docker-compose.yml

version: '3'
services:
  vault:
    image: hashicorp/vault:1.14
    ports: [8200]
    networks: [internal]
    environment:
      VAULT_API_ADDR: http://127.0.0.1:8200
      VAULT_LOCAL_CONFIG: >-
        {
          "disable_mlock": 1,
          "backend": {
            "file": {
              "path": "/vault/file"
            }
          },
          "listener": {
            "tcp": {
              "address":     "0.0.0.0:8200",
              "tls_disable": 1
            },
          },
          "default_lease_ttl": "168h",
          "max_lease_ttl": "720h"
        }
    cap_add:
      - IPC_LOCK
    volumes:
      - 'vault-data:/vault/file'
    command: 
      - vault
      - server
      - "-config"
      - "/vault/config/local.json"

  core:
    depends_on:
      - vault
    image: 'quay.io/shieldproject/shield:8'
    ports: ['9009:80']
    networks: [internal]
    command: ['/shield/init/core']
    environment:
      SHIELD_VAULT_ADDRESS: http://vault:8200
      SHIELD_API_BIND: core:80
    volumes:
      - 'shield-data:/var/shield'
      - 'shield-etc:/etc/shield'

  demo:
    depends_on:
      - core
      - webdav
    image: 'quay.io/shieldproject/demo:latest'
    ports: ['9008:80']
    networks: [internal]
    volumes:
      - 'demo-data:/www'

  agent:
    depends_on:
      - core
      - webdav
    image: 'quay.io/shieldproject/shield:8'
    ports: [5444]
    networks: [internal]
    command: ['/shield/init/agent']
    environment:
      SHIELD_API:        'http://core:80'
      SHIELD_AGENT_NAME: 'demo-shield-agent'
    volumes:
      - 'shield-data:/var/shield'
      - 'shield-etc:/etc/shield'
      - 'demo-data:/www'

  webdav:
    image: 'quay.io/shieldproject/webdav:latest'
    ports: ['9007:80']
    networks: [internal]
    environment:
      USERNAME: webdav
      PASSWORD: password
    volumes:
      - 'webdav-data:/var/webdav'

networks:
  internal:

volumes:
  vault-data:
  shield-data:
  shield-etc:
  webdav-data:
  demo-data: