docker-compose-dev.yml

services:
  ######################################### NGINX #########################################
  osctrl-nginx:
    container_name: 'osctrl-nginx-dev'
    image: nginx:${NGINX_VERSION}
    restart: unless-stopped
    ports:
      - 8443:443
      - 8444:8444
    networks:
      - default
      - osctrl-dev-backend
    volumes:
      - type: bind
        source: ./deploy/docker/conf/nginx/nginx.conf
        target: /etc/nginx/nginx.conf
      - type: bind
        source: ./deploy/docker/conf/nginx/osctrl.conf
        target: /etc/nginx/conf.d/osctrl.conf
      - type: bind
        source: ./deploy/docker/conf/tls/osctrl.crt
        target: /etc/ssl/certs/osctrl.crt
      - type: bind
        source: ./deploy/docker/conf/tls/osctrl.key
        target: /etc/ssl/private/osctrl.key
    depends_on:
      - osctrl-tls
      - osctrl-api
      - osctrl-frontend


  ######################################### osctrl-tls #########################################
  osctrl-tls:
    container_name: 'osctrl-tls-dev'
    image: 'osctrl-tls-dev:${OSCTRL_VERSION}'
    restart: unless-stopped
    build:
      context: .
      dockerfile: deploy/docker/dockerfiles/Dockerfile-dev-tls
      args:
        GOLANG_VERSION: ${GOLANG_VERSION}
    environment:
      #### osctrl-tls configuration settings ####
      - SERVICE_LISTENER=0.0.0.0
      - SERVICE_PORT=9000
      - SERVICE_HOST=0.0.0.0
      - SERVICE_AUTH=none
      - SERVICE_LOGGER=${OSCTRL_TLS_LOGGER}
      - LOGGER_DB_SAME=true
      - SERVICE_LOG_FORMAT=console
      - SERVICE_POSTURE_ENABLED=true
      - SERVICE_ALERTS_ENABLED=true
      - SERVICE_CONFIG_ENABLED=true
      - SERVICE_HEALTH_ENABLED=true
      - SERVICE_EVENTS_ENABLED=true
      - SERVICE_EVENTS_NAMESPACE=dev
      #### Database settings ####
      - DB_HOST=osctrl-postgres
      - DB_NAME=${POSTGRES_DB_NAME}
      - DB_USER=${POSTGRES_DB_USERNAME}
      - DB_PASS=${POSTGRES_DB_PASSWORD}
      #### Redis settings ####
      - REDIS_HOST=osctrl-redis
      # Trust the Docker network so GetIP honors X-Forwarded-For / X-Real-IP
      # from the nginx reverse proxy. Without this, every node's IP shows as
      # the nginx container's internal Docker IP instead of the real client.
      - SERVICE_TRUSTED_PROXIES=172.16.0.0/12
      #### osquery settings ####
      - OSQUERY_ACCELERATED=true
      - OSQUERY_FILE_EXPLORER=true
    networks:
      - osctrl-dev-backend
    ports:
      - 127.0.0.1:9000:9000
    volumes:
      - .:/usr/src/app:rw,delegated
    develop:
      watch:
        - path: ./deploy/docker/dockerfiles/Dockerfile-dev-tls
          action: rebuild
        - path: ./go.mod
          action: rebuild
        - path: ./go.sum
          action: rebuild
    depends_on:
      - osctrl-postgres
      - osctrl-redis


  ######################################### osctrl-api #########################################
  osctrl-api:
    container_name: 'osctrl-api-dev'
    image: 'osctrl-api-dev:${OSCTRL_VERSION}'
    restart: unless-stopped
    build:
      context: .
      dockerfile: deploy/docker/dockerfiles/Dockerfile-dev-api
      args:
        GOLANG_VERSION: ${GOLANG_VERSION}
        OSQUERY_VERSION: ${OSQUERY_VERSION}
    environment:
      #### osctrl-api configuration settings ####
      - SERVICE_LISTENER=0.0.0.0
      - SERVICE_PORT=9002
      - SERVICE_HOST=0.0.0.0
      - SERVICE_AUTH=jwt
      - JWT_SECRET=${JWT_SECRET}
      - SERVICE_LOGGER=db
      - SERVICE_LOG_FORMAT=console
      - SERVICE_POSTURE_ENABLED=true
      - SERVICE_ALERTS_ENABLED=true
      - SERVICE_CONFIG_ENABLED=true
      - SERVICE_HEALTH_ENABLED=true
      - SERVICE_EVENTS_ENABLED=true
      - SERVICE_EVENTS_NAMESPACE=dev
      #### osquery settings ####
      - OSQUERY_TABLES=/usr/src/app/deploy/osquery/data/${OSQUERY_VERSION}.json
      - OSQUERY_ACCELERATED=true
      - OSQUERY_CONSOLE=true
      - OSQUERY_FILE_EXPLORER=true
      #### Database settings ####
      - DB_HOST=osctrl-postgres
      - DB_NAME=${POSTGRES_DB_NAME}
      - DB_USER=${POSTGRES_DB_USERNAME}
      - DB_PASS=${POSTGRES_DB_PASSWORD}
      #### Redis settings ####
      - REDIS_HOST=osctrl-redis
      - SERVICE_TRUSTED_PROXIES=172.16.0.0/12
    networks:
      - osctrl-dev-backend
    ports:
      - 127.0.0.1:9002:9002
    volumes:
      - .:/usr/src/app:rw,delegated
    develop:
      watch:
        - path: ./deploy/docker/dockerfiles/Dockerfile-dev-api
          action: rebuild
        - path: ./go.mod
          action: rebuild
        - path: ./go.sum
          action: rebuild
    depends_on:
      - osctrl-postgres
      - osctrl-redis


  ######################################### osctrl-frontend (React SPA) #########################################
  # Ships the React admin frontend through osctrl-nginx on
  # https://<host>:8444 while remaining internal-only on the docker network.
  # The frontend container owns the SPA static serving and /api/*
  # reverse-proxy to osctrl-api, while air rebuilds dist/ when files in
  # frontend/ change.
  #
  # Source is bind-mounted into the container. node_modules stays in a
  # Docker volume so the host mount does not shadow container-installed
  # dependencies.
  osctrl-frontend:
    container_name: 'osctrl-frontend-dev'
    image: 'osctrl-frontend-dev:${OSCTRL_VERSION}'
    restart: unless-stopped
    build:
      context: .
      dockerfile: deploy/docker/dockerfiles/Dockerfile-dev-frontend
    networks:
      - osctrl-dev-backend
    volumes:
      - .:/usr/src/app:rw,delegated
      - frontend-osctrl-dev-node-modules:/usr/src/app/frontend/node_modules
    develop:
      watch:
        - path: ./deploy/docker/dockerfiles/Dockerfile-dev-frontend
          action: rebuild
        - path: ./frontend/package.json
          action: rebuild
        - path: ./frontend/package-lock.json
          action: rebuild
    depends_on:
      - osctrl-api


  ######################################### PostgreSQL #########################################
  osctrl-postgres:
    container_name: 'osctrl-postgres-dev'
    image: postgres:${POSTGRES_VERSION}
    restart: unless-stopped
    environment:
      - POSTGRES_DB=${POSTGRES_DB_NAME}
      - POSTGRES_USER=${POSTGRES_DB_USERNAME}
      - POSTGRES_PASSWORD=${POSTGRES_DB_PASSWORD}
    command: ["postgres", "-c", "max_connections=300"]
    networks:
      - osctrl-dev-backend
    ports:
      - 127.0.0.1:5432:5432
    volumes:
      - postgres-osctrl-dev-db:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "sh -c 'pg_isready -U ${POSTGRES_DB_USERNAME} -d ${POSTGRES_DB_NAME}'"]
      interval: 10s
      timeout: 5s
      retries: 5


  ######################################### Redis #########################################
  osctrl-redis:
    container_name: 'osctrl-redis-dev'
    image: redis:${REDIS_VERSION}
    restart: unless-stopped
    networks:
      - osctrl-dev-backend
    ports:
      - 127.0.0.1:6379:6379
    volumes:
      - redis-osctrl-dev-data:/data
    healthcheck:
      test: ["CMD", "redis-cli","ping"]
      interval: 10s
      timeout: 5s
      retries: 5


  ######################################### osctrl-cli #########################################
  # osctrl-cli is the component that creates the osctrl env and admin user
  ##############################################################################################
  osctrl-cli:
    container_name: 'osctrl-cli-dev'
    image: 'osctrl-cli-dev:${OSCTRL_VERSION}'
    restart: unless-stopped
    build:
      context: .
      target: osctrl-cli-dev
      dockerfile: deploy/docker/dockerfiles/Dockerfile-dev-cli
      args:
        GOLANG_VERSION: ${GOLANG_VERSION}
        OSQUERY_VERSION: ${OSQUERY_VERSION}
    tty: true # entrypoint executes `/bin/sh`
    environment:
      #### osctrl env ####
      - ENV_NAME=dev
      - CERT_FILE=/opt/osctrl/config/osctrl.crt
      - HOST=osctrl-nginx
      - POSTURE_PROFILE=linux-server
      - POSTURE_INTERVAL=75
      - POSTURE_QUERY_PREFIX
      #### osctrl admin ####
      - OSCTRL_USER=${OSCTRL_USER}
      - OSCTRL_PASS=${OSCTRL_PASS}
      - API_URL=http://osctrl-api:9002
      #### JWT secret — required to satisfy pkg/users MinJWTSecretBytes gate ####
      - JWT_SECRET=${JWT_SECRET}
      #### Database settings ####
      - DB_HOST=osctrl-postgres
      - DB_NAME=${POSTGRES_DB_NAME}
      - DB_USER=${POSTGRES_DB_USERNAME}
      - DB_PASS=${POSTGRES_DB_PASSWORD}
    networks:
      - osctrl-dev-backend
    volumes:
      - type: bind
        source: ./deploy/docker/conf/tls/osctrl.crt
        target: /opt/osctrl/config/osctrl.crt
      - .:/usr/src/app:rw,delegated
    develop:
      watch:
        - path: ./deploy/docker/dockerfiles/Dockerfile-dev-cli
          action: rebuild
        - path: ./go.mod
          action: rebuild
        - path: ./go.sum
          action: rebuild
    depends_on:
      - osctrl-postgres
      - osctrl-redis

  ######################################### osquery 1 #########################################
  osquery-1:
    container_name: 'osctrl-osquery-1-dev'
    image: 'osctrl-osquery-dev-1:${OSCTRL_VERSION}'
    restart: unless-stopped
    build:
      context: .
      target: osctrl-ubuntu-osquery
      dockerfile: deploy/docker/dockerfiles/Dockerfile-dev-cli
      args:
        GOLANG_VERSION: ${GOLANG_VERSION}
        OSQUERY_VERSION: ${OSQUERY_VERSION}
    environment:
      #### osquery enroll ####
      - ENV_NAME=dev
      - HOST=osctrl-nginx
      #### Database settings ####
      - DB_HOST=osctrl-postgres
      - DB_NAME=${POSTGRES_DB_NAME}
      - DB_USER=${POSTGRES_DB_USERNAME}
      - DB_PASS=${POSTGRES_DB_PASSWORD}
    networks:
      - osctrl-dev-backend
    volumes:
      - type: bind
        source: ./deploy/docker/conf/tls/osctrl.crt
        target: /opt/osctrl/config/osctrl.crt
      - osquery-osctrl-dev-1-data:/var/osquery
      - osquery-osctrl-dev-1-conf:/etc/osquery
    depends_on:
      - osctrl-tls
      - osctrl-api
      - osctrl-postgres

  ######################################### osquery 2 #########################################
  osquery-2:
    container_name: 'osctrl-osquery-2-dev'
    image: 'osctrl-osquery-dev-2:${OSCTRL_VERSION}'
    restart: unless-stopped
    build:
      context: .
      target: osctrl-ubuntu-osquery
      dockerfile: deploy/docker/dockerfiles/Dockerfile-dev-cli
      args:
        GOLANG_VERSION: ${GOLANG_VERSION}
        OSQUERY_VERSION: ${OSQUERY_VERSION}
    environment:
      #### osquery enroll ####
      - ENV_NAME=dev
      - HOST=osctrl-nginx
      #### Database settings ####
      - DB_HOST=osctrl-postgres
      - DB_NAME=${POSTGRES_DB_NAME}
      - DB_USER=${POSTGRES_DB_USERNAME}
      - DB_PASS=${POSTGRES_DB_PASSWORD}
    networks:
      - osctrl-dev-backend
    volumes:
      - type: bind
        source: ./deploy/docker/conf/tls/osctrl.crt
        target: /opt/osctrl/config/osctrl.crt
      - osquery-osctrl-dev-2-data:/var/osquery
      - osquery-osctrl-dev-2-conf:/etc/osquery
    depends_on:
      - osctrl-tls
      - osctrl-api
      - osctrl-postgres

  ######################################### osquery 3 #########################################
  osquery-3:
    container_name: 'osctrl-osquery-3-dev'
    image: 'osctrl-osquery-dev-3:${OSCTRL_VERSION}'
    restart: unless-stopped
    build:
      context: .
      target: osctrl-ubuntu-osquery
      dockerfile: deploy/docker/dockerfiles/Dockerfile-dev-cli
      args:
        GOLANG_VERSION: ${GOLANG_VERSION}
        OSQUERY_VERSION: ${OSQUERY_VERSION}
    environment:
      #### osquery enroll ####
      - ENV_NAME=dev
      - HOST=osctrl-nginx
      #### Database settings ####
      - DB_HOST=osctrl-postgres
      - DB_NAME=${POSTGRES_DB_NAME}
      - DB_USER=${POSTGRES_DB_USERNAME}
      - DB_PASS=${POSTGRES_DB_PASSWORD}
    networks:
      - osctrl-dev-backend
    volumes:
      - type: bind
        source: ./deploy/docker/conf/tls/osctrl.crt
        target: /opt/osctrl/config/osctrl.crt
      - osquery-osctrl-dev-3-data:/var/osquery
      - osquery-osctrl-dev-3-conf:/etc/osquery
    depends_on:
      - osctrl-tls
      - osctrl-api
      - osctrl-postgres

  ######################################### Sink Catch-All #########################################
  # Lightweight catch-all log sink server for testing log sinks in the
  # dev environment. Listens on HTTP/TCP/UDP and logs every received
  # payload to its container stdout (visible via `docker compose logs
  # osctrl-sink-catchall`).
  #
  # Configure a sink in the osctrl UI pointing at:
  #   Splunk     → http://osctrl-sink-catchall:8080
  #   Graylog    → http://osctrl-sink-catchall:8080
  #   Logstash   → host=osctrl-sink-catchall port=8081 protocol=tcp
  #   Elastic    → host=osctrl-sink-catchall port=8080
  #
  # The container needs no build — it uses the stock python:3-slim
  # image and bind-mounts the server script read-only.
  osctrl-sink-catchall:
    container_name: 'osctrl-sink-catchall-dev'
    image: python:3-slim
    restart: unless-stopped
    command: python3 /opt/sink/server.py
    networks:
      - osctrl-dev-backend
    ports:
      - 127.0.0.1:8080:8080
      - 127.0.0.1:8081:8081
      - 127.0.0.1:8082:8082
    volumes:
      - type: bind
        source: ./deploy/docker/sink-catchall/server.py
        target: /opt/sink/server.py
        read_only: true

networks:
  osctrl-dev-backend:

volumes:
  postgres-osctrl-dev-db:
  redis-osctrl-dev-data:
  frontend-osctrl-dev-node-modules:
  osquery-osctrl-dev-1-data:
  osquery-osctrl-dev-1-conf:
  osquery-osctrl-dev-2-data:
  osquery-osctrl-dev-2-conf:
  osquery-osctrl-dev-3-data:
  osquery-osctrl-dev-3-conf: