macos-tools/harbor/docker-compose.yml

version: '2.3'
services:
  log:
    image: goharbor/harbor-log:v2.11.1
    container_name: harbor-log
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - DAC_OVERRIDE
      - SETGID
      - SETUID
    volumes:
      - /var/log/harbor/:/var/log/docker/:z
      - type: bind
        source: ./common/config/log/logrotate.conf
        target: /etc/logrotate.d/logrotate.conf
      - type: bind
        source: ./common/config/log/rsyslog_docker.conf
        target: /etc/rsyslog.d/rsyslog_docker.conf
    ports:
      - 127.0.0.1:1515:10514
    networks:
      - core
  registry:
    image: goharbor/registry-photon:v2.11.1
    container_name: registry
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    volumes:
      - /Users/brunogao/ops/data/harbor/registry:/storage:z
      - ./common/config/registry/:/etc/registry/:z
      - type: bind
        source: /Users/brunogao/ops/data/harbor/secret/registry/root.crt
        target: /etc/registry/root.crt
      - type: bind
        source: ./common/config/shared/trust-certificates
        target: /harbor_cust_cert
    networks:
      - core
    depends_on:
      - log
    logging:
      driver: "json-file"
  registryctl:
    image: goharbor/harbor-registryctl:v2.11.1
    container_name: registryctl
    env_file:
      - ./common/config/registryctl/env
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    volumes:
      - /Users/brunogao/ops/data/harbor/registry:/storage:z
      - ./common/config/registry/:/etc/registry/:z
      - type: bind
        source: ./common/config/registryctl/config.yml
        target: /etc/registryctl/config.yml
      - type: bind
        source: ./common/config/shared/trust-certificates
        target: /harbor_cust_cert
    networks:
      - core
    depends_on:
      - log
    logging:
      driver: "json-file"
  postgresql:
    image: goharbor/harbor-db:v2.11.1
    container_name: harbor-db
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - DAC_OVERRIDE
      - SETGID
      - SETUID
    volumes:
      - /Users/brunogao/ops/data/harbor/database:/var/lib/postgresql/data:z
    networks:
      core:
    env_file:
      - ./common/config/db/env
    depends_on:
      - log
    logging:
      driver: "json-file"
    shm_size: '1gb'
  core:
    image: goharbor/harbor-core:v2.11.1
    container_name: harbor-core
    env_file:
      - ./common/config/core/env
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
    volumes:
      - /Users/brunogao/ops/data/harbor/ca_download/:/etc/core/ca/:z
      - /Users/brunogao/ops/data/harbor/:/data/:z
      - ./common/config/core/certificates/:/etc/core/certificates/:z
      - type: bind
        source: ./common/config/core/app.conf
        target: /etc/core/app.conf
      - type: bind
        source: /Users/brunogao/ops/data/harbor/secret/core/private_key.pem
        target: /etc/core/private_key.pem
      - type: bind
        source: /Users/brunogao/ops/data/harbor/secret/keys/secretkey
        target: /etc/core/key
      - type: bind
        source: ./common/config/shared/trust-certificates
        target: /harbor_cust_cert
    networks:
      core:
    depends_on:
      - log
      - registry
      - redis
      - postgresql
    logging:
      driver: "json-file"
  portal:
    image: goharbor/harbor-portal:v2.11.1
    container_name: harbor-portal
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
      - NET_BIND_SERVICE
    volumes:
      - type: bind
        source: ./common/config/portal/nginx.conf
        target: /etc/nginx/nginx.conf
    networks:
      - core
    depends_on:
      - log
    logging:
      driver: "json-file"

  jobservice:
    image: goharbor/harbor-jobservice:v2.11.1
    container_name: harbor-jobservice
    env_file:
      - ./common/config/jobservice/env
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    volumes:
      - /Users/brunogao/ops/data/harbor/job_logs:/var/log/jobs:z
      - type: bind
        source: ./common/config/jobservice/config.yml
        target: /etc/jobservice/config.yml
      - type: bind
        source: ./common/config/shared/trust-certificates
        target: /harbor_cust_cert
    networks:
      - core
    depends_on:
      - core
    logging:
      driver: "json-file"
  redis:
    image: goharbor/redis-photon:v2.11.1
    container_name: redis
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    volumes:
      - /Users/brunogao/ops/data/harbor/redis:/var/lib/redis
    networks:
      core:
    depends_on:
      - log
    logging:
      driver: "json-file"
  proxy:
    image: goharbor/nginx-photon:v2.11.1
    container_name: nginx
    restart: always
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
      - NET_BIND_SERVICE
    volumes:
      - ./common/config/nginx:/etc/nginx:z
      - /Users/brunogao/ops/data/harbor/secret/cert:/etc/cert:z
      - type: bind
        source: ./common/config/shared/trust-certificates
        target: /harbor_cust_cert
    networks:
      - core
    ports:
      - "80:8080"
      - "443:8443"
    depends_on:
      - registry
      - core
      - portal
      - log
    logging:
      driver: "json-file"
networks:
  core:
    driver: bridge