alpine-influxdb

docker pull woahbase/alpine-influxdb

---
services:
  influxdb:
    container_name: influxdb
    deploy:
      resources:
        limits:
          cpus: '4.00'
          memory: 4096M
      restart_policy:
        condition: on-failure
        delay: 10s
        max_attempts: 5
        window: 120s
    environment:
      PUID: ${PUID:-1000}
      PGID: ${PGID:-100}
      # TZ: ${TZ}
      INFLUXDB_REPORTING_DISABLED: true
      # INFLUXDB_ADMIN_USER: ${INFLUXDB_ADMIN_USER:-admin}
      # INFLUXDB_ADMIN_PWD: ${INFLUXDB_ADMIN_PWD:-admin}
      # INFLUXDB_HEALTHCHECK_USER: ${INFLUXDB_HEALTHCHECK_USER:-hc}
      # INFLUXDB_HEALTHCHECK_USER_PWD: ${INFLUXDB_HEALTHCHECK_PWD:-hc}
      INFLUXDB_GRAPHITE_ENABLED: false
    # healthcheck:
    #   interval: 2m
    #   retries: 5
    #   start_period: 5m
    #   test:
    #     - CMD-SHELL
    #     - >
    #       influx
    #       -username ${INFLUXDB_HEALTHCHECK_USER}
    #       -password ${INFLUXDB_HEALTHCHECK_USER_PWD}
    #       -execute 'SHOW DATABASES'
    #       || exit 1
    #     #   curl -f http://localhost:8086/metrics
    #   timeout: 10s
    hostname: influxdb
    image: woahbase/alpine-influxdb:${INFLUXDB_TAG}
    network_mode: bridge
    ports:
      - protocol: tcp
        host_ip: 0.0.0.0
        published: 8083
        target: 8083
      - protocol: tcp
        host_ip: 0.0.0.0
        published: 2003
        target: 2003
      - protocol: tcp
        host_ip: 0.0.0.0
        published: '${INFLUXDB_PORT:-8086}'
        target: 8086
    volumes:
      - type: bind
        source: ${INFLUXDB_DIR:?err}/data
        target: /var/lib/influxdb
        bind:
          create_host_path: true
      # - type: bind
      #   source: ${INFLUXDB_DIR:?err}/configs/influxdb.conf
      #   target: /etc/influxdb.conf
      #   bind:
      #     create_host_path: false
      - type: bind
        source: /etc/localtime
        target: /etc/localtime
        read_only: true
        bind:
          create_host_path: false

variables {
  dc   = "dc1" # to load the dc-local config file
  pgid = 100   # gid for docker
  puid = 1000  # uid for docker
  version = "1.8.10"
}
# locals { var = yamldecode(file("${var.dc}.vars.yml")) } # load dc-local config file

job "influxdb" {
  datacenters = [var.dc]
  # namespace   = local.var.namespace
  priority    = 80
  # region      = local.var.region
  type        = "service"

  constraint { distinct_hosts = true }

  # vault { policies = ["nomad-kv-readonly"] }

  group "docker" {
    count = 1

    restart {
      attempts = 2
      interval = "2m"
      delay    = "15s"
      mode     = "fail"
    }
    update {
      max_parallel      = 1
      min_healthy_time  = "10s"
      healthy_deadline  = "10m"
      progress_deadline = "15m"
      auto_revert       = false
    }

    service {
      name        = NOMAD_JOB_NAME
      port        = "http"
      tags        = ["ins${NOMAD_ALLOC_INDEX}", attr.unique.hostname, "aid=${NOMAD_ALLOC_ID}", "host=influxdb"]
      canary_tags = ["canary${NOMAD_ALLOC_INDEX}"]
      check {
        name      = "${NOMAD_JOB_NAME}@${attr.unique.hostname}:${NOMAD_HOST_PORT_http}"
        type      = "http"
        path      = "/health"
        interval  = "60s"
        timeout   = "10s"
      }
      check {
        name      = "ping-client"
        command   = "/bin/bash"
        args      = ["-c", "influx -username $INFLUXDB_HEALTHCHECK_USER -password $INFLUXDB_HEALTHCHECK_USER_PWD -execute 'SHOW DATABASES'"]
        task      = "influxdb"
        type      = "script"
        interval  = "60s"
        timeout   = "10s"
      }
      check_restart {
        limit     = 3
        grace     = "10m"
      }
    }

    ephemeral_disk { size = 128 } # MB
    network {
      # dns { servers = local.var.dns_servers }
      # port "admin"    { static = 8083  } # deprecated
      port "http"     { static = 8086  }
      port "rpc"      { static = 8088  }
      # port "udp"      { static = 8089  }
      # port "collectd" { static = 25826 }
      port "graphite" { static = 2003  }
      # port "otsdb"    { static = 4242  }
    }
    volume "nomad-influxdb-data" {
      type      = "host"
      read_only = false
      source    = "nomad-influxdb-data"
    }

    task "influxdb" {
      driver = "docker"

      config {
        healthchecks { disable = true }
        hostname     = NOMAD_JOB_NAME
        image        = "woahbase/alpine-influxdb:${var.version}"
        network_mode = "host"
        ports        = ["http", "rpc", "graphite"]

        logging {
          type = "journald"
          config {
            mode = "non-blocking"
            tag = NOMAD_JOB_NAME
          }
        }

        # mount {
        #   source   = "local/influxdb.conf"
        #   target   = "/etc/influxdb.conf"
        #   type     = "bind"
        #   readonly = true
        # }
        mount {
          type     = "bind"
          target   = "/etc/localtime"
          source   = "/etc/localtime"
          readonly = true
        }
      }

      volume_mount {
        # ensure policies allow vault-generated-token to read-write to the volume
        volume      = "nomad-influxdb-data"
        destination = "/var/lib/influxdb"
        read_only   = false
      }

      env {
        PUID = var.puid
        PGID = var.pgid
        # TZ   = local.var.tz

        INFLUXDB_REPORTING_DISABLED = "true"
        INFLUXDB_GRAPHITE_ENABLED   = "false"
      }

      resources {
        cpu    = 2000 # MHz
        memory = 5120 # MB
      }

      # template {
      #   destination = "local/influxdb.conf"
      #   data        = <<-EOC
      #     {{ key "nomad/${var.dc}/influxdb/influxdb.conf" }}
      #   EOC
      #   change_mode = "restart"
      #   perms       = "644"
      #   error_on_missing_key = true
      # }

      template {
        destination = "secrets/env"
        data        = <<-EOE
          {{ with secret "kv/data/nomad/${var.dc}/influxdb" }}
          INFLUXDB_HEALTHCHECK_USER={{ .Data.data.username }}
          INFLUXDB_HEALTHCHECK_USER_PWD={{ .Data.data.password }}
          {{ end }}
        EOE
        change_mode = "restart"
        env         = true
        perms       = "444"
        error_on_missing_key = true
      }
    }
  }
}

upstream proxy_influxdb {
  server your.host.local:<influxdb-port> fail_timeout=5;
}

server {
    server_name influxdb.local;
    listen 443 ssl;

    ssl_certificate      /config/keys/certificate.crt;
    ssl_certificate_key  /config/keys/private.key;

    # Recommendations from
    # https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
    ssl_protocols TLSv1.1 TLSv1.2;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
    add_header Strict-Transport-Security "max-age=31536000";

    # required to avoid HTTP 411: see Issue #1486 (https://github.com/moby/moby/issues/1486)
    chunked_transfer_encoding on;
    auth_basic off;

    location / {
        proxy_read_timeout 300;
        proxy_connect_timeout 300;

        proxy_pass_request_headers on;
        proxy_http_version 1.1;

        add_header       Strict-Transport-Security "max-age=15552000";
        proxy_set_header Connection "";
        # proxy_set_header Connection $connection_upgrade;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Real-IP $remote_addr;

        proxy_pass http://proxy_influxdb;
    }
}

git clone https://github.com/woahbase/alpine-influxdb
cd alpine-influxdb

make build test ARCH=aarch64 

make build test ARCH=armhf 

make build test ARCH=armv7l 

make build test ARCH=x86_64 

make push ARCH=aarch64 

make push ARCH=armhf 

make push ARCH=armv7l 

make push ARCH=x86_64