docker-compose.yml

---
version: "3.7"

secrets:
  gophish_config_json:
    file: ./secrets/gophish/config.json
  gophish_admin_fullchain_pem:
    file: ./secrets/gophish/admin_fullchain.pem
  gophish_admin_privkey_pem:
    file: ./secrets/gophish/admin_privkey.pem
  gophish_phish_fullchain_pem:
    file: ./secrets/gophish/phish_fullchain.pem
  gophish_phish_privkey_pem:
    file: ./secrets/gophish/phish_privkey.pem
  postfix_fullchain_pem:
    file: ./secrets/postfix/fullchain.pem
  postfix_privkey_pem:
    file: ./secrets/postfix/privkey.pem
  postfix_users_txt:
    file: ./secrets/postfix/users.txt

services:
  gophish:
    # Reminder: cisagov/gophish Docker images are created with
    # cisagov/gophish-docker, not cisagov/gophish!
    image: cisagov/gophish:0.11.0-cisa.1
    init: true
    restart: always
    ports:
      - target: 3333
        published: 3333
        protocol: tcp
        mode: host
      - target: 8080
        published: 3380
        protocol: tcp
        mode: host
    secrets:
      - source: gophish_config_json
        target: config.json
      - source: gophish_admin_fullchain_pem
        target: admin_fullchain.pem
      - source: gophish_admin_privkey_pem
        target: admin_privkey.pem
      - source: gophish_phish_fullchain_pem
        target: phish_fullchain.pem
      - source: gophish_phish_privkey_pem
        target: phish_privkey.pem

  gophish-tools:
    image: cisagov/gophish-tools:latest

  mailhog:
    image: mailhog/mailhog
    restart: always
    ports:
      - target: 8025
        published: 8025
        protocol: tcp
        mode: host

  postfix:
    image: cisagov/postfix:0.0.6
    init: false
    restart: always
    environment:
      - PRIMARY_DOMAIN=example.com
      # Mail relay through postfix will only work if the RELAY_IP matches
      # the default network subnet defined below.
      - RELAY_IP=172.16.202.0/24
    ports:
      - target: 25
        published: 1025
        protocol: tcp
        mode: host
      - target: 587
        published: 1587
        protocol: tcp
        mode: host
    secrets:
      - source: postfix_fullchain_pem
        target: fullchain.pem
      - source: postfix_privkey_pem
        target: privkey.pem
      - source: postfix_users_txt
        target: users.txt

networks:
  default:
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 172.16.202.0/24