ORY Stack

gistfile1.txt

version: '3.3'

networks:
  vpcbr:
    driver: bridge
    ipam:
      config:
        - subnet: 10.11.0.0/24

services:
  psql:
    image: postgres:13.2
    restart: unless-stopped
    environment:
      - POSTGRES_USER=ory-user
      - POSTGRES_PASSWORD=ory-pass
      - POSTGRES_DB=ory-data
      - PGDATA=/mnt/data/psql/data
      - PGPORT=5435
      - POSTGRES_INITDB_WALDIR=/mnt/data/psql/wal
    ports:
      - 5435:5435
    volumes:
     - type: bind
       source: ./psql/data
       target: /mnt/data/psql/data
     - type: bind
       source: ./psql/wal
       target: /mnt/data/psql/wal
    networks:
      vpcbr:
        ipv4_address: 10.11.0.2
  keto-migrate:
    depends_on:
      - psql
    image: oryd/keto:v0.8.0-alpha.0
    restart: on-failure
    command:
       migrate up -c /etc/config/keto/keto.yml --yes
    environment:
      - DSN=postgres://ory-user:ory-pass@psql:5435/ory-data?sslmode=disable&max_conns=20&max_idle_conns=4
    volumes:
     - type: bind
       source: ./configs/keto
       target: /etc/config/keto
     - type: bind
       source: ./configs/keto_namespaces
       target: /keto_namespaces
    networks:
      vpcbr:
        ipv4_address: 10.11.0.3

  keto:
     depends_on:
       - keto-migrate
     image: oryd/keto:v0.8.0-alpha.0
     restart: unless-stopped
     command:
       serve -c /etc/config/keto/keto.yml all
     environment:
       - DSN=postgres://ory-user:ory-pass@psql:5435/ory-data?sslmode=disable&max_conns=20&max_idle_conns=4
       - LOG_LEAK_SENSITIVE_VALUES=true
       - LOG_LEVEL=trace
       - TRACING_PROVIDER=jaeger
       - TRACING_SERVICE_NAME=Keto
       - TRACING_PROVIDER_JAEGER_SAMPLING_SERVER_URL=http://jaeger:5778/sampling
       - TRACING_PROVIDER_JAEGER_LOCAL_AGENT_ADDRESS=jaeger:6831
       - TRACING_PROVIDER_JAEGER_SAMPLING_TYPE=const
       - TRACING_PROVIDER_JAEGER_SAMPLING_VALUE=1
     volumes:
      - type: bind
        source: ./configs/keto
        target: /etc/config/keto
      - type: bind
        source: ./configs/keto_namespaces
        target: /keto_namespaces
     ports:
       - 4466:4466
       - 4467:4467
     networks:
       vpcbr:
         ipv4_address: 10.11.0.4
  jaeger:
    image: jaegertracing/all-in-one:1.22
    ports:
      - 16686:16686
    networks:
      vpcbr:
        ipv4_address: 10.11.0.5