From e7dc6f4e1f8d8badbc47c2ed6fed8111056292a9 Mon Sep 17 00:00:00 2001
From: traveler <phil@pncharris.com>
Date: Thu, 3 Jul 2025 09:17:42 -0500
Subject: [PATCH] sdsd

---
 Compose/graylog.yaml | 151 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 151 insertions(+)
 create mode 100755 Compose/graylog.yaml

diff --git a/Compose/graylog.yaml b/Compose/graylog.yaml
new file mode 100755
index 0000000..e20dff8
--- /dev/null
+++ b/Compose/graylog.yaml
@@ -0,0 +1,151 @@
+#only works with compose
+
+
+
+services: 
+  # MongoDB: https://hub.docker.com/_/mongo/
+  mongodb:
+    container_name: graylog-mongo
+    image: mongo:5.0
+    volumes:
+      #- /DockerVol/Graylog/Mongo/data/db:/data/db
+      - mongodb_data:/data/db
+    networks:
+      - netgrimoire
+    environment:
+      - PGID=998
+      - PUID=1001  
+      - UMASK=002
+    # deploy:
+    #   placement:
+    #     constraints:
+    #       - node.hostname == docker2
+      
+  datanode:
+    container_name: graylog-datanode
+    image: "${DATANODE_IMAGE:-graylog/graylog-datanode:6.0}"
+    hostname: "datanode"
+    environment:
+      GRAYLOG_DATANODE_NODE_ID_FILE: "/var/lib/graylog-datanode/node-id"
+      GRAYLOG_DATANODE_PASSWORD_SECRET: "TZ3XajhzIBugTl61oNNgrWL0OHTn4qYcNAuzTTHWRKYxxWf61oAEpHOpesLoP7ssgqBTuainTBX6YIVAcYs2de2jhPHQBYD5"
+      GRAYLOG_DATANODE_ROOT_PASSWORD_SHA2: "1b12de7f4069972e784d42dbe826c0769f1287412cd35479de127fcf816699dc"
+      GRAYLOG_DATANODE_MONGODB_URI: "mongodb://mongodb:27017/graylog"
+      PGID: 998
+      PUID: 1001 
+      UMASK: 002
+    ulimits:
+      memlock:
+        hard: -1
+        soft: -1
+      nofile:
+        soft: 65536
+        hard: 65536
+    ports:
+      - "8999:8999/tcp"   # DataNode API
+      - "9200:9200/tcp"
+      - "9300:9300/tcp"
+    volumes:
+      #- /DockerVol/Graylog/datanode:/var/lib/graylog-datanode 
+      - graylog-datanode:/var/lib/graylog-datanode
+    networks:
+      - netgrimoire  
+    # deploy:
+    #   placement:
+    #     constraints:
+    #       - node.hostname == docker2
+
+  graylog:
+    container_name: graylog
+    hostname: "server"
+    image: "${GRAYLOG_IMAGE:-graylog/graylog:6.0}"
+    depends_on:
+      - mongodb
+      #    -condition: "service_started"
+    entrypoint: "/usr/bin/tini --  /docker-entrypoint.sh"
+    environment:
+      GRAYLOG_NODE_ID_FILE: "/usr/share/graylog/data/data/node-id"
+      GRAYLOG_PASSWORD_SECRET: "TZ3XajhzIBugTl61oNNgrWL0OHTn4qYcNAuzTTHWRKYxxWf61oAEpHOpesLoP7ssgqBTuainTBX6YIVAcYs2de2jhPHQBYD5"
+      GRAYLOG_ROOT_PASSWORD_SHA2: "1b12de7f4069972e784d42dbe826c0769f1287412cd35479de127fcf816699dc"
+      GRAYLOG_HTTP_BIND_ADDRESS: "0.0.0.0:9000"
+      GRAYLOG_HTTP_EXTERNAL_URI: "http://log.netgrimoire.com/"
+      GRAYLOG_MONGODB_URI: "mongodb://mongodb:27017/graylog"
+      GRAYLOG_ELASTICSEARCH_SSL_VERIFY: false
+      PGID: 998
+      PUID: 1001
+      UMASK: 002 
+    ports:
+      - "5044:5044/tcp"   # Beats
+      - "5140:5140/udp"   # Syslog
+      - "5140:5140/tcp"   # Syslog
+      - "5555:5555/tcp"   # RAW TCP
+      - "5555:5555/udp"   # RAW UDP
+      - "9000:9000/tcp"   # Server API
+      - "12201:12201/tcp" # GELF TCP
+      - "12201:12201/udp" # GELF UDP
+    #- "10000:10000/tcp" # Custom TCP port
+    #- "10000:10000/udp" # Custom UDP port
+      - "13301:13301/tcp" # Forwarder data
+      - "13302:13302/tcp" # Forwarder config
+    volumes:
+      #- "/DockerVol/Graylog/graylog_data:/usr/share/graylog/data/data"
+      #- "/DockerVol/Graylog/graylog_journal:/usr/share/graylog/data/journal"
+      - graylog_data:/usr/share/graylog/data/data
+      - graylog_journal:/usr/share/graylog/data/journal
+    networks:
+      - netgrimoire
+    # deploy:
+    #   labels:
+    #     - homepage.group=Monitoring
+    #     - homepage.name=Graylog
+    #     - homepage.icon=graylog.png
+    #     - homepage.href=https://log.netgrimoire.com
+    #     - homepage.description=Logging Server
+    #     - caddy=log.netgrimoire.com
+    #     - caddy.reverse_proxy="{{upstreams 9000}}"
+    #   placement:
+    #     constraints:
+    #       - node.hostname == docker2
+
+
+volumes:
+  mongodb_data:
+    driver: local
+    driver_opts:
+      type: none
+      o: bind
+      device: /DockerVol/Graylog/Mongo/data/db
+
+  graylog-datanode:
+    driver: local
+    driver_opts:
+      type: none
+      o: bind
+      device: /DockerVol/Graylog/datanode
+
+  graylog_data:
+    driver: local
+    driver_opts:
+      type: none
+      o: bind
+      device: /DockerVol/Graylog/graylog_data
+
+  graylog_journal:
+    driver: local
+    driver_opts:
+      type: none
+      o: bind
+      device: /DockerVol/Graylog/graylog_journal
+
+
+networks:
+  netgrimoire:
+    external: true    
+
+
+
+
+
+
+ 
+
+