From 2b5842107985458dc4a704201237680b96fba0a2 Mon Sep 17 00:00:00 2001
From: Mike Conrad <mikec@paragontruss.com>
Date: Tue, 20 May 2025 08:27:56 -0400
Subject: [PATCH] Add network isolation

---
 docker-compose.yml | 80 +++++++++++++++++++++++++++++-----------------
 1 file changed, 50 insertions(+), 30 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index db9122a..9ec6d93 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,30 +1,50 @@
-  name: sentry
-  services:
-    reverse-proxy:
-      image: traefik:latest
-      command: --api.insecure=true --providers.docker
-      ports:
-        - 80:80
-        - 8080:8080
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock
-    scraper:
-      labels:
-        - "traefik.http.routers.scraper.rule=Host(`sentry.docker.localhost`)"
-    db:
-      image: postgres:16
-      environment:
-        - POSTGRES_PASSWORD=password
-      healthcheck:
-        test: ["CMD-SHELL", "pg_isready", "-d", "postgres"]
-        interval: 5s
-        timeout: 60s
-        retries: 5
-        start_period: 5s
-    grafana:
-      image: grafana/grafana:latest 
-      labels:
-        - "traefik.http.routers.grafana.rule=Host(`grafana.docker.localhost`)"
-    redis:
-      image: redis:latest
-      
+---
+name: sentry
+services:
+  reverse-proxy:
+    image: traefik:latest
+    command: --api.insecure=true --providers.docker
+    ports:
+      - 80:80
+      - 8080:8080
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    networks:
+      - traefik
+  scraper:
+    labels:
+      - "traefik.http.routers.scraper.rule=Host(`sentry.docker.localhost`)"
+    networks:
+      - traefik
+      - redis
+      - database
+  db:
+    image: postgres:16
+    environment:
+      - POSTGRES_PASSWORD=password
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready", "-d", "postgres"]
+      interval: 5s
+      timeout: 60s
+      retries: 5
+      start_period: 5s
+    networks:
+      - database
+  grafana:
+    image: grafana/grafana:latest
+    labels:
+      - "traefik.http.routers.grafana.rule=Host(`grafana.docker.localhost`)"
+    networks:
+      - traefik
+      - database
+  redis:
+    image: redis:latest
+    networks:
+      - redis
+networks:
+  traefik:
+    driver: bridge
+  database:
+    driver: bridge
+  redis:
+    driver: bridge
\ No newline at end of file