docker-compose.admin.yml

version: "3.7"

x-restart-policy: 
  restart: &default-restart-policy unless-stopped

services:
  traefik:
    labels:
      - traefik.http.routers.traefik.service=api@internal
      - traefik.http.routers.traefik.middlewares=auth
      - traefik.http.middlewares.auth.basicauth.users=admin:${ACL_SEARCH_ADMIN_PASSWORD}
  
  flower:
    image: mher/flower:1.2
    restart: *default-restart-policy
    command: >
      celery 
      --broker=amqp://${RABBITMQ_DEFAULT_USER}:${RABBITMQ_DEFAULT_PASS}@rabbitmq:5672// 
      flower --host=0.0.0.0 --port=5555 --persistent=true --url_prefix=admin/flower
    expose:
      - 5555
    env_file:
      - ./rabbitmq/.env
    depends_on:
      - rabbitmq
    labels:
      - traefik.enable=true
      - traefik.http.routers.flower.entrypoints=websecure
      - traefik.http.routers.flower.tls=true
      - traefik.http.routers.flower.tls.certresolver=le
      - traefik.http.routers.flower.rule=PathPrefix(`/admin/flower`)
      - traefik.http.routers.flower.middlewares=auth

  dozzle:
    image: amir20/dozzle:v4.0.1
    restart: *default-restart-policy
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      DOZZLE_NO_ANALYTICS: "true"
      DOZZLE_LEVEL: DEBUG
      DOZZLE_BASE: /admin/logs
    labels:
      - traefik.enable=true
      - traefik.http.routers.dozzle.entrypoints=websecure
      - traefik.http.routers.dozzle.tls=true
      - traefik.http.routers.dozzle.tls.certresolver=le
      - traefik.http.routers.dozzle.rule=PathPrefix(`/admin/logs`)
      - traefik.http.routers.dozzle.middlewares=auth

  plausible_db:
    image: postgres:12
    restart: always
    volumes:
      - postgres-data:/var/lib/postgresql/data
    environment:
      - POSTGRES_PASSWORD=postgres

  plausible_events_db:
    image: yandex/clickhouse-server:21.3.2.5
    restart: always
    volumes:
      - event-data:/var/lib/clickhouse
      - ./clickhouse/clickhouse-config.xml:/etc/clickhouse-server/config.d/logging.xml:ro
      - ./clickhouse/clickhouse-user-config.xml:/etc/clickhouse-server/users.d/logging.xml:ro
    ulimits:
      nofile:
        soft: 262144
        hard: 262144

  plausible:
    image: plausible/analytics:latest
    restart: always
    command: sh -c "sleep 10 && /entrypoint.sh db createdb && /entrypoint.sh db migrate && /entrypoint.sh db init-admin && /entrypoint.sh run"
    depends_on:
      - plausible_db
      - plausible_events_db
    env_file:
      - ./plausible/.env
    labels:
      - traefik.enable=true
      - traefik.http.routers.plausible.entrypoints=websecure
      - traefik.http.routers.plausible.tls=true
      - traefik.http.routers.plausible.tls.certresolver=le
      - traefik.http.routers.plausible.rule=Host(`analytics.aclsear.ch`)
      # - traefik.http.routers.plausible.middlewares=auth

volumes:
  postgres-data:
    driver: local
  event-data:
    driver: local