SIEM_dashboard/docker-compose.yml at master · omarirfa/SIEM_dashboard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
services:
  quickwit:
    image: quickwit/quickwit:0.8.1
    command: ["run"]
    ports:
      - "7280:7280"          # REST API + built-in search UI
    volumes:
      - qwdata:/quickwit/qwdata
    environment:
      - NO_COLOR=1

  ollama:
    image: ollama/ollama:latest
    ports:
      - "11434:11434"
    volumes:
      - ollama:/root/.ollama

  # Live web console (Dash)
  dashboard:
    build: .
    command: ["dashboard"]
    ports:
      - "8050:8050"
    environment:
      - QUICKWIT_URL=http://quickwit:7280
      - OLLAMA_URL=http://ollama:11434
    depends_on:
      setup:
        condition: service_completed_successfully

  # create the `logs` and `triage_alerts` indexes
  setup:
    build: .
    command: ["setup"]
    environment:
      - QUICKWIT_URL=http://quickwit:7280
    depends_on:
      - quickwit
    restart: "no"

  triage:
    build: .
    command: ["triage"]
    environment:
      - QUICKWIT_URL=http://quickwit:7280
      - OLLAMA_URL=http://ollama:11434
      - OLLAMA_MODEL=${OLLAMA_MODEL:-gemma4:e4b}
    depends_on:
      setup:
        condition: service_completed_successfully
      ollama:
        condition: service_started


  eforge-ingest:
    build: .
    profiles: ["eforge"]
    command: ["ingest-eforge", "/data", "--replay", "--speed", "120"]
    environment:
      - QUICKWIT_URL=http://quickwit:7280
    volumes:
      - ./eforge-output:/data:ro
    depends_on:
      setup:
        condition: service_completed_successfully

volumes:
  qwdata:
  ollama: