docker-compose.yml

#
# Apache v2 license
# Copyright (C) 2024 Intel Corporation
# SPDX-License-Identifier: Apache-2.0
#

services:
  broker:
    image: eclipse-mosquitto
    hostname: mqtt
    container_name: mqtt-broker
    volumes:
      - ../utils/mosquitto:/mosquitto/config
    ports:
      - "1883:1883"
    networks:
      - app_network

  dlstreamer-pipeline-server:
    image: ${DLSTREAMER_PIPELINE_SERVER_IMAGE}
    hostname: dlstreamer-pipeline-server
    container_name: dlstreamer-pipeline-server
    read_only: true
    security_opt:
      - no-new-privileges
    build:
      context: ..
      target: ${BUILD_TARGET}
      dockerfile: ${DLSTREAMER_PIPELINE_SERVER_DOCKERFILE}
      args:
        MSGBUS_LIB_VERSION: 4.0.0
        UTILS_LIB_VERSION: 4.0.0
        UID: ${UID}
        USER: ${PIPELINE_SERVER_USER}
        BASE_IMAGE: ${BASE_IMAGE}
        CMAKE_INSTALL_PREFIX: "/opt/intel/eii"
        no_proxy: ${no_proxy}
        http_proxy: ${http_proxy}
        https_proxy: ${https_proxy}
    privileged: false
    tty: true
    entrypoint: ["./run.sh"]
    ports:
      - '8080:8080'
      - '8554:8554'
    networks:
      - app_network
    environment:
      - S3_STORAGE_HOST=${S3_STORAGE_HOST}
      - S3_STORAGE_PORT=${S3_STORAGE_PORT}
      - S3_STORAGE_USER=${S3_STORAGE_USER}
      - S3_STORAGE_PASS=${S3_STORAGE_PASS}
      - MQTT_HOST=${MQTT_HOST}
      - MQTT_PORT=${MQTT_PORT}
      - ENABLE_RTSP=true
      - RTSP_PORT=8554
      - ENABLE_WEBRTC=true
      - WEBRTC_SIGNALING_SERVER=http://${WHIP_SERVER_IP}:${WHIP_SERVER_PORT}
      - no_proxy=$no_proxy,${RTSP_CAMERA_IP},${OTEL_COLLECTOR_HOST},${S3_STORAGE_HOST},${INFLUXDB_HOST},influxdb,minio-server
      - http_proxy=$http_proxy
      - https_proxy=$https_proxy
      - GST_DEBUG=1
      - LOG_LEVEL=${LOG_LEVEL}
      - ADD_UTCTIME_TO_METADATA=true
      - HTTPS=false # Make it "true" to enable SSL/TLS secure mode, mount the generated certificates
      - MTLS_VERIFICATION=false # if HTTPS=true, enable/disable client certificate verification for mTLS
      # Model Registry Microservice
      - MR_URL=${MR_URL}
      - MR_SAVED_MODELS_DIR=${MR_SAVED_MODELS_DIR}
      - MR_REQUEST_TIMEOUT=${MR_REQUEST_TIMEOUT}
      - MR_VERIFY_CERT=${MR_VERIFY_CERT}
      - REST_SERVER_PORT=8080
      - SERVICE_NAME=dlstreamer-pipeline-server
      - OPCUA_SERVER_IP=$OPCUA_SERVER_IP
      - OPCUA_SERVER_PORT=$OPCUA_SERVER_PORT
      - OPCUA_SERVER_USERNAME=$OPCUA_SERVER_USERNAME
      - OPCUA_SERVER_PASSWORD=$OPCUA_SERVER_PASSWORD
      - ENABLE_OPEN_TELEMETRY=${ENABLE_OPEN_TELEMETRY}
      - OTEL_COLLECTOR_HOST=${OTEL_COLLECTOR_HOST}
      - OTEL_COLLECTOR_PORT=${OTEL_COLLECTOR_PORT}
      - OTEL_EXPORT_INTERVAL_MILLIS=${OTEL_EXPORT_INTERVAL_MILLIS}
      - INFLUXDB_HOST=${INFLUXDB_HOST}
      - INFLUXDB_PORT=${INFLUXDB_PORT}
      - INFLUXDB_USER=${INFLUXDB_USER}
      - INFLUXDB_PASS=${INFLUXDB_PASS}
      # NPU related environment variables
      - ZE_ENABLE_ALT_DRIVERS=libze_intel_npu.so
    volumes:
      - "../resources:/home/pipeline-server/resources/"
      # - "../configs/default/config.json:/home/pipeline-server/config.json"
      - vol_pipeline_root:/var/cache/pipeline_root:uid=1999,gid=1999
      - "../certificates:/MqttCerts:ro"
      - "../Certificates/ssl_server/:/run/secrets/DLStreamerPipelineServer_Server:ro"
      - "../Certificates/model_registry/:/run/secrets/ModelRegistry_Server:ro"
      #  - "../user_scripts/udfs/python:/home/pipeline-server/udfs/python"
      - "/run/udev:/run/udev:ro"
      - "/dev:/dev"
      - "/tmp:/tmp"
      - "./mr_models:/home/pipeline-server/mr_models:rw"
    group_add:
      # render group ID; this variable should be exported on host before running docker compose or added to .env
      - "${RENDER_GID}"
    device_cgroup_rules:
      # Default run - device-cgroup-rule='c 189:* rmw'
      # Selective rules can be applied for deployment
      - 'c 189:* rmw'
      - 'c 209:* rmw'
      - 'a 189:* rwm'
    devices:
      # Following devices under /dev filesystem will be needed based on usecase
      # dri - GPU
      # accel - NPU
      # USB camera devices
      # Selective mount can be done for deployment as mounting whole /dev is not recommended
      - "/dev:/dev"

networks:
  app_network:
    driver: bridge

volumes:
  vol_pipeline_root:
    driver: local
    driver_opts:
      type: tmpfs
      device: tmpfs