# Wazuh App Copyright (C) 2020 Wazuh Inc. (License GPLv2)
version: '2'

services:
  wazuh:
    image: wazuh/wazuh:3.13.1_7.8.0
    hostname: wazuh-manager
    restart: always
    ports:
      - "1514:1514/udp"
      - "1515:1515"
      - "514:514/udp"
      - "55000:55000"
    volumes:
      - wazuh-data:/var/ossec/data/
#      - ./ossec:/var/ossec/:Z
#      - ./ossec/:/var/ossec/
#      - ./postfix:/etc/postfix
      

  elasticsearch:
    image: wazuh/wazuh-elasticsearch:3.13.1_7.8.0
    hostname: elasticsearch
    restart: always
    ports:
      - "9200:9200"
    environment:
      - "ES_JAVA_OPTS=-Xms1g -Xmx1g"
      - ELASTIC_CLUSTER=true
      - CLUSTER_NODE_MASTER=true
      - CLUSTER_MASTER_NODE_NAME=es01
    ulimits:
      memlock:
        soft: -1
        hard: -1
    mem_limit: 2g

  kibana:
    image: wazuh/wazuh-kibana:3.13.1_7.8.0
    hostname: kibana
    restart: always
    environment:
      - VIRTUAL_HOST=mon.franv.site
      - LETSENCRYPT_HOST=mon.franv.site
      - LETSENCRYPT_EMAIL=ouch@thetrauma.org
      - VIRTUAL_PORT=5061
    
    depends_on:
      - elasticsearch
    links:
      - elasticsearch:elasticsearch
      - wazuh:wazuh

#  nginx:
#    image: wazuh/wazuh-nginx:3.13.1_7.8.0
#    hostname: nginx
#    restart: always
#    environment:
##      - VIRTUAL_HOST=mon.franv.site
##      - LETSENCRYPT_HOST=mon.franv.site
##      - LETSENCRYPT_EMAIL=ouch@thetrauma.org
##      - VIRTUAL_PORT=443
##      - VIRTUAL_PORT=80
#
#      - NGINX_PORT=444
#      - NGINX_CREDENTIALS
#    ports:
#      - "81:80"
#      - "444:443"
#    depends_on:
#      - kibana
#    links:
#      - kibana:kibana

volumes:
  wazuh-data:
networks:
  default:
    external:
      name: franvproxy_proxy-tier