docker-compose.yml

services:
  mongodb:
    image: "mongo:7.0"
    expose:
      - "27017:27017"
    restart: "on-failure"
    networks:
      - graylog
    volumes:
      - "mongodb_data:/data/db"
  datanode:
    image: "graylog/graylog-datanode:6.1.4"
    hostname: "datanode"
    depends_on:
      - "mongodb"
    environment:
      GRAYLOG_DATANODE_NODE_ID_FILE: "/var/lib/graylog-datanode/node-id"
      GRAYLOG_DATANODE_PASSWORD_SECRET: "<redacted>"
      GRAYLOG_DATANODE_ROOT_PASSWORD_SHA2: "<redacted>"
      GRAYLOG_DATANODE_MONGODB_URI: "mongodb://mongodb:27017/graylog"
    ulimits:
      memlock:
        hard: -1
        soft: -1
      nofile:
        soft: 65536
        hard: 65536
    ports:
      - "8999:8999/tcp"
      - "9200:9200/tcp"
      - "9300:9300/tcp"
    networks:
      - graylog
      - nginx-proxy
    volumes:
      - "graylog-datanode:/var/lib/graylog-datanode"
    restart: "on-failure"
  graylog:
    hostname: "server"
    image: "graylog/graylog:6.1.4"
    depends_on:
      mongodb:
        condition: "service_started"
    entrypoint: "/usr/bin/tini -- /docker-entrypoint.sh"
    environment:
      GRAYLOG_NODE_ID_FILE: "/usr/share/graylog/data/data/node-id"
      GRAYLOG_HTTP_BIND_ADDRESS: "0.0.0.0:9000"
      GRAYLOG_MONGODB_URI: "mongodb://mongodb:27017/graylog"
      #GRAYLOG_REPORT_DISABLE_SANDBOX: "true"
      GRAYLOG_PASSWORD_SECRET: "<redacted>"
      GRAYLOG_ROOT_PASSWORD_SHA2: "<redacted>"
      #GRAYLOG_HTTP_EXTERNAL_URI: "http://127.0.0.1:9000/"
      GRAYLOG_HTTP_EXTERNAL_URI: "<redacted>"
      GRAYLOG_HTTP_PUBLISH_URI: "<redacted>"
      #GRAYLOG_HTTP_ENABLE_CORS: true
      GRAYLOG_DATANODE_HTTP_URI: "http://datanode:9200/"
    ports:
      # Beats
      - "5044:5044/tcp"
      # Syslog TCP
      - "5140:5140/tcp"
      # Syslog UDP
      - "5140:5140/udp"
      # RAW TCP
      - "5555:5555/tcp"
      # RAW UDP
      - "5555:5555/udp"
      # Graylog web interface and REST API
      - "9000:9000/tcp"
      # GELF TCP
      - "12201:12201/tcp"
      # GELF UDP
      - "12201:12201/udp"
      # Forwarder data
      - "13301:13301/tcp"
      # Forwarder config
      - "13302:13302/tcp"
    restart: "on-failure"
    networks:
      - graylog
      - nginx-proxy
    volumes:
      - "graylog_data:/usr/share/graylog/data/data"
      - "graylog_journal:/usr/share/graylog/data/journal"
networks:
  graylog:
    driver: "bridge"
  nginx-proxy:
    external: true


volumes:
  mongodb_data:
  graylog-datanode:
  graylog_data:
  graylog_journal: