Check against your doze

OpenSearch

Bring your ownNot signed by doze

Search and log analytics. doze runs your OpenSearch: the opensearchproject/opensearch container, or an archive you pin.

doze add opensearch · port 9200

Not a module: doze runs your OpenSearch. There is no doze/opensearch in the registry. doze add opensearch writes a service block, takes the first way that works on your machine, and names the other two.

Two ways to run it, and the block each writes

Container

first choice

$ doze add opensearch --as container

A container is just a command that stays in the foreground. Needs Docker or a compatible runtime. doze knows no run line for an installed opensearch, so this is the block it writes.

doze.hcl

service "opensearch" {
  # a container: a container is just a command, and `run` stays in the foreground
  run  = "docker run --rm -p $HOST:$PORT:9200 opensearchproject/opensearch"
  port = 9200
}

Download

pinned by sha256

$ doze add opensearch --as download

You fill in the archive URL and the real run line; doze fetches it once and pins its checksum in doze.lock.

doze.hcl: fill in download and run

service "opensearch" {
  # fetched once, pinned in doze.lock by its checksum, and run from the archive
  download = "https://example.com/opensearch-darwin-arm64.tar.gz" # fill this in
  run      = "./opensearch --port $PORT"
  port     = 9200
}

terminal: plain doze add, on a machine without opensearch

$ doze add opensearch
→ opensearch is not a doze module — adding it as a service
  opensearch is not installed — the block runs it as a container
  other ways: --as installed · --as container · --as download

  use it from an app:  OPENSEARCH_ADDR = service.opensearch.address

$HOST, $PORT and $DATA are filled in at run time.

What doze still gives it

A name: opensearch.<stack>.doze, and your own domain over https if you set one.
A port, held by doze while OpenSearch is asleep.
Sleep and wake: it wakes when a client connects and sleeps when nothing has for a while. Data stays in $DATA.
Logs in doze logs opensearch and in the app, next to everything else.

What it doesn't

No signature. doze didn't build the image, so it doesn't sign it. A download is pinned by sha256 in doze.lock: a changed file is refused, but nobody vouched for the first one.
No pinned version for the container. You get whatever opensearchproject/opensearch points at today.
No declared databases or users. A module converges those from doze.hcl; a service is just a process.

The other tools doze add knows

Each gets the same three ways where it can. rabbitmq, opensearch and clickhouse have no known run line, so installed falls back to the container.

Name	What it is	Runs from	Port
mongo	The document database	mongod · mongo:7	27017
mailpit	Catches outgoing email; web inbox on the next port	mailpit · axllent/mailpit	1025
minio	S3-compatible object storage (doze AWS has S3 too)	minio · minio/minio	9000
nats	Messaging and streams	nats-server · nats	4222
meilisearch	Typo-tolerant search engine	meilisearch · getmeili/meilisearch	7700
memcached	The classic in-memory cache	memcached · memcached	11211
rabbitmq	AMQP message broker	container rabbitmq:3	5672
clickhouse	Column-store analytics database	container clickhouse/clickhouse-server	8123

Anything else: doze add <name> writes a download block to fill in. What that looks like