daloradius/docker-compose.yml at master · filippolauria/daloradius · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
services:

  radius-mysql:
    image: mariadb:11.8
    container_name: radius-mysql
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - NET_RAW
    environment:
      - MYSQL_DATABASE=radius
      - MYSQL_USER=radius
      - MYSQL_PASSWORD=${MYSQL_PASSWORD:?Set MYSQL_PASSWORD in .env}
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD:?Set MYSQL_ROOT_PASSWORD in .env}
    volumes:
      - "./data/mysql:/var/lib/mysql"
      - "./var/backup:/docker-entrypoint-initdb.d:ro"
    healthcheck:
      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: ${MYSQL_HEALTH_START_PERIOD:-10m}

  radius:
    image: lirantal/dalofreeradius
    container_name: radius
    build:
      context: .
      dockerfile: Dockerfile-freeradius
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - NET_RAW
    depends_on:
      radius-mysql:
        condition: service_healthy
    ports:
      - '1812:1812/udp'
      - '1813:1813/udp'
    environment:
      - TZ=${TZ:-Europe/Vienna}
      - MYSQL_HOST=radius-mysql
      - MYSQL_PORT=3306
      - MYSQL_DATABASE=radius
      - MYSQL_USER=radius
      - MYSQL_PASSWORD=${MYSQL_PASSWORD:?Set MYSQL_PASSWORD in .env}
      - DEFAULT_CLIENT_SECRET=${DEFAULT_CLIENT_SECRET:?Set DEFAULT_CLIENT_SECRET in .env}
      - FREERADIUS_SQL_TLS=${FREERADIUS_SQL_TLS:-disabled}
    volumes:
      - ./data/freeradius:/data
      - radius_logs:/var/log/freeradius
    healthcheck:
      test: ["CMD-SHELL", "echo 'FreeRADIUS-Statistics-Type = 1' | radclient -q -r 1 -t 3 127.0.0.1:18121 status adminsecret >/dev/null"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 30s
    # Uncomment below to enable debug logging.
    #command: -X

  radius-web:
    image: lirantal/daloradius
    build: .
    container_name: radius-web
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - NET_RAW
    depends_on:
      radius-mysql:
        condition: service_healthy
      radius:
        condition: service_healthy
    ports:
      - '80:80'
      - '${DALORADIUS_OPERATORS_BIND:-127.0.0.1:8000}:8000'
    environment:
      - TZ=${TZ:-Europe/Vienna}
      - MYSQL_HOST=radius-mysql
      - MYSQL_PORT=3306
      - MYSQL_DATABASE=radius
      - MYSQL_USER=radius
      - MYSQL_PASSWORD=${MYSQL_PASSWORD:?Set MYSQL_PASSWORD in .env}
      # Optional Settings:
      - DEFAULT_CLIENT_SECRET=${DEFAULT_CLIENT_SECRET:?Set DEFAULT_CLIENT_SECRET in .env}
      - DEFAULT_FREERADIUS_SERVER=radius
      - MAIL_SMTPADDR=${MAIL_SMTPADDR:-127.0.0.1}
      - MAIL_PORT=${MAIL_PORT:-25}
      - MAIL_FROM=${MAIL_FROM:-root@daloradius.example.com}
      - MAIL_AUTH=${MAIL_AUTH:-}

    volumes:
      - ./data/daloradius:/data
      - radius_logs:/var/log/freeradius

volumes:
  radius_logs: