files in stack
 
 x-logging: &custom-logging
   # Install loki plugin
   # docker plugin install grafana/loki-docker-driver:2.7.1 --alias loki --grant-all-permissions
   # NOTE: loki logging driver ONLY works for host type networks...
   # To cleanly uninstall the plugin, disable and remove it
   # docker plugin disable loki --force && docker plugin rm loki
   # debug: sudo journalctl -u docker.service | grep loki
   driver: loki
   options:
     #loki-url: "http://${RC_LOKI_AUTH}loki:3100/loki/api/v1/push"
     loki-url: "http://${RC_LOKI_AUTH}127.0.0.1:3100/loki/api/v1/push"
     loki-retries: "5"
     loki-timeout: "1s"
     loki-max-backoff: "800ms"
 
 volumes:
 
   # bind-mount with configs
   confvolume:
     driver: local
     driver_opts:
      type: none
      o: bind
      device: $PWD/config/_shared
 
   # SHARED volume for rhodecode caches, archive caches, nginx static,
   # must be run via: docker volume create --name=rc_datavolume
   rc_datavolume:
     external: true
 
   # volume for RhodeCode repo-store, it's where the repositories will be stored
   # must be run via: docker volume create --name=rc_reposvolume
   rc_reposvolume:
     external: true
 
 networks:
 
   # SHARED network for all containers
   # must be run via: docker network create --name=rhodecode_network
   rhodecode_network:
     name: rhodecode_network
     driver: bridge
     external: true
 

docker-compose-metrics.yaml

@@ -1,144 +1,143 b''
-version: '3.9'
 
 volumes:
 
   prometheus_data:
     labels:
       "keep": 1
 
   grafana_data:
     labels:
       "keep": 1
 
 services:
 
   statsd-exporter:
     image: prom/statsd-exporter:v0.26.0
     restart: always
     command: [
       '--statsd.mapping-config=/etc/statsd/statsd.yaml',
       '--statsd.listen-udp=:9125',
       '--web.listen-address=:9102'
     ]
     networks:
       - rhodecode_network
 #    ports:
 #      - "9125:9125/udp"
 #      - "9102:9102"
 
     volumes:
       - ./config/statsd-exporter:/etc/statsd
     labels:
       - "traefik.enable=false"
       - "traefik.http.services.statsd-exporter.loadbalancer.server.port=9125"
       - "traefik.http.services.statsd-exporter.loadbalancer.server.port=9102"
 
   node-exporter:
     image: prom/node-exporter:v1.7.0
     command:
       - "--path.procfs=/host/proc"
       - "--path.rootfs=/rootfs"
       - "--path.sysfs=/host/sys"
       - "--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)"
       - "--collector.systemd"
       - "--collector.processes"
     networks:
       - rhodecode_network
     pid: host
     restart: always
 #    ports:
 #      - "9100:9100"
     volumes:
       - "/proc:/host/proc:ro"
       - "/sys:/host/sys:ro"
       - "/:/rootfs:ro"
     labels:
       - "traefik.enable=false"
       - "traefik.http.services.node-exporter.loadbalancer.server.port=9100"
 
   prometheus:
     image: prom/prometheus:v2.48.1
     restart: always
     command:
       - "--config.file=/etc/prometheus/prometheus.yml"
       - "--storage.tsdb.path=/prometheus"
       - "--storage.tsdb.retention.time=24h"
       - "--web.console.libraries=/etc/prometheus/console_libraries"
       - "--web.console.templates=/etc/prometheus/consoles"
       - "--web.enable-lifecycle"
 #    ports:
 #      - "9090:9090"
     networks:
       - rhodecode_network
     extra_hosts:
       - "host.docker.internal:host-gateway"
     volumes:
       - ./config/prometheus:/etc/prometheus
       - prometheus_data:/prometheus
     labels:
       - "traefik.enable=false"
       - "traefik.http.services.prometheus.loadbalancer.server.port=9090"
 
   grafana:
     image: grafana/grafana:9.5.15
     restart: always
     environment:
       RC_DB_USER: ${DB_USER:?must-specify-db-user}
       RC_DB_PASSWORD: ${DB_PASSWORD:?must-specify-db-password}
       RC_DB_NAME: ${DB_NAME:?must-specify-db-name}
 #    ports:
 #      - "3000:3000"
     volumes:
       - grafana_data:/var/lib/grafana
       - ./config/grafana:/etc/grafana
     networks:
       - rhodecode_network
     extra_hosts:
       - "host.docker.internal:host-gateway"
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.grafana.entrypoints=http"
       - "traefik.http.routers.grafana.priority=20"
       - "traefik.http.routers.grafana.rule=Host(`${RC_HOSTNAME:?must-specify-rhodecode-hostname}`) && PathPrefix(`/_grafana`)"
       - "traefik.http.routers.grafana.service=grafana-web"
       - "traefik.http.services.grafana-web.loadbalancer.server.port=3000"
       # SSL + proxy prefix example, should be put into .custom/docker-compose-metrics.override.yaml
       #- "traefik.http.routers.grafana.entrypoints=http,https"
 
   loki:
     image: grafana/loki:2.9.3
     restart: always
 #    ports:
 #      - "3100:3100"
 #      - "9095:9095"
     command: [
       "-config.file=/etc/loki/loki-config.yaml"
     ]
     networks:
       - rhodecode_network
     extra_hosts:
       - "host.docker.internal:host-gateway"
     volumes:
       - ./config/loki:/etc/loki
       # optionally mount host container to scrape docker logs...
       # - /var/lib/docker/containers:/var/lib/docker/containers:ro
     labels:
       # Loki port is the only one that needs explicitly
       # be exposed because of logging driver host-only working mode
       - "traefik.enable=true"
       - "traefik.http.routers.loki.entrypoints=loki"
       - "traefik.http.routers.loki.rule=PathPrefix(`/`)"
       - "traefik.http.routers.loki.middlewares=basic-auth@file"
       - "traefik.http.routers.loki.service=loki-web"
       - "traefik.http.services.loki-web.loadbalancer.server.port=3100"
 
   promtail:
     image: grafana/promtail:2.9.3
     command: [
       "-config.file=/etc/promtail/promtail-config.yaml"
     ]
     networks:
       - rhodecode_network
     volumes:
       - /var/log:/var/log
       - ./config/promtail:/etc/promtail

docker-compose-router.yaml

@@ -1,48 +1,47 b''
-version: '3.9'
 
 x-logging: &custom-logging
   # docker plugin install grafana/loki-docker-driver:2.7.1 --alias loki --grant-all-permissions
   # NOTE: loki logging driver ONLY works for host type networks...
   driver: loki
   options:
     #loki-url: "http://${RC_LOKI_AUTH}loki:3100/loki/api/v1/push"
     loki-url: "http://${RC_LOKI_AUTH}127.0.0.1:3100/loki/api/v1/push"
     loki-retries: "5"
     loki-timeout: "1s"
     loki-max-backoff: "800ms"
 
 ## docker network create -d overlay lb-net
 services:
 
   traefik:
     restart: always
     image: traefik:v2.10.7
 
     ports:
       # Default ports on Edge router.
       # Format is HOST:CONTAINER
       # To modify the HOST ports only change the first parts before colon.
       #
       # The HTTP port, exposed as http entrypoint
       - "80:80"
       # The HTTPS port, exposed as https entrypoint
       - "443:443"
       # The loki port, exposed as loki entrypoint behind auth
       - "3100:3100"
       # The SSH port exposed as sshd entrypoint, default 9022
       - "${RC_SSH_PORT:-9022}:${RC_SSH_PORT:-9022}"
     volumes:
       # So that Traefik can listen to the Docker events
       - /var/run/docker.sock:/var/run/docker.sock
       - $PWD/config/traefik:/etc/traefik
       - $PWD/config/traefik/dynamic:/etc/traefik_dynamic
     deploy:
       placement:
         constraints:
           # limit swarm deploy to MANAGER only
           - node.role == manager
     networks:
       - rhodecode_network
 
 #    logging:
 #      *custom-logging

docker-compose-services.yaml

@@ -1,326 +1,325 b''
-version: '3.9'
 
 x-logging: &custom-logging
   # docker plugin install grafana/loki-docker-driver:2.7.1 --alias loki --grant-all-permissions
   # NOTE: loki logging driver ONLY works for host type networks...
   driver: loki
   options:
     #loki-url: "http://${RC_LOKI_AUTH}loki:3100/loki/api/v1/push"
     loki-url: "http://${RC_LOKI_AUTH}127.0.0.1:3100/loki/api/v1/push"
     loki-retries: "5"
     loki-timeout: "1s"
     loki-max-backoff: "800ms"
 
 volumes:
 
   # volume for redis data store
   redis_data:
     labels:
       "keep": 1
 
    # volume for Postgres db store
 
   # volume for Postgres Data
   pg_data:
     labels:
       "keep": 1
 
   # volume for rhodecode elasticsearch
   es_data:
     labels:
       "keep": 1
 
 services:
 
   channelstream:
     networks:
       - rhodecode_network
     image: channelstream/channelstream:0.7.1
 
     restart: always
 
 #    ports:
 #      - "127.0.0.1:8000:8000"
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
     command: ["channelstream"]
 
     healthcheck:
       test: curl -A RhodeCode-Healthcheck -s -o /dev/null -w '%{http_code}' http://channelstream:8000/admin/sign_in
       timeout: 30s
       start_period: 5s
       interval: 60s
       retries: 10
 
     volumes:
       - confvolume:/etc/rhodecode/conf
 
     logging:
       *custom-logging
 
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.channelstream.entrypoints=http"
       - "traefik.http.routers.channelstream.priority=20"
       - "traefik.http.routers.channelstream.rule=Host(`${RC_HOSTNAME:?must-specify-rhodecode-hostname}`) && PathPrefix(`/_channelstream`)"
       - "traefik.http.routers.channelstream.service=channelstream-web"
       - "traefik.http.routers.channelstream.middlewares=strip-cs"
       - "traefik.http.middlewares.strip-cs.stripprefix.prefixes=/_channelstream"
       - "traefik.http.services.channelstream-web.loadbalancer.server.port=8000"
       # HTTP + SSL example, should be put into .custom/docker-compose-services.override.yaml
       #- "traefik.http.routers.channelstream.entrypoints=http,https"
 
     profiles:
       ["channelstream"]
 
   nginx-statics:
 
     # used to serve static files
     networks:
       - rhodecode_network
     image: library/nginx:1.25.3
 
     restart: always
 
     environment:
       NGINX_ENTRYPOINT_QUIET_LOGS: 1
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
 
     healthcheck:
       test: curl -A RhodeCode-Healthcheck -s -o /dev/null -w '%{http_code}' --fail http://127.0.0.1:80/_health_static
       timeout: 30s
       start_period: 5s
       interval: 60s
       retries: 10
 
 #    depends_on:
 #      - channelstream
 
     volumes:
       - $PWD/config/nginx/nginx_statics.conf:/etc/nginx/nginx.conf:ro
       - $PWD/.custom/static_files:/var/opt/rhodecode_static_data
       - rc_datavolume:/var/opt/rhodecode_data
 
     logging:
       *custom-logging
 
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.nginx-statics.entrypoints=http"
       - "traefik.http.routers.nginx-statics.priority=40"
       - "traefik.http.routers.nginx-statics.rule=Host(`${RC_HOSTNAME:?must-specify-rhodecode-hostname}`) && PathPrefix(`/_static/rhodecode`, `/_pages`)"
       - "traefik.http.routers.nginx-statics.service=nginx-serv"
       - "traefik.http.services.nginx-serv.loadbalancer.server.port=80"
 
       # HTTP + SSL example, should be put into .custom/docker-compose-services.override.yaml
       #- "traefik.http.routers.nginx-statics.entrypoints=http, https"
 
   nginx-errors:
     networks:
       - rhodecode_network
     image: library/nginx:1.25.3
 
     restart: always
 
     environment:
       NGINX_ENTRYPOINT_QUIET_LOGS: 1
 
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
 
     volumes:
       - $PWD/config/nginx/nginx_errors.conf:/etc/nginx/nginx.conf:ro
       - $PWD/config/nginx/error_pages:/etc/nginx/error_pages
 
       - rc_datavolume:/var/opt/rhodecode_data
 
     labels:
       - "traefik.enable=true"
 
       # error-middleware
       - "traefik.http.middlewares.error-pages-middleware.errors.status=404"
       - "traefik.http.middlewares.error-pages-middleware.errors.service=error-pages-service"
       - "traefik.http.middlewares.error-pages-middleware.errors.query=/{status}.html"
 
       # error handling router
       - "traefik.http.routers.error-router.entrypoints=http"
       - "traefik.http.routers.error-router.priority=5"
       - "traefik.http.routers.error-router.rule=HostRegexp(`{host:.+}`)"
       - "traefik.http.routers.error-router.service=error-pages-service"
       - "traefik.http.routers.error-router.middlewares=error-pages-middleware"
 
       - "traefik.http.services.error-pages-service.loadbalancer.server.port=80"
 
       # HTTP + SSL example, should be put into .custom/docker-compose-services.override.yaml
       #- "traefik.http.routers.error-router.entrypoints=http, https"
 
   elasticsearch:
     networks:
       - rhodecode_network
     image: elasticsearch:6.8.23
     restart: always
     environment:
       - cluster.name=elasticsearch-cluster
       - network.host=0.0.0.0
       - bootstrap.memory_lock=true
       - discovery.type=single-node
       - cluster.routing.allocation.disk.threshold_enabled=false
       - cluster.name=rhodecode-elasticsearch
       - xpack.security.enabled=false
       - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
     healthcheck:
       # change port 80 to 443 when only using SSL
       test: [ "CMD", "curl", "-A", "RhodeCode-Healthcheck", "-s", "-o", "/dev/null", "-w", "'%{http_code}'", "elasticsearch:9200/_cat/health" ]
       timeout: 30s
       interval: 60s
       retries: 10
 
     # compat problems within some systems on settings those
     #ulimits:
       #memlock:
         #soft: -1
         #hard: -1
 
     volumes:
       - es_data:/usr/share/elasticsearch/data
 
     logging:
       *custom-logging
 
     profiles:
       ["elasticsearch"]
 
   redis:
     networks:
       - rhodecode_network
     image: library/redis:7.2.4
 
     restart: always
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
     command:
       - "redis-server"
       - "/etc/redis/redis.conf"
       - "--maxmemory-policy allkeys-lru"
       - "--maxmemory ${RC_REDIS_MAXMEMORY:?must-specify-redis-maxmemory}"
 
 #    ports:
 #      - "127.0.0.1::6379"
 
     healthcheck:
       test: [ "CMD", "redis-cli", "--raw", "incr", "ping" ]
       interval: 60s
 
     volumes:
       - $PWD/config/redis/redis.conf:/etc/redis/redis.conf:ro
       - redis_data:/data
 
     profiles:
       ["redis"]
 
     logging:
       *custom-logging
 
   database:
     networks:
       - rhodecode_network
     image: library/postgres:14.10
 
     environment:
       POSTGRES_DB: ${DB_NAME:?must-specify-db-name}
       POSTGRES_USER: ${DB_USER:?must-specify-db-user}
       PGUSER: ${DB_USER:?must-specify-db-user}
       POSTGRES_PASSWORD: ${DB_PASSWORD:?must-specify-db-password}
       POSTGRES_HOST_AUTH_METHOD: md5
       POSTGRES_INITDB_ARGS: "--auth-host=md5 --auth-local=md5"
     env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
 
     restart: always
     command:
       - "postgres"
       - "-c"
       - "log_statement=ddl"
       - "-c"
       - "config_file=/etc/conf.d/pg_customized.conf"
 
 #    ports:
 #      - "127.0.0.1::5432"
 
     healthcheck:
       test: ["CMD-SHELL", "pg_isready", '-U', "$DB_USER"]
       interval: 10s
       timeout: 5s
       retries: 5
 
     volumes:
       - $PWD/config/database/pg_customized.conf:/etc/conf.d/pg_customized.conf:ro
       # db dumps reverse mount
       - $PWD/.custom/db_dump:/var/rc-data-dump
       # save the pg_data volume
       - pg_data:/var/lib/postgresql/data
 
 
     profiles:
       ["postgres", "database"]
 
     logging:
       *custom-logging
 
   database-mysql:
       networks:
         - rhodecode_network
       image: library/mysql:8.0.35
 
       environment:
         MYSQL_DATABASE: ${DB_NAME:?must-specify-db-name}
         MYSQL_USER: ${DB_USER:?must-specify-db-user}
         MYSQL_PASSWORD: ${DB_PASSWORD:?must-specify-db-password}
         MYSQL_ROOT_PASSWORD: ${DB_PASSWORD:?must-specify-db-password}
       env_file:
         - ${RC_ENV_FILE:?must-specify-rc-env-file}
 
       restart: always
 
 #      ports:
 #        - "127.0.0.1::3306"
 
       volumes:
         - $PWD/config/database/mysql_customized.conf:/etc/mysql/conf.d/config-file.cnf:ro
         # save the mysql_data volume
         - $PWD/mysql_dir:/var/lib/mysql
 
       profiles:
         ["mysql"]
 
       logging:
         *custom-logging
 
   # DEBUG/DEVEL
   httpbin:
     networks:
       - rhodecode_network
     image: kennethreitz/httpbin:latest
     ports:
       # expose on 9090 to not block 80 for traefik
       - "9090:80"
     profiles:
       ["testing"]
 
     restart: always
 
   ldap-server:
     networks:
       - rhodecode_network
     image: rroemhild/test-openldap:latest
     ports:
       # expose on 10389 (ldap) 10636 (ldaps)
       - "10389:10389"
       - "10636:10636"
     profiles:
       ["testing"]
 
     restart: always
  No newline at end of file

docs/source/configuration/configuration-of-components.rst

@@ -1,111 +1,108 b''
 .. _configuration-of-components:
 
 ===========================
 Configuration of components
 ===========================
 
 
 
 
 Selecting a database type
 +++++++++++++++++++++++++
 
 By editing :file:`.custom/docker-compose-services.override.yaml`
 
 Set replicas to 1 for chosen DB type, or both to 0 if you want to run an external DB inside
 your host system.
 
 .. code-block:: yaml
 
 
-    version: '3.9'
     ## This is a final override file for services stack
     ## Add your own customizations
 
     ## docker network create -d overlay lb-net
     services:
 
       # default Postgresql DB
       database:
         # to disable set replicas to 0
         deploy:
           replicas: 1
 
       # MySQL DB
       database-mysql:
         # to disable set replicas to 0
         deploy:
           replicas: 1
 
 
 Disable Redis
 +++++++++++++
 
 
 By editing :file:`.custom/docker-compose-services.override.yaml`
 
 
 .. code-block:: yaml
 
 
-    version: '3.9'
     ## This is a final override file for services stack
     ## Add your own customizations
 
     ## docker network create -d overlay lb-net
     services:
 
       redis:
         # to disable set replicas to 0
         deploy:
           replicas: 0
 
 
 Disable ElasticSearch
 +++++++++++++++++++++
 
 ElasticSearch is used by default as a search engine.
 Elasticsearch is powerful search engine, however it generally requires a lot of resource to be functional.
 
 In case the plan is to use CE edition, or the machine is restricted with resource ElasticSearch can be disabled.
 
 By editing :file:`.custom/docker-compose-services.override.yaml`
 
 
 .. code-block:: yaml
 
 
-    version: '3.9'
     ## This is a final override file for services stack
     ## Add your own customizations
 
     ## set elasticsearch replicas to 0 to stop running it together with services stack.
     services:
 
       elasticsearch:
         # to disable set replicas to 0
         deploy:
           replicas: 0
 
 
 Elasticsearch is used by default as a search engine inside the rhodecode.ini configuration.
 So this needs to be also adjusted.
 
 
 By editing :file:`config/_shared/rhodecode.ini`
 
 Turn of ElasticSearch and enable Whoosh
 
 .. code-block:: ini
 
     ; ElasticSearch (EE edition only). Requires Elastic Search cluster
     ; to be installed, and running. Recommended for large amount of repositories
     #search.module = rc_elasticsearch
     #search.location = http://elasticsearch:9200
     ; specify Elastic Search version, 6 for latest or 2 for legacy
     #search.es_version = 6
 
     ; WHOOSH Backend, doesn't require additional services to run
     ; it works good with few dozen repos
     search.module = rhodecode.lib.index.whoosh
     search.location = /var/opt/rhodecode_data/index

templates/docker-compose-apps.override.yaml

@@ -1,110 +1,109 b''
-version: '3.9'
 
 services:
 
   rhodecode:
 
     deploy:
       # set number of instances of services to be spawned on stack start
       replicas: 1
 
     environment:
       RC_COMPOSE_OVERRIDE: 1
       #DB_UPGRADE: 0  # 1 run the DB upgrade, 0 disable db upgrade at startup
       #SETUP_APP: 0   # run the application default settings setup, can be turned off after initial run
 
 #    volumes:
 #      # mount the host dir into repo storage path on container
 #      - $PWD/rc-repos-host:/var/opt/rhodecode_repo_store
 
 #    ports:
 #      # expose port for optional direct port connection
 #      - "10020:10020"
 
 #    healthcheck:
 #      # disable the healthcheck for faster signal handling that instance is available
 #      # generally not recommended
 #      test: ['CMD','true']
 
     labels:
       - "traefik.enable=true"
 #      # Enable http+https endpoints to serve SSL, select just 1 to disable the other
 #      - "traefik.http.routers.rhodecode.entrypoints=http,https"
 
 
 
 
   vcsserver:
 
     deploy:
       # set number of instances of services to be spawned on stack start
       replicas: 1
 
     environment:
       RC_COMPOSE_OVERRIDE: 1
 
 #    volumes:
 #      # mount the host dir into repo storage path on container
 #      - $PWD/rc-repos-host:/var/opt/rhodecode_repo_store
 #      # mount your own source code
 #      - $PWD/rhodecode-enterprise-ce/:/home/rhodecode/venv/lib/python3.11/site-packages/rhodecode
 
 #    healthcheck:
 #      # disable the healthcheck for faster signal handling that instance is available
 #      # generally not recommended
 #      test: ['CMD','true']
 
   sshd:
 
     deploy:
       # set number of instances of services to be spawned on stack start
       replicas: 1
 
     environment:
       RC_COMPOSE_OVERRIDE: 1
       #SSH_BOOTSTRAP: 0  # 1 run the initials key init, 0 disable
 
 #    volumes:
 #      # mount the host dir into repo storage path on container
 #      - $PWD/rc-repos-host:/var/opt/rhodecode_repo_store
 #      # mount custom sshd_config for customization of ssh user etc
 #      - ./custom/ssh/sshd_config:/etc/rhodecode/sshd_config:ro
 
   svn:
 
     deploy:
       # set number of instances of services to be spawned on stack start
       replicas: 1
 
     environment:
       RC_COMPOSE_OVERRIDE: 1
 
 #    volumes:
 #      # mount the host dir into repo storage path on container
 #      - $PWD/rc-repos-host:/var/opt/rhodecode_repo_store
 
   celery-beat:
 
     deploy:
       # set number of instances of services to be spawned on stack start
       replicas: 1
 
     environment:
       RC_COMPOSE_OVERRIDE: 1
 
 #    volumes:
 #      # mount the host dir into repo storage path on container
 #      - $PWD/rc-repos-host:/var/opt/rhodecode_repo_store
 
   celery:
 
     deploy:
       # set number of instances of services to be spawned on stack start
       replicas: 1
 
     environment:
       RC_COMPOSE_OVERRIDE: 1
 
 #    volumes:
 #      # mount the host dir into repo storage path on container
 #      - $PWD/rc-repos-host:/var/opt/rhodecode_repo_store
  No newline at end of file

templates/docker-compose-metrics.override.yaml

@@ -1,25 +1,24 b''
-version: '3.9'
 
 services:
 
   grafana:
     labels:
       - "traefik.enable=true"
 #      # Enable http+https endpoints to serve SSL, select just 1 to disable the other
 #      - "traefik.http.routers.grafana.entrypoints=http,https"
 
   promtail:
     {}
 
   loki:
     {}
 
   prometheus:
     {}
 
   node-exporter:
     {}
 
   statsd-exporter:
     {}
 

templates/docker-compose-router.override.yaml

@@ -1,35 +1,34 b''
-version: '3.9'
 
 ## docker network create -d overlay lb-net
 services:
 
   traefik:
 #    # NOTE: the '!override' replaces the original values defined, avail on docker-compose 2.24.2+
 #    # don't use it if your compose doesn't allow this syntax
 #    ports: !override
 #      # The Web UI (enabled by --api.insecure=true)
 #      # uncomment to expose dashboard at port :7000,
 #      # this is mostly for debugging routes and services
 #      - "7000:7000"
 #      # The HTTP port, exposed as http entrypoint
 #      - "80:80"
 #      # The HTTPS port, exposed as https entrypoint
 #      - "443:443"
 #    volumes:
 #      # Bind to docker.sock that Traefik can listen to the Docker events
 #      - /var/run/docker.sock:/var/run/docker.sock
 
 #      # custom traefik config, enable SSL etc...
 #      # put your traefik setup in this directory structure, and uncomment to override
 #      # default traefik static/dynamic configs
 #      - $PWD/.custom/traefik_custom:/etc/traefik:ro
 #      - $PWD/.custom/traefik_custom/dynamic:/etc/traefik_dynamic:ro
 
 #       # Mount ACME shared json config for lets-encrypt
 #      - $PWD/.custom/traefik_custom/acme:/acme
 
     environment:
       RC_COMPOSE_OVERRIDE: 1
 
 #    labels:
 #      - "traefik.enable=true"
  No newline at end of file

templates/docker-compose-services.override.yaml

@@ -1,79 +1,78 b''
-version: '3.9'
 ## This is a final override file for services stack
 ## Add your own customizations
 
 ## docker network create -d overlay lb-net
 services:
 
   database:
     deploy:
       # to disable usage of this service using your own postgres instance set replicas to 0
       replicas: 1
     profiles:
       ["postgres", "database"]
 #    ports:
 #    # expose running db to host under 5432 port
 #      - "127.0.0.1::5432"
 
   database-mysql:
     deploy:
       # to disable usage of this service, running your own mysql instance set replicas to 0
       replicas: 1
     profiles:
       ["mysql", "database"]
 
   redis:
     # to disable usage of this service using external redis set replicas to 0
     deploy:
       replicas: 1
 
   elasticsearch:
     # to disable usage of this service using external elasticsearch set replicas to 0
     deploy:
       replicas: 1
 
   nginx-statics:
     labels:
       - "traefik.enable=true"
 #      # Enable http+https endpoints to serve SSL, select just 1 to disable the other
 #      - "traefik.http.routers.nginx-statics.entrypoints=http,https"
 
   channelstream:
     labels:
       - "traefik.enable=true"
 #      # Enable http+https endpoints to serve SSL, select just 1 to disable the other
 #      - "traefik.http.routers.channelstream.entrypoints=http,https"
 
 
   portainer:
     # Run with COMPOSE_PROFILES=portainer
     # to access portainer set separate domain for portainer
     # also needs an external new volume
     # docker volume create --label keep=1 --name=portainer_data
     image: portainer/portainer-ce:latest
     restart: always
     volumes:
       - portainer_data:/data
       - /var/run/docker.sock:/var/run/docker.sock
     deploy:
       mode: replicated
       replicas: 1
       placement:
         constraints:
           # limit swarm deploy to MANAGER only
           - node.role == manager
 
     networks:
       - rhodecode_network
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.portainer.entrypoints=https"
       - "traefik.http.routers.portainer.rule=Host(`portainer.yourdomain.com`)"
       - "traefik.http.services.portainer.loadbalancer.server.port=9000"
 
     profiles:
       ["portainer"]
 
 volumes:
   portainer_data:
     external: true