puppet-swarm.yml

# Already have docker flow proxy configured
# http://proxy.dockerflow.com
# Puppetboard uses this to host HTTP.
#
# Volume: /docker/puppetlabs is NFS backed to all the swarm nodes.
#
version: "3.2"

services:
  puppet:
    image: puppet/puppetserver:2.7.2
    hostname: puppet
    networks:
      - internal
    ports:
      - target: 8140
        published: 8140
        protocol: tcp
        mode: ingress
    environment:
      - "MODE=swarm"
    volumes:
      - /docker/puppetlabs/puppet/code:/etc/puppetlabs/code:ro
      - /docker/puppetlabs/puppet/ssl:/etc/puppetlabs/puppet/ssl
    deploy:
      replicas: 2
      restart_policy:
        condition: on-failure

  postgres:
    image: puppet/puppetdb-postgres:latest
    networks:
      internal:
        aliases:
          - postgres
    environment:
      - "POSTGRES_PASSWORD=puppetdb"
      - "POSTGRES_USER=puppetdb"
    volumes:
      - /docker/puppetlabs/postgres/data:/var/lib/postgresql/data/
    deploy:
      restart_policy:
        condition: on-failure
  
  puppetdb:
    image: puppet/puppetdb:4.3.0
    hostname: puppetdb
    networks:
      - internal
    depends_on:
      - puppet
      - postgres
    volumes:
      - /docker/puppetlabs/puppetdb/ssl:/etc/puppetlabs/puppet/ssl
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure

  puppetboard:
    image: terzom/puppetboard:latest
    networks:
      - internal
      - proxy
    environment:
      - "PUPPETDB_HOST=puppetdb"
      - "PUPPETDB_PORT=8080"
      - "PUPPETDB_SSL_VERIFY=False"
      - "ENABLE_CATALOG=True"
      - "GRAPH_FACTS='architecture,puppetversion,osfamily,rubyversion,operatingsystem,kernelmajversion'"
    depends_on:
      - puppetdb
    deploy:
      labels:
        com.df.notify: 'true'
        com.df.distribute: 'true'
        com.df.servicePath: /
        com.df.reqPathReplace: /
        com.df.reqPathSearch: /
        com.df.port: 80
        com.df.serviceDomain: puppetboard,puppetboard.<domain>
        com.df.serviceDomainMatchAll: 'false'
      replicas: 2
      restart_policy:
        condition: on-failure

networks:
  internal:
    driver: overlay
    ipam:
      driver: default
      config:
      - subnet: 10.1.100.0/24
  proxy:
    external: true