README.md

maevsi_stack

The Docker stack configuration for maev.si.

This project is deployed in accordance to the DargStack template to make deployment a breeze. It is closely related to maevsi's source code.

Table of Contents

1. secrets

2. services

3. volumes

secrets

• grafana_admin_email

  The observation dashboard's admin email.

• grafana_admin_password

  The observation dashboard's admin password.

• grafana_admin_user

  The observation dashboard's admin user.

• jobber_aliases

  The job scheduler's SMTP client mail alias.

• jobber_aws-bucket

  The job scheduler's AWS bucket name.

• jobber_aws-credentials

  The job scheduler's AWS credentials.

• jobber_msmtprc

  The job scheduler's SMTP client configuration.

• maevsi_aws-credentials

  The cloud computing provider's user credentials.

• maevsi_turnstile-key

  The captcha provider's application key.

• portainer_admin-password

  The container manager's admin password.

• postgraphile_connection

  The GraphQL API's database URI.

• postgraphile_jwt-secret

  The GraphQL API's JWT secret.

• postgraphile_owner-connection

  The GraphQL API's database owner URI.

• postgres-backup_db

  The database's name.

• postgres_db

  The database's name.

• postgres_password

  The database's password.

• postgres_role_grafana_password

  The maevsi_grafana database role's password.

• postgres_role_grafana_username

  The maevsi_grafana database role's username.

• postgres_role_maevsi-postgraphile_password

  The maevsi_postgraphile database role's password.

• postgres_role_maevsi-postgraphile_username

  The maevsi_postgraphile database role's username.

• postgres_role_maevsi-tusd_password

  The tusd database role's password.

• postgres_role_maevsi-tusd_username

  The tusd database role's password.

• postgres_user

  The database's default user.

• sqitch_target

  The database change management application's database connection string.

• traefik_cf-dns-api-token

  The DNS provider's DNS API token.

• traefik_cf-zone-api-token

  The DNS provider's zone API token.

• tusd_aws

  The upload service's s3 credentials file.

services

• adminer

  You can access the database's frontend at adminer.localhost. This information is required for login:

  System	PostgreSQL
  Server	postgres
  Username	[postgres_user]
  Password	[postgres_password]
  Database	[postgres_db]

  Values in square brackets are Docker secrets.

• cloudflared

  You can configure the secure tunnel at dash.cloudflare.com.

• debezium

  You can see how changes in the database end up in the event stream using redpanda-console.

• debezium-postgres-connector

  You can check the database connector's setup logs using portainer.

• geoip

  You cannot access the ip geolocator via a web interface.

• grafana

  You can access the observation dashboard at grafana.localhost.

• jobber

  You cannot access the jobber via a web interface.

• maevsi

  You can access the main project's frontend at localhost.

• maevsi_beta

  You can access the main project frontend's beta version at beta.localhost.

• minio

  You can access the s3 console at minio.localhost. You can access the s3 api service at s3.localhost if you want to access via cli from outside the stack.

• portainer

  You can access the container manager's frontend at portainer.localhost.

• portainer-agent

  You cannot access the container manager's agent directly.

• postgraphile

  You can access the GraphQL API for the PostgreSQL database at postgraphile.localhost.

• postgres

  You can access the database via adminer.

• postgres_backup

  You cannot access the database backup directly.

• prometheus

  You can access the metrics monitoring at prometheus.localhost.

• redpanda

  You can access the event streaming platform's ui as described under redpanda-console.

• redpanda-console

  You can access the event streaming platform's ui at redpanda.localhost.

• sqitch

  You cannot access the database migrations directly.

• traefik

  You can access the reverse proxy's dashboard at traefik.localhost.

• traefik_certs-dumper

  You cannot access the reverse proxy's certificate helper directly.

• tusd

  You can access the upload service at tusd.localhost.

volumes

• acme_data

  The reverse proxy's certificate data.

• grafana_data

  The observation dashboard's data.

• minio_data

  The s3 server's data.

• portainer_data

  The container manager's data.

• postgres_data

  The database's data.

• prometheus_data

  The metrics monitoring's data.

• redpanda_data

  The message queue's data.