Docker Swarm Deployment

echo "your-rcon-password" | docker secret create rcon_password -
echo "admin-panel-password" | docker secret create rcon_admin_password -

docker stack deploy -c minecraft-stack-rcon.yml mc

deploy:
  placement:
    constraints:
      # Run on manager nodes only
      - node.role == manager
      
      # Run on nodes with specific label
      - node.labels.minecraft == true
      
      # Run on nodes with SSD storage
      - node.labels.storage == ssd
      
      # Multiple constraints
      - node.role == worker
      - node.labels.region == us-east

docker node update --label-add minecraft=true node-1
docker node update --label-add storage=ssd node-1

deploy:
  resources:
    reservations:
      cpus: '2.0'
      memory: 4G
    limits:
      cpus: '4.0'
      memory: 8G

deploy:
  restart_policy:
    condition: on-failure    # on-failure, any, or none
    delay: 5s               # Delay between restarts
    max_attempts: 3         # Max restart attempts
    window: 120s            # Window to evaluate restart

deploy:
  update_config:
    parallelism: 1          # Update 1 task at a time
    delay: 10s              # Wait 10s between updates
    failure_action: rollback # rollback, pause, or continue
    monitor: 60s            # Monitor period
    max_failure_ratio: 0.3  # Max failures before rollback
    order: stop-first       # stop-first or start-first

# Deploy new stack
docker stack deploy -c minecraft-stack.yml mc

# Update stack (apply changes)
docker stack deploy -c minecraft-stack.yml mc

# Force update service
docker service update --force mc_minecraft

# Update service image
docker service update --image itzg/minecraft-server:java21 mc_minecraft

# Scale RCON service (if stateless)
docker service scale mc_rcon=3

# Rollback to previous version
docker service rollback mc_minecraft

# Check rollback status
docker service ps mc_minecraft

# Remove entire stack
docker stack rm mc

# Verify removal
docker stack ls
docker service ls

# List secrets
docker secret ls

# Inspect secret (metadata only)
docker secret inspect rcon_password

# Remove secret
docker secret rm rcon_password

# Create config
docker config create server_properties ./server.properties

services:
  minecraft:
    configs:
      - source: server_properties
        target: /data/server.properties
        mode: 0440

configs:
  server_properties:
    external: true

networks:
  minecraft:
    driver: overlay
    attachable: true  # Allow non-swarm containers to connect
    driver_opts:
      encrypted: "true"  # Encrypt network traffic

services:
  minecraft:
    ports:
      # Long syntax
      - target: 25565      # Container port
        published: 25565   # Host port
        protocol: tcp
        mode: host         # host or ingress

volumes:
  minecraft-data:
    driver: local
    driver_opts:
      type: nfs
      o: addr=nfs-server.example.com,rw
      device: ":/path/to/data"

# Install NFS volume plugin
docker plugin install --grant-all-permissions vieux/sshfs

volumes:
  minecraft-data:
    driver: vieux/sshfs
    driver_opts:
      sshcmd: "user@server:/path"
      password: "password"

# Follow service logs
docker service logs -f mc_minecraft

# Last 100 lines
docker service logs --tail 100 mc_minecraft

# Logs since timestamp
docker service logs --since 2024-01-01T00:00:00 mc_minecraft

# Include timestamps
docker service logs --timestamps mc_minecraft

# List all services
docker service ls

# Inspect service
docker service inspect mc_minecraft

# Service tasks (replicas)
docker service ps mc_minecraft

# Service details
docker service inspect --pretty mc_minecraft

# List stacks
docker stack ls

# Stack services
docker stack services mc

# Stack tasks
docker stack ps mc

# On additional manager nodes
docker swarm join-token manager

# Drain node (no new tasks)
docker node update --availability drain node-1

# Activate node
docker node update --availability active node-1

# Pause node (stop scheduling)
docker node update --availability pause node-1

# Find volume location
docker volume inspect mc_minecraft-data

# Create backup
docker run --rm -v mc_minecraft-data:/data -v $(pwd):/backup \
  alpine tar czf /backup/minecraft-backup.tar.gz /data

# Restore from backup
docker run --rm -v mc_minecraft-data:/data -v $(pwd):/backup \
  alpine tar xzf /backup/minecraft-backup.tar.gz -C /

# Check service status
docker service ps --no-trunc mc_minecraft

# View logs
docker service logs mc_minecraft

# Inspect service
docker service inspect mc_minecraft

# List networks
docker network ls

# Inspect network
docker network inspect mc_minecraft

# Test connectivity
docker run --rm --network mc_minecraft alpine ping minecraft

# List volumes
docker volume ls

# Inspect volume
docker volume inspect mc_minecraft-data

# Check volume contents
docker run --rm -v mc_minecraft-data:/data alpine ls -la /data