From 8086073e45e02b3929cb59c541ef558c2eede9c6 Mon Sep 17 00:00:00 2001
From: orianelou <126462046+orianelou@users.noreply.github.com>
Date: Thu, 4 Apr 2024 10:45:15 +0300
Subject: [PATCH] Create docker-compose-managed.yaml

adding centrally-managed compose
---
 deployment/docker-compose-managed.yaml | 48 ++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 deployment/docker-compose-managed.yaml

diff --git a/deployment/docker-compose-managed.yaml b/deployment/docker-compose-managed.yaml
new file mode 100644
index 00000000..663e2da0
--- /dev/null
+++ b/deployment/docker-compose-managed.yaml
@@ -0,0 +1,48 @@
+# Copyright (C) 2022 Check Point Software Technologies Ltd. All rights reserved.
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# You may obtain a copy of the License at
+
+#     http://www.apache.org/licenses/LICENSE-2.0
+
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+version: '3.3'
+# docker compose for npm open-appsec integration
+
+services:
+  appsec-npm:
+    container_name: npm-attachment
+    image: 'ghcr.io/openappsec/nginx-proxy-manager-centrally-managed-attachment:latest'
+    ipc: host
+    restart: unless-stopped
+    ports:
+      - '80:80' # Public HTTP Port
+      - '443:443' # Public HTTPS Port
+      - '81:81' # Admin Web Port
+    volumes:
+      - ./data:/data
+      - ./letsencrypt:/etc/letsencrypt
+      - ./appsec-logs:/ext/appsec-logs
+      - ./appsec-localconfig:/ext/appsec
+
+  appsec-agent:
+    container_name: appsec-agent
+    image: 'ghcr.io/openappsec/agent:latest'
+    network_mode: service:appsec-npm
+    ipc: host
+    restart: unless-stopped
+    environment:
+      # adjust with your own email below
+      - user_email=user@email.com
+      - nginxproxymanager=true
+      - autoPolicyLoad=true
+    volumes:
+      - ./appsec-config:/etc/cp/conf
+      - ./appsec-data:/etc/cp/data
+      - ./appsec-logs:/var/log/nano_agent
+    command: /cp-nano-agent --token <TOKEN>