ai-security-xdr/haobang-security-dm/syslog-serve/docker-compose/docker-compose-serve-nw.yaml

# ============================================
# Syslog Serve 部署配置 (探针端)
# ============================================
# 使用方法: docker compose -f docker-compose-serve.yaml up -d
# ============================================



services:
  # ============================================
  # Syslog Serve - 探针采集服务 (探针端)
  # ============================================
  syslog-serve:
    build:
      context: ./syslog-serve
      dockerfile: Dockerfile
    image: syslog-serve:1.2.0
    container_name: syslog-serve
    restart: unless-stopped
    environment:
      # 环境配置
      - SPRING_PROFILES_ACTIVE=dev
      - TZ=Asia/Shanghai
      # 探针标识
      - DEVICE_COLLECT_ID=1
      # 数据库配置
      - SPRING_DATASOURCE_URL=jdbc:postgresql://117.72.68.72:54329/ecosys
      - SPRING_DATASOURCE_USERNAME=postgres
      - SPRING_DATASOURCE_PASSWORD=TnLanWaidYSwTSG5
      - SPRING_DATASOURCE_DRIVER_CLASS_NAME=org.postgresql.Driver
      # Redis配置
      - SPRING_REDIS_HOST=192.168.222.131
      - SPRING_REDIS_PORT=6379
      - SPRING_REDIS_PASSWORD=
      - SPRING_REDIS_DATABASE=0
      - SPRING_REDIS_TIMEOUT=2000
      - SPRING_CACHE_REDIS_TIME_TO_LIVE=600000
      # Kafka配置
      - SPRING_KAFKA_PRODUCER_BOOTSTRAP_SERVERS=192.168.222.130:9092
      - SPRING_KAFKA_PRODUCER_TOPIC=test-topic
      # 防火墙配置
      - FIREWALL_ENABLED=true
      - FIREWALL_API_KEY=your-secure-api-key
      # 联动配置 (syslog-consumer 地址)
      - INTERLOCKING_ENABLED=true
      - INTERLOCKING_API_BASE_URL=http://192.168.222.131:8089/xdrservice/interlocking
      - INTERLOCKING_API_KEY=a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6
      # 探针心跳配置
      - PROBE_HEARTBEAT_ENABLED=true
      - PROBE_HEARTBEAT_INTERVAL_SECONDS=60
      - PROBE_HEARTBEAT_INITIAL_DELAY_MS=5000
      - PROBE_COLLECT_ID=probe-001
      - PROBE_COLLECT_NAME=日志采集探针
      - PROBE_APP_VERSION=1.0.0
      - PROBE_PLATFORM_API_URL=http://192.168.222.131:8089/xdrservice/interlocking/probe/heartbeat
      - PROBE_PLATFORM_API_KEY=a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6
      # 定时任务配置
      - SPRING_TASK_SCHEDULING_POOL_SIZE=5
      # JVM配置
      - JAVA_OPTS=-Xms256m -Xmx1024m -XX:+UseG1GC
    ports:
      - "8189:8189"  # API端口
      - "514:514/udp"  # Syslog UDP
      - "514:514/tcp"  # Syslog TCP
    volumes:
      - /home/syslog/logs:/app/logs
    networks:
      - xdr-network
    cap_add:
      - NET_BIND_SERVICE
    privileged: true

# ============================================
# 网络配置
# ============================================
networks:
  xdr-network:
    driver: bridge