parsedmarc/docker-compose.yml at main · mkilijanek/parsedmarc · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
services:
  msgraph-token-refresh:
    build:
      context: ./msgraph-token-refresh
    container_name: msgraph-token-refresh
    restart: unless-stopped
    environment:
      TENANT_ID: ${TENANT_ID}
      CLIENT_ID: ${CLIENT_ID}
      GRAPH_URL: ${GRAPH_URL:-https://graph.microsoft.com}
      MAILBOX: ${MAILBOX}
      TOKEN_PATH: /tokens/.token.json
      REFRESH_SECONDS: ${REFRESH_SECONDS:-3300}
    volumes:
      - msgraph_tokens:/tokens
    secrets:
      - msgraph_client_secret
    healthcheck:
      test: ["CMD-SHELL", "test -s /tokens/.token.json"]
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 20s

  parsedmarc:
    image: ${PARSEDMARC_IMAGE:-ghcr.io/mkilijanek/parsedmarc:10.4.3}
    container_name: parsedmarc
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    depends_on:
      msgraph-token-refresh:
        condition: service_healthy
    command: ["-c", "/home/parsedmarc/ini/parsedmarc.ini"]
    read_only: true
    tmpfs:
      - /tmp
    volumes:
      - ./ini:/home/parsedmarc/ini:ro
      - msgraph_tokens:/tokens:ro

secrets:
  msgraph_client_secret:
    file: ./secrets/msgraph_client_secret.txt

volumes:
  msgraph_tokens: