version: "3"
services:
    filebeat:
        image: store/elastic/filebeat:7.1.1
        # 这里映射日志文件
        volumes:
            - ./nginx/logs:/var/log/nginx
            - ./elk/filebeat/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro
        links:
            - elasticsearch
        container_name: filebeat
        user: "root"
    elasticsearch:
        image: elasticsearch:7.1.1
        ports: 
            - "9200:9200"
            - "9300:9300"
        volumes:
            - ./elk/elasticsearch/data:/usr/share/elasticsearch/data
            - ./elk/elasticsearch/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml:ro
        environment:
            ELASTICSEARCH_USERNAME: "root"
            ELASTICSEARCH_PASSWORD: "123456"
            ES_JAVA_OPTS: "-Xmx256m -Xms256m"
            discovery.type: single-node
            xpack.security.enabled: 'false'
        container_name: elasticsearch
    logstash:
        # imjcw/logstash 设置 /var/log/logstash 是 logstash 用户
        # 具体见 elk/logstash/Dockerfile
        # image: logstash:7.1.1
        image: imjcw/logstash:7.1.1
        ports: 
            - "5044:5044"
        volumes:
            - ./elk/logstash/pipeline:/usr/share/logstash/pipeline:ro
            - ./elk/logstash/logstash.yml:/usr/share/logstash/config/logstash.yml:ro
        networks:
            - default
        environment:
            LS_JAVA_OPTS: "-Xmx256m -Xms256m"
        depends_on:
            - elasticsearch
    kibana:
        image: kibana:7.1.1
        ports: 
            - "5601:5601"
        volumes:
            - ./elk/kibana/kibana.yml:/usr/share/kibana/config/kibana.yml:ro
        # 高版本的汉化还可以，低版本的还是默认使用英文版吧
        environment:
            I18N_LOCALE: zh-CN
        container_name: kibana
        links:
            - elasticsearch