elliot/docker-compose.yml at main · mailshieldai/elliot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
version: "3.9"

name: elliotsec

services:
  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    image: elliotsec/backend:latest
    env_file:
      - ./backend/.env
      - ./.env
    environment:
      - KALI_IMAGE=mailshieldai/kali-pt:latest
    ports:
      - "8080:8080"
    depends_on:
      - kali
      - redis
    volumes:
      # Backend needs access to Docker Engine to orchestrate ephemeral Kali containers
      - /var/run/docker.sock:/var/run/docker.sock
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

  worker:
    image: elliotsec/backend:latest
    env_file:
      - ./backend/.env
      - ./.env
    environment:
      - KALI_IMAGE=mailshieldai/kali-pt:latest
    depends_on:
      - redis
    entrypoint: ["/app/worker"]
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

  frontend:
    build:
      context: ./frontend/apps/web
      dockerfile: Dockerfile
    image: elliotsec/frontend:latest
    env_file:
      - ./frontend/.env
    environment:
      - NEXT_PUBLIC_API_URL=http://backend:8080
    ports:
      - "3000:3000"
    depends_on:
      - backend
    restart: unless-stopped

  kali:
    build:
      context: ./backend/docker/kali
      dockerfile: Dockerfile
      args:
        CODEX_CLI_PKG: codex-cli
    image: mailshieldai/kali-pt:latest
    container_name: kali-pt
    user: "pentester"
    working_dir: /home/pentester/scans
    stdin_open: true
    tty: true
    command: bash
    volumes:
      - ./backend/scans:/home/pentester/scans
      - ./backend/reports:/home/pentester/reports
      - ./backend/wordlists:/home/pentester/wordlists
    cap_add:
      - NET_RAW
      - NET_ADMIN
    security_opt:
      - no-new-privileges:true
    deploy:
      resources:
        limits:
          cpus: '2.0'
          memory: 2g
        reservations:
          cpus: '0.5'
          memory: 512m

  redis:
    image: redis:7-alpine
    ports:
      - "6379:6379"
    command: ["redis-server", "--appendonly", "yes"]
    volumes:
      - redis-data:/data
    restart: unless-stopped

  # --- Monitoring Stack ---
  redis-exporter:
    image: oliver006/redis_exporter:latest
    environment:
      - REDIS_ADDR=redis:6379
      - REDIS_PASSWORD=${REDIS_PASSWORD:-}
    ports:
      - "9121:9121"
    depends_on:
      - redis
    restart: unless-stopped

  prometheus:
    image: prom/prometheus:latest
    volumes:
      - ./docker/monitoring/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - ./docker/monitoring/prometheus/alerting:/etc/prometheus/alerting:ro
    command:
      - "--config.file=/etc/prometheus/prometheus.yml"
      - "--storage.tsdb.path=/prometheus"
    ports:
      - "9090:9090"
    depends_on:
      - backend
      - worker
      - redis-exporter
    restart: unless-stopped

  grafana:
    image: grafana/grafana:latest
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=admin
    volumes:
      - ./docker/monitoring/grafana/provisioning/datasources:/etc/grafana/provisioning/datasources:ro
      - ./docker/monitoring/grafana/provisioning/dashboards:/etc/grafana/provisioning/dashboards:ro
      - ./docker/monitoring/grafana/dashboards:/var/lib/grafana/dashboards:ro
    ports:
      - "3001:3000"
    depends_on:
      - prometheus
    restart: unless-stopped

networks:
  default:
    name: elliot-net

volumes:
  redis-data: