mirror of
https://github.com/Av0idD4rk/packmate.git
synced 2026-10-23 14:31:01 +00:00
102 lines
4.4 KiB
YAML
102 lines
4.4 KiB
YAML
services:
|
|
mcp: # optional API on port 65002; enable with PACKMATE_MCP_ENABLED=true and a token
|
|
build:
|
|
context: ./mcp
|
|
image: registry.gitlab.com/packmate/packmate/mcp:${BUILD_TAG:-latest}
|
|
network_mode: host
|
|
restart: unless-stopped
|
|
mem_limit: 512m
|
|
cpus: 1.0
|
|
pids_limit: 64
|
|
read_only: true
|
|
cap_drop: [ALL]
|
|
security_opt: [no-new-privileges:true]
|
|
environment:
|
|
PACKMATE_MCP_ENABLED: ${PACKMATE_MCP_ENABLED:-false}
|
|
PACKMATE_MCP_TOKEN: ${PACKMATE_MCP_TOKEN:-}
|
|
PACKMATE_MCP_BIND: ${PACKMATE_MCP_BIND:-127.0.0.1}
|
|
PACKMATE_MCP_PORT: ${PACKMATE_MCP_PORT:-65002}
|
|
PACKMATE_MCP_ALLOWED_HOSTS: ${PACKMATE_MCP_ALLOWED_HOSTS:-127.0.0.1:*,localhost:*,[::1]:*}
|
|
PACKMATE_MCP_JOB_TIMEOUT_SECONDS: ${PACKMATE_MCP_JOB_TIMEOUT_SECONDS:-30}
|
|
PACKMATE_MCP_JOB_MAX_MIB: ${PACKMATE_MCP_JOB_MAX_MIB:-32}
|
|
PACKMATE_PUBLIC_URL: ${PACKMATE_PUBLIC_URL:-http://127.0.0.1:65000}
|
|
PACKMATE_BACKEND_URL: http://127.0.0.1:65000
|
|
PACKMATE_WEB_LOGIN: ${PACKMATE_WEB_LOGIN:-BinaryBears}
|
|
PACKMATE_WEB_PASSWORD: ${PACKMATE_WEB_PASSWORD:-123456}
|
|
depends_on:
|
|
packmate:
|
|
condition: service_started
|
|
packmate: # port = 65000
|
|
environment:
|
|
DB_PASSWORD: ${PACKMATE_DB_PASSWORD:-K604YnL3G1hp2RDkCZNjGpxbyNpNHTRb}
|
|
INTERFACE: ${PACKMATE_INTERFACE:-}
|
|
LOCAL_IP: ${PACKMATE_LOCAL_IP}
|
|
MODE: ${PACKMATE_MODE:-LIVE}
|
|
PCAP_FILE: ${PACKMATE_PCAP_FILE:-}
|
|
WEB_LOGIN: ${PACKMATE_WEB_LOGIN:-BinaryBears}
|
|
WEB_PASSWORD: ${PACKMATE_WEB_PASSWORD:-123456}
|
|
CAPTURE_WORKERS: ${PACKMATE_CAPTURE_WORKERS:-1}
|
|
CAPTURE_QUEUE_CAPACITY: ${PACKMATE_CAPTURE_QUEUE_CAPACITY:-250000}
|
|
CAPTURE_BUFFER_SIZE_BYTES: ${PACKMATE_CAPTURE_BUFFER_SIZE_BYTES:-67108864}
|
|
CAPTURE_SHUTDOWN_TIMEOUT_SECONDS: ${PACKMATE_CAPTURE_SHUTDOWN_TIMEOUT_SECONDS:-30}
|
|
OLD_STREAMS_CLEANUP_ENABLED: ${PACKMATE_OLD_STREAMS_CLEANUP_ENABLED:-true}
|
|
OLD_STREAMS_CLEANUP_INTERVAL_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_INTERVAL_SECONDS:-10}
|
|
OLD_STREAMS_CLEANUP_MAX_RUN_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_RUN_SECONDS:-5}
|
|
OLD_STREAMS_CLEANUP_COMMIT_GRACE_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_COMMIT_GRACE_SECONDS:-120}
|
|
OLD_STREAMS_CLEANUP_THRESHOLD: ${PACKMATE_OLD_STREAMS_CLEANUP_THRESHOLD:-15}
|
|
OLD_STREAMS_CLEANUP_BATCH_SIZE: ${PACKMATE_OLD_STREAMS_CLEANUP_BATCH_SIZE:-500}
|
|
OLD_STREAMS_CLEANUP_MAX_BATCHES_PER_RUN: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_BATCHES_PER_RUN:-20}
|
|
OLD_STREAMS_CLEANUP_MAX_PACKETS_PER_BATCH: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_PACKETS_PER_BATCH:-20000}
|
|
OLD_STREAMS_CLEANUP_MAX_MATCHES_PER_BATCH: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_MATCHES_PER_BATCH:-20000}
|
|
OLD_STREAMS_CLEANUP_MAX_BYTES_PER_BATCH: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_BYTES_PER_BATCH:-67108864}
|
|
OLD_STREAMS_CLEANUP_STATEMENT_TIMEOUT_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_STATEMENT_TIMEOUT_SECONDS:-5}
|
|
OLD_STREAMS_CLEANUP_LOCK_TIMEOUT_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_LOCK_TIMEOUT_SECONDS:-1}
|
|
env_file:
|
|
- .env
|
|
container_name: packmate-app
|
|
stop_grace_period: ${PACKMATE_CONTAINER_STOP_GRACE_PERIOD:-45s}
|
|
build:
|
|
context: .
|
|
dockerfile: docker/Dockerfile_app
|
|
network_mode: "host"
|
|
image: registry.gitlab.com/packmate/packmate:${BUILD_TAG:-latest}
|
|
volumes:
|
|
- "./pcaps/:/app/pcaps/:ro"
|
|
- "./rsa_keys/:/app/rsa_keys/:ro"
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
db: # port = 65001
|
|
container_name: packmate-db
|
|
command:
|
|
- postgres
|
|
- -c
|
|
- autovacuum_max_workers=4
|
|
- -c
|
|
- autovacuum_naptime=10s
|
|
- -c
|
|
- autovacuum_vacuum_threshold=1000
|
|
- -c
|
|
- autovacuum_vacuum_scale_factor=0.02
|
|
- -c
|
|
- autovacuum_analyze_scale_factor=0.05
|
|
- -c
|
|
- autovacuum_vacuum_cost_limit=1000
|
|
environment:
|
|
POSTGRES_USER: packmate
|
|
POSTGRES_PASSWORD: ${PACKMATE_DB_PASSWORD:-K604YnL3G1hp2RDkCZNjGpxbyNpNHTRb}
|
|
POSTGRES_DB: packmate
|
|
env_file:
|
|
- .env
|
|
volumes:
|
|
- "./data/postgres_data:/var/lib/postgresql/data"
|
|
- "./docker/postgresql.conf:/tmp/postgresql.conf:ro"
|
|
- "./docker/update_db_config.sh:/docker-entrypoint-initdb.d/_update_db_config.sh:ro"
|
|
network_mode: "host"
|
|
image: postgres:15.2
|
|
healthcheck:
|
|
test: [ "CMD-SHELL", "pg_isready -U packmate -p 65001" ]
|
|
interval: 2s
|
|
timeout: 5s
|
|
retries: 15
|