B24-docker/docker-compose.yml

volumes:
  redis_data:
    driver: local
  mysql_log_data:
    driver: local
  mysql_lib_data:
    driver: local
  bxtemp_data:
    driver: local
  msmtp_data:
    driver: local
  browscap_data:
    driver: local
  geoip2_data:
    driver: local
  ssl_data:
    driver: local
services:
  memcached:
    image: memcached:1.6.40-alpine
    container_name: b24pal_memcached
    restart: unless-stopped
    env_file:
      - .env
    init: true
    cgroup: private
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    tmpfs:
      - /tmp:noexec,nodev,nosuid
      - /var/tmp:noexec,nodev,nosuid
      - /dev/shm:noexec,nodev,nosuid
    networks:
      dev:
        aliases:
          - memcached
  redis:
    image: redis:8.6.0-alpine
    container_name: b24pal_redis
    restart: unless-stopped
    command: redis-server /usr/local/etc/redis/redis.conf
    env_file:
      - .env
    volumes:
      - redis_data:/data
      - ./confs/redis/redis.conf:/usr/local/etc/redis/redis.conf
    init: true
    cgroup: private
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETUID
      - SETGID
    tmpfs:
      - /tmp:noexec,nodev,nosuid
      - /var/tmp:noexec,nodev,nosuid
      - /dev/shm:noexec,nodev,nosuid
    networks:
      dev:
        aliases:
          - redis
  mysql:
    image: quay.io/bitrix24/percona-server:8.4.7-v1-rhel
    container_name: b24pal_mysql
    ports:
      - "33061:3306"
    restart: unless-stopped
    env_file:
      - .env
      - .env_sql
    volumes:
      - mysql_log_data:/var/log/mysql
      - ./data/mysql:/var/lib/mysql
    init: true
    cgroup: private
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    cap_add:
      - SYS_NICE
    tmpfs:
      - /tmp:noexec,nodev,nosuid
      - /var/tmp:noexec,nodev,nosuid
      - /dev/shm:noexec,nodev,nosuid
    networks:
      dev:
        aliases:
          - mysql
  php:
    image: quay.io/bitrix24/php:8.4.18-fpm-v1-alpine
    container_name: b24pal_php
    restart: unless-stopped
    env_file:
      - .env
      - .env_php
    extra_hosts:
      - "host.docker.internal:host-gateway"
    volumes:
      - ./confs/php84/etc/:/usr/local/etc/
      - ./data/www/:/opt/www/:cached
      - bxtemp_data:/opt/.bx_temp/
      - msmtp_data:/opt/msmtp/
      - browscap_data:/opt/browscap/
      - geoip2_data:/opt/geoip2/
      - ssl_data:/ssl/
    init: true
    cgroup: private
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    tmpfs:
      - /tmp:noexec,nodev,nosuid
      - /var/tmp:noexec,nodev,nosuid
      - /dev/shm:noexec,nodev,nosuid
    networks:
      dev:
        aliases:
          - php
    depends_on:
      - mysql
    environment:
      PHP_IDE_CONFIG: "serverName=bitrix-docker"
  nginx:
    image: quay.io/bitrix24/nginx:1.28.2-v1-alpine
    container_name: b24pal_nginx
    restart: unless-stopped
    env_file:
      - .env
    ports:
      - "8560:80"
      - "8561:443"
    volumes:
      - ./confs/nginx/:/etc/nginx/
      - ./data/www/:/opt/www/:cached
      - bxtemp_data:/opt/.bx_temp/
      - ssl_data:/ssl/
    init: true
    cgroup: private
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETUID
      - SETGID
      - NET_BIND_SERVICE
    tmpfs:
      - /tmp:noexec,nodev,nosuid
      - /var/tmp:noexec,nodev,nosuid
      - /dev/shm:noexec,nodev,nosuid
    networks:
      dev:
        aliases:
          - nginx
  push-sub:
    image: quay.io/bitrix24/push:3.2-v1-alpine
    container_name: b24pal_push_sub
    restart: unless-stopped
    env_file:
      - .env
      - .env_push
      - .env_push_sub
      - .env_redis
    init: true
    cgroup: private
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    tmpfs:
      - /tmp:noexec,nodev,nosuid
      - /var/tmp:noexec,nodev,nosuid
      - /dev/shm:noexec,nodev,nosuid
    networks:
      dev:
        aliases:
          - push_sub
    depends_on:
      - redis
  push-pub:
    image: quay.io/bitrix24/push:3.2-v1-alpine
    container_name: b24pal_push_pub
    restart: unless-stopped
    env_file:
      - .env
      - .env_push
      - .env_push_pub
      - .env_redis
    init: true
    cgroup: private
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    tmpfs:
      - /tmp:noexec,nodev,nosuid
      - /var/tmp:noexec,nodev,nosuid
      - /dev/shm:noexec,nodev,nosuid
    networks:
      dev:
        aliases:
          - push_pub
    depends_on:
      - redis
  sphinx:
    image: quay.io/bitrix24/sphinx:2.2.11-v2-alpine
    container_name: b24pal_sphinx
    restart: unless-stopped
    env_file:
      - .env
    volumes:
      - ./confs/sphinx/sphinx.conf:/opt/sphinx/conf/sphinx.conf
    init: true
    cgroup: private
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    tmpfs:
      - /tmp:noexec,nodev,nosuid
      - /var/tmp:noexec,nodev,nosuid
      - /dev/shm:noexec,nodev,nosuid
    networks:
      dev:
        aliases:
          - sphinx
  cron:
    image: quay.io/bitrix24/php:8.4.18-fpm-v1-alpine
    container_name: b24pal_cron
    restart: unless-stopped
    command: crond -f -d 8
    user: root
    env_file:
      - .env
      - .env_php
    volumes:
      - ./confs/php84/etc/:/usr/local/etc/
      - ./data/www/:/opt/www/:cached
      - bxtemp_data:/opt/.bx_temp/
      - msmtp_data:/opt/msmtp/
      - browscap_data:/opt/browscap/
      - geoip2_data:/opt/geoip2/
    init: true
    cgroup: private
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    cap_add:
      - SETUID
      - SETGID
    tmpfs:
      - /tmp:noexec,nodev,nosuid
      - /var/tmp:noexec,nodev,nosuid
      - /dev/shm:noexec,nodev,nosuid
    networks:
      dev:
        aliases:
          - cron
    depends_on:
      - php
networks:
  dev:
    driver: bridge
    attachable: true
    internal: false
    ipam:
      driver: default
      config:
        - subnet: 10.10.30.0/24