script it

fleetdm/compose.yml.off

@@ -0,0 +1,56 @@
+services:
+  db:
+    image: mysql
+    restart: unless-stopped
+    platform: linux/x86_64
+    volumes:
+      - ./mysql/data:/var/lib/mysql
+    env_file: mysql/default.env
+    cap_add:
+      - SYS_NICE
+    #    ports:
+    #      - 3306:3306
+    networks:
+      - default
+
+  broker:
+    image: redis
+    restart: unless-stopped
+    #    ports:
+    #      - 6379:6379
+    networks:
+      - default
+
+  service:
+    image: fleetdm/fleet
+    restart: unless-stopped
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.fleet.entrypoints=websecure
+      - traefik.http.routers.fleet.rule=Host(`fleet.rskio.com`)
+      - traefik.http.routers.fleet.middlewares=secureHeaders@file
+      - traefik.http.routers.fleet.tls=true
+      - traefik.http.routers.fleet.tls.options=external@file
+      - traefik.http.routers.fleet.service=fleet@docker
+      - traefik.http.services.fleet.loadbalancer.server.port=8412
+      - traefik.http.routers.fleet.tls.certresolver=rskio_certresolver
+    depends_on:
+      - db
+      - broker
+    platform: linux/x86_64
+    command: sh -c "/usr/bin/fleet prepare db --no-prompt && /usr/bin/fleet serve"
+    env_file: fleet/default.env
+    ports:
+      - 8412:8412
+    volumes:
+      - ./fleet:/fleet/
+      - ./fleet/logs:/logs
+      - ./fleet/vulndb:/vulndb
+    networks:
+      - default
+      - traefik
+
+networks:
+  default: {}
+  traefik:
+    external: true