The Things Stack docker-compose configuration

docker-compose.yaml

#
# Ansible managed
#

version: "3.7"

secrets:
  ca.pem:
      file: /root/.acme.sh/<redacted>.org/ca.cer
  cert.pem:
      file: /root/.acme.sh/<redacted>.org/<redacted>.org.cer
  key.pem:
      file: /root/.acme.sh/<redacted>.org/<redacted>.org.key

services:
  cockroach:
    command: start --http-port 26256 --insecure
    image: cockroachdb/cockroach:v20.1.3
    ports:
    - 127.0.0.1:26257:26257
    - 127.0.0.1:26256:26256
    volumes:
    - /opt/data/ttn/cockroach:/cockroach/cockroach-data

  redis:
    command: redis-server --appendonly yes
    image: redis:5-alpine
    ports:
    - 127.0.0.1:6379:6379
    volumes:
    - /opt/data/ttn/redis:/data

  stack:
    command: start
    depends_on:
    - cockroach
    - redis
    entrypoint: ttn-lw-stack -c /config/ttn-lw-stack.yml
    environment:
        TTN_LW_BLOB_LOCAL_DIRECTORY: /srv/ttn-lorawan/public/blob
        TTN_LW_IS_DATABASE_URI: postgres://root@cockroach:26257/ttn_lorawan?sslmode=disable
        TTN_LW_REDIS_ADDRESS: redis:6379
        TTN_LW_TLS_CERTIFICATE: /run/secrets/cert.pem
        TTN_LW_TLS_KEY: /run/secrets/key.pem
        TTN_LW_TLS_ROOT_CA: /run/secrets/ca.pem
    image: thethingsnetwork/lorawan-stack:3.8.4
    ports:
    - 1881:1881
    - 8881:8881
    - 1882:1882
    - 8882:8882
    - 1883:1883
    - 8883:8883
    - 1884:1884
    - 8884:8884
    - 1885:1885
    - 8885:8885
    - 1887:1887
    - 8887:8887
    - 1700:1700/udp
    secrets:
    - ca.pem
    - cert.pem
    - key.pem
    volumes:
    - /opt/data/ttn/stack/blob:/srv/ttn-lorawan/public/blob
    - /opt/data/ttn/stack/config:/config:ro