sturdymongo/docker-compose.yml at main · nfodor/sturdymongo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
version: '3.1'

secrets:
  mongo-root-passwd:
    file: mongo-root-passwd
  mongo-user-passwd:
    file: mongo-user-passwd

services:
  mongodb:
    build: .
    container_name: mongodb
    environment:
      MONGO_INITDB_ROOT_USERNAME: $MONGO_INITDB_ROOT_USER
      MONGO_INITDB_ROOT_PASSWORD_FILE: /run/secrets/mongo-root-passwd
      MONGO_USER_USERNAME: $MONGO_USER
      MONGO_USER_PASSWORD_FILE: /run/secrets/mongo-user-passwd
      MONGO_INITDB_DATABASE: $MONGO_DB

    volumes:
#      - $PWD/init-mongo.sh:/docker-entrypoint-initdb.d/init-mongo.sh
      - mongo_data:/data/db
      - mongo_journal:/data/db/journal
      - ./certs:/certs
#      - ./certs/mongodb_node_1.pem:/certs/mongodb_node_1.pem
#      - ./certs/test-ca.pem:/certs/test-ca.pem
#      - ./certs/test-client.pem:/certs/test-client.pem
#      - ./certs/test-server1.pem:/certs/test-server1.pem
#      - ./certs/ca.pem:/certs/ca.pem
      - ./init-mongo.js:/docker-entrypoint-initdb.d/init-mongo.js:ro
    secrets:
      - mongo-root-passwd
      - mongo-user-passwd
    command: ["mongod",
              "--tlsMode",
              "allowTLS",
              "--tlsCertificateKeyFile",
              "/certs/mongodb_node_1.pem",
              "--tlsCAFile",
              "/certs/ca.pem"
     ]
#      - "mongod --tlsMode requireTLS --tlsPEMKeyFile /data/certs/mongodb_node_1.pem "
      #- "mongo --tlsMode requireTLS --tlsCertificateKeyFile /data/certs/test-ca.pem --tlsCAFile /data/certs/ISRG_Root_X1.pem"
    ports:
      - "27017:27017"
volumes:
  mongo_data:
    external: true
  mongo_journal:
    external: true