version: "3.7"

services:
        
###########################################################################
###########################################################################
##
##    Docker Compose File: Syslog Services
##    Function: Run Syslog Services
##
###########################################################################
###########################################################################

  syslog:
    container_name: syslog-ng
    hostname: syslog
    image: lscr.io/linuxserver/syslog-ng:latest
    restart: unless-stopped
    runtime: runc
    working_dir: /
    volumes:
      - /home/albus/syslog-ng/config:/config
      - /home/albus/syslog-ng/logs:/var/log
    ports:
      - 514:5514/udp
      - 6514:6514
      - 601:6601
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/New_York
      - ELASTICSEARCH_HOST=elasticsearch:9200
    networks:
      - proxy

  elasticsearch:
    container_name: elasticsearch
    hostname: elasticsearch
    image: docker.elastic.co/elasticsearch/elasticsearch:7.5.2
    restart: unless-stopped
    runtime: runc
    command: eswrapper
    working_dir: /usr/share/elasticsearch
    volumes:
      - /home/albus/elasticsearch/data/:/usr/share/elasticsearch/data
    ports:
      - 9200:9200
      - 9300:9300
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    environment:
      - discovery.type=single-node
    depends_on:
      syslog:
        condition: service_healthy
        restart: true
    networks:
      - proxy

  kibana:
    container_name: kibana
    image: docker.elastic.co/kibana/kibana:7.5.2
    restart: unless-stopped
    runtime: runc
    ports:
      - 5601:5601
    environment:
      - ELASTICSEARCH_HOST=http://elasticsearch:9200
    depends_on:
      syslog:
        condition: service_started
        restart: true
      elasticsearch:
        condition: service_started
        restart: true
    networks:
      - proxy