services:
  mysql:
    image: mariadb:11.5
    restart: always
    container_name: misp-mysql
    tmpfs:
      - /tmp
    volumes:
      - mysql_data:/var/lib/mysql
    environment:
      MYSQL_DATABASE: misp
      MYSQL_USER: misp
      MYSQL_PASSWORD: password # Please change for production
      MYSQL_ROOT_PASSWORD: password # Please change for production

  redis:
    image: redis:7.4
    restart: always
    container_name: misp-redis
    volumes:
      - redis_data:/data

  misp-modules:
    image: ghcr.io/nukib/misp-modules:latest
    restart: always
    container_name: misp-modules
    cap_drop:
      - NET_RAW
      - SYS_CHROOT
      - MKNOD
      - NET_BIND_SERVICE
      - AUDIT_WRITE
      - SETFCAP

  misp:
    image: ${MISP_IMAGE-ghcr.io/nukib/misp:latest}
    restart: always
    container_name: misp
    depends_on:
      - mysql
      - redis
    tmpfs:
      - /tmp
    cap_drop:
      - NET_RAW
      - SYS_CHROOT
      - MKNOD
      - AUDIT_WRITE
      - SETFCAP
    # Just for debugging purposes
    #cap_add:
    #  - SYS_PTRACE
    env_file:
      - path: .env_s3
        required: false
    environment:
      MYSQL_HOST: mysql
      MYSQL_LOGIN: misp
      MYSQL_PASSWORD: password # Please change for production
      MYSQL_DATABASE: misp
      REDIS_HOST: redis
      MISP_BASEURL: http://localhost:8080
      MISP_UUID: 0a674a5a-c4cb-491d-80cf-5adb48b5c1cd # Please change for production
      MISP_ORG: Testing org # Please change for production
      MISP_MODULE_URL: http://misp-modules
      MISP_EMAIL: ahoj@example.com # Please change for production
      SECURITY_SALT: PleaseChangeForProduction # Please change for production
      ZEROMQ_ENABLED: yes
      SYSLOG_ENABLED: no
      ECS_LOG_ENABLED: yes
      MISP_DEBUG: yes
    volumes:
      - misp_logs:/var/www/MISP/app/tmp/logs/
      - misp_certs:/var/www/MISP/app/files/certs/
      - misp_attachments:/var/www/MISP/app/attachments/
      - misp_img_orgs:/var/www/MISP/app/files/img/orgs/
      - misp_img_custom:/var/www/MISP/app/files/img/custom/
      - misp_gnupg:/var/www/MISP/.gnupg/
    ports:
      - "127.0.0.1:8080:80"
      - "127.0.0.1:50000:50000"

volumes:
  mysql_data:
  redis_data:
  misp_logs:
  misp_certs:
  misp_attachments:
  misp_img_orgs:
  misp_img_custom:
  misp_gnupg: