docker-compose.local.yml

version: '3.9'

networks:
  default:
    external: true
    name: ${DOCKER_NETWORK}
  elastic:
    external: true
    name: ${ELASTIC_NETWORK}
  # local network:
  intnet:
    external: false
    name: ${INT_NETWORK}

services:

#         
# === Nginx ===
#         
  webwp:
    # Alpine
    # image: lhsradek/lhsdock:v3
    image: nginx:alpine
    container_name: "${APP_NICK}-${APP_ID}-webwp"
    hostname: "webwp.${APP_HOST}"
    restart: ${DOCKER_RESTART_POLICY}
    # ports:
    #  - 80:80
    #  - 4443:443
    networks:
      # for traefik:
        - default
      # local network:
        - intnet
    volumes:
      # The first mount add bash and ping to nginx:alpine - lhsradek/lhsdock this dont'n need, see:
      # https://github.com/lhsradek/platypus-lhsdock/blob/main/context/Dockerfile of lhsradek/lhsdock:v3
      - ./extras/nginx/add.sh:/docker-entrypoint.d/05-add-packages.sh:ro
      - ./extras/nginx/default-https.conf:/etc/nginx/conf.d/default.conf:ro
      - ./certs/ca.crt:/etc/ssl/private/ca.pem:ro
      - ./certs/${CERTNAME}.crt:/etc/ssl/private/cacert.pem:ro
      - ./certs/${CERTNAME}.key:/etc/ssl/private/cacert-key.pem:ro
      - ./logs/wordpress-nginx:/var/log/nginx
      - wordpress:/var/www/html/wp
      - phpmyadmin:/var/www/html/pma
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=${DOCKER_NETWORK}"
      - "traefik.http.routers.webwp-${NUM}-public.rule=Host(`${APP_HOST}`, `${WP_PHP_MY_ADMIN_HOST}`)"
      - "traefik.http.routers.webwp-${NUM}-public.entrypoints=https"
      - "traefik.http.routers.webwp-${NUM}-public.tls=true"
      - "traefik.http.routers.webwp-${NUM}-public.service=webwp-${APP_ID}"
      - "traefik.http.services.webwp-${APP_ID}.loadbalancer.server.port=443"
      - "traefik.http.services.webwp-${APP_ID}.loadbalancer.server.scheme=https"
    healthcheck:
      test: "curl -s -I http://localhost/nginx_status | grep -q 'HTTP/1.1 200 OK'"
      interval: 10s
      timeout: 10s
      retries: 500

#         
# === Wordpress php ===
#         
  webwp-php:
    # Alpine WORDPRESS-php for install or update
    # image: wordpress:fpm-alpine
    # with elastic-apm-php agent https://www.elastic.co/guide/en/apm/agent/php/current/intro.html
    # https://github.com/lhsradek/platypus-lhsfpm/blob/main/context/Dockerfile
    # for https://github.com/lhsradek/platypus-lhsdock
    image: lhsradek/fpm:v1
    container_name: "${APP_NICK}-${APP_ID}-webwp-php"
    # hostname: "webwp-php"
    hostname: "webwp-php.${APP_HOST}"
    restart: ${DOCKER_RESTART_POLICY}
    networks:
      # for APM:
      - elastic
      # local network:
      - intnet
    environment:
      - ELASTIC_APM_ENVIRONMENT=${STAGE}
      - ELASTIC_APM_LOG_LEVEL_STDERR=info
      - ELASTIC_APM_API_KEY=${ELASTIC_APM_API_KEY}
      - ELASTIC_APM_SERVER_URL=${ELASTIC_APM_SERVER_URL}
      - ELASTIC_APM_SERVICE_NAME=${APP_NICK}-${APP_ID}
      - ELASTIC_APM_SERVICE_NODE_NAME=${APP_HOST}
      - WORDPRESS_DB_HOST=db.${APP_HOST}
      - WORDPRESS_DB_NAME=${APP_ID}
      - WORDPRESS_DB_USER=${APP_ID}
      - WORDPRESS_DB_PASSWORD=${WP_DB_PASSWORD}
      - |
        WORDPRESS_CONFIG_EXTRA=
        define( 'WP_HOME', "${WP_HOME}" );
        define( 'WP_SITEURL', "${WP_HOME}" );
        define( 'WP_ENVIRONMENT_TYPE', "${ENVIRONMENT_TYPE}" );
        define( 'WP_REDIS_HOST', "redis" );
        define( 'MYSQL_CLIENT_FLAGS', MYSQLI_CLIENT_SSL ); 
    volumes:
      - ./extras/php/phpSettings.conf:/usr/local/etc/php-fpm.d/zzz-phpSettings.conf:ro
      - ./certs/ca.crt:/var/www/html/wp-includes/certificates/rootCA.crt:ro
      # - ./certs/${CERTNAME}.crt:/var/www/html/wp-includes/certificates/${APP_HOST}.crt:ro
      # - ./certs/${CERTNAME}.key:/var/www/html/wp-includes/certificates/${APP_HOST}.key:ro
      - ./logs/wordpress-nginx/php-error.log:/var/log/error.log
      - ./logs/wordpress-nginx/php-access.log:/var/log/access.log
      - wordpress:/var/www/html

#         
# === PMA php ===
#         
  webpma-php:
    # Alpine phpMyAdmin
    image: phpmyadmin:fpm-alpine
    container_name: "${APP_NICK}-${APP_ID}-webpma-php"
    hostname: "pma.${APP_HOST}"
    restart: ${DOCKER_RESTART_POLICY}
    environment:
      - PMA_HOST=db.${APP_HOST}
      - PMA_ARBITRARY=0
      - UPLOAD_LIMIT=1280M
    networks:
      # local network:
      - intnet
    volumes:
      - ./extras/php/phpSettings.conf:/usr/local/etc/php-fpm.d/zzz-phpSettings.conf:ro
      - ./extras/pma/config.user.inc.php:/etc/phpmyadmin/config.user.inc.php:ro
      - ./certs/ca.crt:/etc/phpmyadmin/cacert.pem:ro
      - ./certs/${PMA_CERTNAME}.crt:/etc/phpmyadmin/cert.pem:ro
      - ./certs/${PMA_CERTNAME}.key:/etc/phpmyadmin/cert-key.pem:ro
      - ./logs/wordpress-nginx/php-error.log:/var/log/error.log
      - ./logs/wordpress-nginx/php-access.log:/var/log/access.log
      - phpmyadmin:/var/www/html

#         
# === DB ===
#         
  db:
    # Ubuntu - db 
    image: mariadb
    container_name: "${APP_NICK}-${APP_ID}-db"
    hostname: "db.${APP_HOST}"
    restart: ${DOCKER_RESTART_POLICY}
    # ports:
    #   - 3306:3306
    networks:
      # local network:
      - intnet
    environment:
      MYSQL_ROOT_PASSWORD: ${WP_DB_ROOT_PASSWORD}
      MYSQL_DATABASE: ${APP_ID}
      MYSQL_USER: ${APP_ID}
      MYSQL_PASSWORD: ${WP_DB_PASSWORD}
      MYSQL_INITDB_SKIP_TZINFO: "true"
    volumes:
      - ./extras/etc/mysql/mariadb.conf.d/50-server-ssl.cnf:/etc/mysql/mariadb.conf.d/50-server.cnf:ro
      - ./certs/ca.crt:/etc/mysql/cacert.pem:ro
      - ./certs/${DB_CERTNAME}.crt:/etc/mysql/server-cert.pem:ro
      - ./certs/${DB_CERTNAME}.key:/etc/mysql/server-key.pem:ro
      - ./logs/wordpress-mysql:/var/log/mysql
      - mysql:/var/lib/mysql

#         
# === Redis ===
#         
  redis:
    # Alpine Linux
    image: redis:7-alpine
    container_name: "${APP_NICK}-${APP_ID}-redis"
    hostname: "redis.${APP_HOST}"
    restart: ${DOCKER_RESTART_POLICY}
    networks:
      # local network:
      - intnet
    environment:
      - ALLOW_EMPTY_PASSWORD=yes
    # ports:
    # - 6379:6379
    volumes:
      # - ./extras/etc/sysctl.conf:/etc/sysctl.conf:ro
      # - ./extras/redis/redis.conf:/usr/local/etc/redis/redis.conf:ro
      # - ./extras/var/lib/sysctl.d/00-alpine.conf:/var/lib/sysctl.d/00-alpine.conf
      # - ./certs/ca.crt:/etc/ssl/private/ca.crt:ro
      - redis:/data:rw

#         
# === Filebeat ===
#         
  webwp-filebeat:
    # Ubuntu - filebeat
    image: docker.elastic.co/beats/filebeat:${STACK_VERSION}
    deploy:
      resources:
        limits:
          memory: ${MEM_LIMIT}
    restart: ${DOCKER_RESTART_POLICY}
    container_name: "${APP_NICK}-${APP_ID}-filebeat"
    hostname: "filebeat.${APP_HOST}"
    networks:
      # for logstash
      - default
      # for kibana, elastic and APM
      - elastic
      - intnet
    # ports:
    #   - ${MONITOR_PORT}:5066
    user: root
    volumes:
      - ./certs:/usr/share/filebeat/certs:ro
      - ./extras/filebeat/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro
      - ./extras/filebeat/filebeat:/root/bin:ro
      - ./logs/filebeat:/usr/share/filebeat/logs
      - ./logs/wordpress-nginx/:/usr/share/filebeat/elogs/nginx:ro
      - ./logs/wordpress-mysql/:/usr/share/filebeat/elogs/mysql:ro
      # - /var/log:/hostfs/var/log:ro
      - filebeat:/usr/share/filebeat
    environment:
      - APP_ID=${APP_ID}
      - APP_HOST=${APP_HOST}
      - APP_NICK=${APP_NICK}
      - APP_NET=${APP_NET}
      - HOST_NICK=${HOST_NICK}
      - CLUSTER_UUID=${CLUSTER_UUID}
      - MONITOR_PORT=${MONITOR_PORT}
      - ELASTICSEARCH_USERNAME=${ELASTIC_USERNAME}
      - ELASTICSEARCH_PASSWORD=${ELASTIC_PASSWORD}
      - ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES=/usr/share/filebeat/certs/ca.crt
      - ELASTIC_APM_API_KEY=${ELASTIC_APM_API_KEY}
      - ELASTIC_APM_ENVIRONMENT=${STAGE}
      - ELASTIC_APM_SERVER_URL=${ELASTIC_APM_SERVER_URL}
      - ELASTIC_APM_SERVICE_NAME=${APP_NICK}-${APP_ID}
      - ELASTIC_APM_SERVICE_NODE_NAME=filebeat.${APP_HOST}
      - ELASTIC_HOST=${ELASTIC_HOST}
      - KIBANA_HOST=${KIBANA_HOST}
      - LOGSTASH_SERVER_CERT=/usr/share/filebeat/certs/${LOGSTASH_CERTNAME}.crt
      - LOGSTASH_SERVER_CERT_KEY=/usr/share/filebeat/certs/${LOGSTASH_CERTNAME}.key
      - LOGSTASH_HOST=${LOGSTASH_HOST}
      - STAGE=${STAGE}
      - VERIFICATION_MODE=${VERIFICATION_MODE}
    # labels:
    #   - "traefik.enable=true"
    #   - "traefik.docker.network=${DOCKER_NETWORK}"
    #   - "traefik.http.routers.webwp-filebeat-${NUM}.rule=Host(`filebeat.${APP_HOST}`)"
    #   - "traefik.http.routers.webwp-filebeat-${NUM}.entrypoints=http-${MONITOR_PORT}"
    #   - "traefik.http.routers.webwp-filebeat-${NUM}.tls=false"
    #   - "traefik.http.routers.webwp-filebeat-${NUM}.service=webwp-filebeat-${APP_ID}"
    #   - "traefik.http.services.webwp-filebeat-${APP_ID}.loadbalancer.server.port=${MONITOR_PORT}"
    #   - "traefik.http.services.webwp-filebeat-${APP_ID}.loadbalancer.server.scheme=http"

#
# === Metricbeat ===
#
  webwp-metricbeat:
    # Ubuntu - metricbeat
    image: docker.elastic.co/beats/metricbeat:${STACK_VERSION}
    deploy:
      resources:
        limits:
          memory: ${MEM_LIMIT}
    restart: ${DOCKER_RESTART_POLICY}
    container_name: "${APP_NICK}-${APP_ID}-metricbeat"
    hostname: "metricbeat.${APP_HOST}"
    networks:
      - default
      # for kibana, elastic and APM
      - elastic
      - intnet
    # ports:
    #   - ${MONITOR_PORT}:5066
    user: root
    volumes:
      # docker.sock is for docker module
      # - /var/run/docker.sock:/var/run/docker.sock
      # for system module:
      # - /sys/fs/cgroup:/hostfs/sys/fs/cgroup:ro
      # - /proc:/hostfs/proc:ro
      # - /:/hostfs:ro
      - ./certs:/usr/share/metricbeat/certs:ro
      - ./extras/metricbeat/metricbeat.yml:/usr/share/metricbeat/metricbeat.yml:ro
      - ./extras/metricbeat/metricbeat:/root/bin:ro
      - ./logs/metricbeat:/usr/share/metricbeat/logs
      - metricbeat:/usr/share/metricbeat
    environment:
      - APP_ID=${APP_ID}
      - APP_HOST=${APP_HOST}
      - APP_NICK=${APP_NICK}
      - APP_NET=${APP_NET}
      - HOST_NICK=${HOST_NICK}
      - CLUSTER_UUID=${CLUSTER_UUID}
      - MONITOR_PORT=${MONITOR_PORT}
      - ELASTICSEARCH_USERNAME=${ELASTIC_USERNAME}
      - ELASTICSEARCH_PASSWORD=${ELASTIC_PASSWORD}
      - ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES=/usr/share/metricbeat/certs/ca.crt
      - ELASTIC_APM_API_KEY=${ELASTIC_APM_API_KEY}
      - ELASTIC_APM_ENVIRONMENT=${STAGE}
      - ELASTIC_APM_SERVER_URL=${ELASTIC_APM_SERVER_URL}
      - ELASTIC_APM_SERVICE_NAME=${APP_NICK}-${APP_ID}
      - ELASTIC_APM_SERVICE_NODE_NAME=metricbeat.${APP_HOST}
      - ELASTIC_HOST=${ELASTIC_HOST}
      - KIBANA_HOST=${KIBANA_HOST}
      - STAGE=${STAGE}
      - VERIFICATION_MODE=${VERIFICATION_MODE}
      - WP_DB_ROOT_PASSWORD=${WP_DB_ROOT_PASSWORD}
      - WP_DB_DATABASE=${WP_DB_DATABASE}
      - WP_DB_USER=${WP_DB_USER}
      - WP_DB_PASSWORD=${WP_DB_PASSWORD}
    # labels:
    #   - "traefik.enable=true"
    #   - "traefik.docker.network=${DOCKER_NETWORK}"
    #   - "traefik.http.routers.webwp-metricbeat-${NUM}.rule=Host(`metricbeat.${APP_HOST}`)"
    #   - "traefik.http.routers.webwp-metricbeat-${NUM}.entrypoints=http-${MONITOR_PORT}"
    #   - "traefik.http.routers.webwp-metricbeat-${NUM}.tls=false"
    #   - "traefik.http.routers.webwp-metricbeat-${NUM}.service=webwp-metricbeat-${APP_ID}"
    #   - "traefik.http.services.webwp-metricbeat-${APP_ID}.loadbalancer.server.port=${MONITOR_PORT}"
    #   - "traefik.http.services.webwp-metricbeat-${APP_ID}.loadbalancer.server.scheme=http"

# === Elastic Agent as fleet server ===
#
#   webwp-fleet:
#     depends_on:
#       webwp:
#         condition: service_healthy
#     # Ubuntu - fleet
#     image: docker.elastic.co/beats/elastic-agent:${STACK_VERSION}
#     restart: ${DOCKER_RESTART_POLICY}
#     container_name: "${APP_NICK}-${APP_ID}-fleet"
#     hostname: "fleet.${APP_HOST}"
#     user: root # note, synthetic browser monitors require this set to `elastic-agent`
#     networks:
#       # for traefik:
#       - default
#       - elastic
#       # local network:
#       - intnet
#     # ports:
#     #   - 8201:8201
#     #   - ${FLEET_SERVER_PORT}:${FLEET_SERVER_PORT}
#     # https://www.elastic.co/guide/en/fleet/current/agent-environment-variables.html
#     environment:
#       - APP_ID=${APP_ID}
#       - APP_HOST=${APP_HOST}
#       - APP_NICK=${APP_NICK}
#       - HOST_NICK=${HOST_NICK}
#       - APP_NET=${APP_NET}
#       - LOC_NET=${INT_NETWORK}
#       - CLUSTER_UUID=${CLUSTER_UUID}
#       - ES_PORT=${ES_PORT}
#       - LOGSTASH_PORT=5044
#       - MONITOR_PORT=${MONITOR_PORT}
#       - ELASTIC_AGENT_TAGS=${ELASTIC_AGENT_TAGS}
#       - ELASTICSEARCH_HOSTS=https://es01.${HOST_NICK}.${APP_NET}:9200
#       - ELASTICSEARCH_USERNAME=${ELASTIC_USERNAME}
#       - ELASTICSEARCH_PASSWORD=${ELASTIC_PASSWORD}
#       - ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES=/usr/share/elastic-agent/certs/ca.crt
#       - FLEET_ENROLL=${FLEET_ENROLL}
#       - FLEET_ENROLLMENT_TOKEN=${FLEET_ENROLLMENT_TOKEN}
#       - FLEET_SERVER_ENABLE=${FLEET_SERVER_ENABLE}
#       - FLEET_SERVER_ELASTICSEARCH_HOST=https://es01.${HOST_NICK}.${APP_NET}:9200
#       - FLEET_SERVER_ELASTICSEARCH_USERNAME=elastic
#       - FLEET_SERVER_ELASTICSEARCH_PASSWORD=${ELASTIC_PASSWORD}
#       - FLEET_SERVER_ELASTICSEARCH_CA=/usr/share/elastic-agent/certs/ca.crt
#       - FLEET_SERVER_ELASTICSEARCH_REQUESTTIMEOUT=180000
#       - FLEET_SERVER_HOST=fleet.${APP_HOST}
#       - FLEET_SERVER_PORT=${FLEET_SERVER_PORT}
#       - FLEET_SERVER_POLICY_ID=${FLEET_SERVER_POLICY_ID}
#       - FLEET_SERVER_SERVICE_TOKEN=${FLEET_SERVER_SERVICE_TOKEN}
#       - FLEET_SERVER_CERT=/usr/share/elastic-agent/certs/${FLEET_CERTNAME}.crt
#       - FLEET_SERVER_CERT_KEY=/usr/share/elastic-agent/certs/${FLEET_CERTNAME}.key
#       - FLEET_CA=/usr/share/elastic-agent/certs/ca.crt
#       - FLEET_URL=https://fleet.${APP_HOST}:${FLEET_SERVER_PORT}
#       - KIBANA_FLEET_HOST=${KIBANA_HOST}
#       - KIBANA_FLEET_CA=/usr/share/elastic-agent/certs/ca.crt
#       - KIBANA_FLEET_SETUP=1
#       - KIBANA_FLEET_REQUESTTIMEOUT=1200000
#       - LOGSTASH_SERVER_CERT=/usr/share/elastic-agent/certs/${LOGSTASH_CERTNAME}.crt
#       - LOGSTASH_SERVER_CERT_KEY=/usr/share/elastic-agent/certs/${LOGSTASH_CERTNAME}.key
#       - STAGE=${STAGE}
#       - STACK_VERSION=${STACK_VERSION}
#       - STV=${STV}
#       - VERIFICATION_MODE=${VERIFICATION_MODE}
#     volumes:
#       - /var/run/docker.sock:/var/run/docker.sock
#       - /sys/fs/cgroup:/hostfs/sys/fs/cgroup:ro
#       - /proc:/hostfs/proc:ro
#       - /:/hostfs:ro
#       - ./certs:/usr/share/elastic-agent/certs:ro
#       - ./extras/elastic-agent/elastic-agent.yml:/usr/share/elastic-agent/elastic-agent.yml:ro
#       - ./extras/elastic-agent/apm-server.yml:/usr/share/elastic-agent/data/elastic-agent-${STV}/install/apm-server-${STACK_VERSION}-linux-x86_64/apm-server.yml:ro
#       - ./extras/elastic-agent/filebeat.yml:/usr/share/elastic-agent/data/elastic-agent-${STV}/install/filebeat-${STACK_VERSION}-linux-x86_64/filebeat.yml:ro
#       - ./extras/elastic-agent/metricbeat.yml:/usr/share/elastic-agent/data/elastic-agent-${STV}/install/metricbeat-${STACK_VERSION}-linux-x86_64/metricbeat.yml:ro
#       - ./logs/fleet:/usr/share/elastic-agent/state/data/logs
#       - ./logs/fleet/apm-server:/usr/share/elastic-agent/data/elastic-agent-${STV}/install/apm-server-${STACK_VERSION}-linux-x86_64/logs:ro
#       - ./logs/fleet/filebeat:/usr/share/elastic-agent/data/elastic-agent-${STV}/install/filebeat-${STACK_VERSION}-linux-x86_64/logs:ro
#       - ./logs/fleet/metricbeat:/usr/share/elastic-agent/data/elastic-agent-${STV}/install/metricbeat-${STACK_VERSION}-linux-x86_64/logs:ro
#       - ./logs/wordpress-nginx/:/usr/share/elastic-agent/data/elastic-agent-${STV}/install/filebeat-${STACK_VERSION}-linux-x86_64/elogs/nginx/platypus-wordpress-mysql:ro
#       - ./logs/wordpress-mysql/:/usr/share/elastic-agent/data/elastic-agent-${STV}/install/filebeat-${STACK_VERSION}-linux-x86_64/elogs/mysql/platypus-wordpress-mysql:ro
#       - fleet:/usr/share/elastic-agent
#     labels:
#       - "traefik.enable=true"
#       - "traefik.docker.network=${DOCKER_NETWORK}"
#       - "traefik.http.routers.webwp-fleet-${NUM}-public.rule=Host(`fleet.${APP_HOST}`)"
#       - "traefik.http.routers.webwp-fleet-${NUM}-public.entrypoints=https-${FLEET_SERVER_PORT}"
#       - "traefik.http.routers.webwp-fleet-${NUM}-public.tls=true"
#       - "traefik.http.routers.webwp-fleet-${NUM}-public.service=webwp-fleet-${APP_ID}"
#       - "traefik.http.services.webwp-fleet-${APP_ID}.loadbalancer.server.port=${FLEET_SERVER_PORT}"
#       - "traefik.http.services.webwp-fleet-${APP_ID}.loadbalancer.server.scheme=https"
#     healthcheck:
#       test: ["CMD-SHELL", "elastic-agent status | grep 'Status: HEALTHY'"]
#       interval: 10s
#       timeout: 10s
#       retries: 500
      
#         
# === Redis Commander - Web Console for Redis ===
#         
#   webwp-rc:
#     image: rediscommander/redis-commander:latest
#     container_name: "${APP_NICK}-${APP_ID}-webrc"
#     hostname: "rc.${APP_HOST}"
#     # build: .
#     restart: ${DOCKER_RESTART_POLICY}
#     networks:
#       # for traefik:
#       - default
#       # local network:
#       - intnet
#     environment:
#       - REDIS_HOSTS=redis
#     #ports:
#     # - "8081:8081"
#     labels:
#       - "traefik.enable=true"
#       - "traefik.docker.network=${DOCKER_NETWORK}"
#       - "traefik.http.routers.webwp-rc-${NUM}-public.rule=Host(`rc.${APP_HOST}`)"
#       - "traefik.http.routers.webwp-rc-${NUM}-public.entrypoints=https"
#       - "traefik.http.routers.webwp-rc-${NUM}-public.tls=true"
#       - "traefik.http.routers.webwp-rc-${NUM}-public.service=webwp-rc-${APP_ID}"
#       - "traefik.http.services.webwp-rc-${APP_ID}.loadbalancer.server.port=8081"
#       - "traefik.http.services.webwp-rc-${APP_ID}.loadbalancer.server.scheme=http"
   
volumes:
  wordpress:
    external: true
    name: "${NAME}-wp-${NUM}"
  phpmyadmin:
    external: true
    name: "${NAME}-pma-${NUM}"
  mysql:
    external: true
    name: "${NAME}-db-${NUM}"
  redis:
    external: true
    name: "${NAME}-redis-${NUM}"
  filebeat:
    external: true
    name: "${NAME}-filebeat-${NUM}"
  metricbeat:
    external: true
    name: "${NAME}-metricbeat-${NUM}"
#   fleet:
#     external: true
#     name: "${NAME}-fleet-${NUM}"