radius_server_python/compose.yml at main · zeroleo12345/radius_server_python · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
x-logging: &default-logging-settings

  tag_logging: &tag_logging
    driver: "json-file"
    options:
      max-size: "10m"
      max-file: "1"
      tag: "radius_server.{{.Name}}.{{.ID}}"

  std_logging: &std_logging
    driver: "json-file"
    options:
      max-size: "10m"
      max-file: "1"


services:

  auth:
    platform: linux/amd64
    container_name: radius_auth
    build:
       context: .
       dockerfile: ./docker/Dockerfile
    ports:
      - "1812:1812/udp"   # IPv4 and IPv6
    environment:
      ENTRYPOINT: "${ENTRYPOINT:-/app/bin/auth.sh}"
      RADIUS_LISTEN_IP: "0.0.0.0" # "0.0.0.0" when docker support IPv4 only; "::" when docker support IPv6;
      RADIUS_LISTEN_PORT: "1812"
    volumes:
      - .:/app
    entrypoint: sh -c 'if [ -z "$$ENTRYPOINT" ]; then echo "ENTRYPOINT is empty!"; exit 0; fi; exec $$ENTRYPOINT'
    tty: true
    restart: "${RESTART_POLICY:-on-failure}"
    logging: *tag_logging
    networks:
      - pppoe_system


  auth_test:
    platform: linux/amd64
    cap_add:
      - SYS_PTRACE
    container_name: auth_test
    build:
       context: .
       dockerfile: ./docker/Dockerfile
    ports:
      - "2812:2812/udp"   # IPv4 and IPv6
    environment:
      ENTRYPOINT: "${ENTRYPOINT:-/app/bin/auth.sh}"
      RADIUS_LISTEN_IP: "0.0.0.0" # "0.0.0.0" when docker support IPv4 only; "::" when docker support IPv6;
      RADIUS_LISTEN_PORT: "2812"
    volumes:
      - .:/app
    entrypoint: sh -c 'if [ -z "$$ENTRYPOINT" ]; then echo "ENTRYPOINT is empty!"; exit 0; fi; exec $$ENTRYPOINT'
    tty: true
    restart: "${RESTART_POLICY:-on-failure}"
    logging: *std_logging
    networks:
      - pppoe_system


  acct:
    platform: linux/amd64
    container_name: radius_acct
    build:
       context: .
       dockerfile: ./docker/Dockerfile
    ports:
      - "1813:1813/udp"   # IPv4 and IPv6
      # - "0.0.0.0:1813:1813/udp"   # IPv4 only
      # - "[::]:1813:1813/udp"      # IPv6 only
    environment:
      ENTRYPOINT: "${ENTRYPOINT:-/app/bin/acct.sh}"
      RADIUS_LISTEN_IP: "0.0.0.0" # "0.0.0.0" when docker support IPv4 only; "::" when docker support IPv6;
      RADIUS_LISTEN_PORT: "1813"
    volumes:
      - .:/app
    entrypoint: sh -c 'if [ -z "$$ENTRYPOINT" ]; then echo "ENTRYPOINT is empty!"; exit 0; fi; exec $$ENTRYPOINT'
    tty: true
    restart: "${RESTART_POLICY:-on-failure}"
    logging: *tag_logging
    networks:
      - pppoe_system


  dae:
    # request send to Access-Controller port 3799
    platform: linux/amd64
    container_name: radius_dae
    build:
      context: .
      dockerfile: ./docker/Dockerfile
    environment:
      ENTRYPOINT: "${ENTRYPOINT:-/app/bin/dae.sh}"
    volumes:
      - .:/app
    entrypoint: sh -c 'if [ -z "$$ENTRYPOINT" ]; then echo "ENTRYPOINT is empty!"; exit 0; fi; exec $$ENTRYPOINT'
    tty: true
    restart: "${RESTART_POLICY:-on-failure}"
    logging: *tag_logging
    networks:
      - pppoe_system


  proxy:
    platform: linux/amd64
    container_name: radius_proxy
    image: bgernert/docker-radsecproxy:v1.11.2
    network_mode: host
    restart: "${RESTART_POLICY:-on-failure}"
    volumes:
      - ./etc/radius_proxy/proxy.conf.template:/etc/proxy.conf.template:ro
      - ./bin/:/app/bin
    environment:
      RADIUS_SERVER_HOST: "${RADIUS_SERVER_HOST:?abort}"
      RADIUS_SECRET: "${RADIUS_SECRET:?abort}"
    entrypoint: /app/bin/proxy.sh


  simulator:
    platform: linux/amd64
    container_name: simulator
    image: jumanjiman/radclient:latest
    volumes:
      - .:/app
    entrypoint: tail -f /dev/null
    tty: true
    networks:
      - pppoe_system


networks:
  pppoe_system:
    name: pppoe_system_network_name
    external: true