version: "3.2"

services:
  puppet:
    image: puppet/puppetserver:2.7.2
    hostname: puppet
    networks:
      - internal
    ports:
      - target: 8140
        published: 8140
        protocol: tcp
        mode: ingress
    environment:
      - "MODE=swarm"
    volumes:
      - /docker/puppetlabs/puppet/code:/etc/puppetlabs/code:ro
      - /docker/puppetlabs/puppet/ssl:/etc/puppetlabs/puppet/ssl
    deploy:
      replicas: 2
      restart_policy:
        condition: on-failure

  postgres:
    image: puppet/puppetdb-postgres:latest
    networks:
      internal:
        aliases:
          - postgres
    environment:
      - "POSTGRES_PASSWORD=puppetdb"
      - "POSTGRES_USER=puppetdb"
    volumes:
      - /docker/puppetlabs/postgres/data:/var/lib/postgresql/data/
    deploy:
      restart_policy:
        condition: on-failure

  puppetdb:
    image: puppet/puppetdb:4.3.0
    hostname: puppetdb
    networks:
      - internal
    depends_on:
      - puppet
      - postgres
    volumes:
      - /docker/puppetlabs/puppetdb/ssl:/etc/puppetlabs/puppet/ssl
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure

  puppetboard:
    image: terzom/puppetboard:latest
    networks:
      - internal
      - proxy
    environment:
      - "PUPPETDB_HOST=puppetdb"
      - "PUPPETDB_PORT=8080"
      - "PUPPETDB_SSL_VERIFY=False"
      - "ENABLE_CATALOG=True"
      - "GRAPH_FACTS='architecture,puppetversion,osfamily,rubyversion,operatingsystem,kernelmajversion'"
    depends_on:
      - puppetdb
    deploy:
      labels:
        com.df.notify: 'true'
        com.df.distribute: 'true'
        com.df.servicePath: /
        com.df.reqPathReplace: /
        com.df.reqPathSearch: /
        com.df.port: 80
        com.df.serviceDomain: puppetboard,puppetboard.internal.terzo.org
        com.df.serviceDomainMatchAll: 'false'
      replicas: 2
      restart_policy:
        condition: on-failure

networks:
  internal:
    driver: overlay
    ipam:
      driver: default
      config:
      - subnet: 10.1.100.0/24
  proxy:
    external: true