attack-node/docker-compose.prod.yml at main · cmndcntrlcyber/attack-node · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
version: '3.8'

services:
  app:
    build: .
    restart: unless-stopped
    ports:
      - "5000:5000"
    depends_on:
      - postgres
      - redis
    environment:
      NODE_ENV: production
      DATABASE_URL: postgres://postgres:postgres@postgres:5432/attack_node
      REDIS_URL: redis://redis:6379
    volumes:
      - ./uploads:/app/uploads
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - attack-node

  postgres:
    image: postgres:16
    restart: unless-stopped
    environment:
      POSTGRES_DB: attack_node
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - attack-node
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 10s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    volumes:
      - redis_data:/data
    command: redis-server --appendonly yes
    networks:
      - attack-node
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  nginx:
    image: nginx:alpine
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf
      - ./ssl:/etc/nginx/ssl
    depends_on:
      - app
    networks:
      - attack-node

  # Security Tools
  attacknode-kali:
    image: kasmweb/kali-rolling-desktop:develop
    restart: unless-stopped
    ports:
      - "6902:6901"
    environment:
      VNC_PW: password
      KASM_USER: root
      KASM_UID: 0
      KASM_GID: 0
    volumes:
      - ./uploads/kasm_profiles/kali-root:/home/kasm-user:rw
      - ./uploads/docker:/home/kasm-user/shared:rw
    privileged: true
    cap_add:
      - SYS_ADMIN
    shm_size: 512m
    hostname: kasm
    networks:
      - attack-node
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:6901/healthz"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s

  attacknode-vscode:
    image: kasmweb/vs-code:1.17.0-rolling-weekly
    restart: unless-stopped
    ports:
      - "6903:6901"
    environment:
      VNC_PW: password
    volumes:
      - ./uploads/docker:/home/kasm-user/shared:rw
    shm_size: 512m
    networks:
      - attack-node
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:6901/healthz"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s


  attacknode-maltego:
    image: kasmweb/maltego:1.17.0-rolling-weekly
    restart: unless-stopped
    ports:
      - "6904:6901"
    environment:
      VNC_PW: password
    shm_size: 512m
    networks:
      - attack-node
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:6901/healthz"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s

networks:
  attack-node:
    driver: bridge

volumes:
  postgres_data:
  redis_data: