252 lines
8.7 KiB
YAML
252 lines
8.7 KiB
YAML
version: '3.4'
|
|
volumes:
|
|
data:
|
|
services:
|
|
|
|
#############################################################################
|
|
##################### MariaDB 1 #####################
|
|
#############################################################################
|
|
db:
|
|
container_name: mariadb-vikunja
|
|
image: tobi312/rpi-mariadb:10.11-alpine
|
|
# image: yobasystems/alpine-mariadb:10.5.9
|
|
command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
|
|
ports:
|
|
- "3306:3306"
|
|
- "3307:3307"
|
|
restart: unless-stopped
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${VIKUNJA_DB_ROOT}
|
|
- MYSQL_DATABASE=vikunja
|
|
- MYSQL_USER=vikunja
|
|
- MYSQL_PASSWORD=${VIKUNJA_DB_PW}
|
|
volumes:
|
|
- ./databases/db:/var/lib/mysql
|
|
- /etc/localtime:/etc/localtime:ro
|
|
|
|
#############################################################################
|
|
##################### MariaDB 2 #####################
|
|
#############################################################################
|
|
gitdb:
|
|
container_name: mariadb-git
|
|
image: tobi312/rpi-mariadb:10.11-alpine
|
|
image: yobasystems/alpine-mariadb:10.5.9
|
|
command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
|
|
networks:
|
|
- gitea
|
|
# ports:
|
|
# - "3326:3306"
|
|
# - "3327:3307"
|
|
restart: unless-stopped
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=${GITEA_DB_ROOT}
|
|
- MYSQL_DATABASE=gitea
|
|
- MYSQL_USER=gitea
|
|
- MYSQL_PASSWORD=${GITEA_DB_PW}
|
|
volumes:
|
|
- ./databases/db-git:/var/lib/mysql
|
|
- /etc/localtime:/etc/localtime:ro
|
|
|
|
#############################################################################
|
|
###################### Vikunja Api #####################
|
|
#############################################################################
|
|
api:
|
|
container_name: vikunja-api
|
|
image: vikunja/api
|
|
environment:
|
|
- VIKUNJA_DATABASE_HOST=db
|
|
- VIKUNJA_DATABASE_PASSWORD=${VIKUNJA_DB_PW}
|
|
- VIKUNJA_DATABASE_TYPE=mysql
|
|
- VIKUNJA_DATABASE_USER=vikunja
|
|
- VIKUNJA_DATABASE_DATABASE=vikunja
|
|
- VIKUNJA_SERVICE_JWTSECRET=${VIKUNJA_JWT}
|
|
- VIKUNJA_SERVICE_FRONTENDURL=https://vikunja.gerle.duckdns.org/
|
|
- VIKUNJA_SERVICE_TIMEZONE=Europe/Berlin
|
|
- VIKUNJA_DEFAULTSETTINGS_TIMEZONE=Europe/Berlin
|
|
- VIKUNJA_DEFAULTSETTINGS_WEEK_START=1
|
|
- VIKUNJA_MAILER_ENABLED=true
|
|
- VIKUNJA_MAILER_HOST=${MAIL_HOST}
|
|
- VIKUNJA_MAILER_PORT=${MAIL_PORT}
|
|
- VIKUNJA_MAILER_AUTHTYPE=login
|
|
- VIKUNJA_MAILER_USERNAME=${MAIL_USER}
|
|
- VIKUNJA_MAILER_PASSWORD=${MAIL_PW}
|
|
- VIKUNJA_MAILER_FROMEMAIL=${MAIL_ADDR}
|
|
# ports:
|
|
# - "3456:3456"
|
|
volumes:
|
|
- ./volumes/files:/app/vikunja/files
|
|
depends_on:
|
|
- db
|
|
networks:
|
|
- dockernet
|
|
- default
|
|
restart: unless-stopped
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.vikunja-api.rule=Host(`vikunja.gerle.duckdns.org`) && (PathPrefix(`/api/v1`) || PathPrefix(`/dav/`) || PathPrefix(`/.well-known/`))"
|
|
- "traefik.http.routers.vikunja-api.tls=true"
|
|
- "traefik.http.routers.vikunja-api.entrypoints=websecure"
|
|
- "traefik.http.routers.vikunja-api.tls.certResolver=letsencrypt"
|
|
# - 'traefik.http.services.vikunja-api.loadbalancer.server.port=80'
|
|
|
|
#############################################################################
|
|
##################### Vikunja Frontend #####################
|
|
#############################################################################
|
|
frontend:
|
|
container_name: vikunja-frontend
|
|
image: vikunja/frontend
|
|
# ports:
|
|
# - "80:80"
|
|
# environment:
|
|
# VIKUNJA_API_URL: http://gerle.i234.me:3456/api/v1
|
|
restart: unless-stopped
|
|
networks:
|
|
- dockernet
|
|
- default
|
|
labels:
|
|
- 'traefik.enable=true'
|
|
- 'traefik.http.routers.vikunja-frontend.rule=Host(`vikunja.gerle.duckdns.org`)'
|
|
- "traefik.http.routers.vikunja-frontend.entrypoints=websecure"
|
|
- "traefik.http.routers.vikunja-frontend.tls.certResolver=letsencrypt"
|
|
- "traefik.http.routers.vikunja-frontend.tls=true"
|
|
- 'traefik.http.services.vikunja-frontend.loadbalancer.server.port=80'
|
|
|
|
#############################################################################
|
|
##################### Traefik #####################
|
|
#############################################################################
|
|
traefik:
|
|
image: 'traefik:latest'
|
|
container_name: 'traefik'
|
|
restart: 'unless-stopped'
|
|
# command:
|
|
# - "--log.level=DEBUG"
|
|
# - "--accesslog=true"
|
|
depends_on:
|
|
- api
|
|
environment:
|
|
- ACME_DNS_API_BASE="http://10.0.0.8:4443"
|
|
- ACME_DNS_STORAGE_PATH="/.lego-acme-dns-accounts.json"
|
|
- DUCKDNS_TOKEN=${DUCKDNS}
|
|
ports:
|
|
- '80:80'
|
|
- '8080:8080'
|
|
- '443:443'
|
|
volumes:
|
|
- '/var/run/docker.sock:/var/run/docker.sock:ro'
|
|
- './traefik.yaml:/traefik.yaml'
|
|
- "./rules.yaml:/etc/traefik/rules.yaml"
|
|
- "./logs/:/logs/"
|
|
- './secrets/acme.json:/acme.json'
|
|
- './secrets/acme_ds.json:/acme_ds.json'
|
|
- "./secrets/lego-acme-dns-accounts.json:/.lego-acme-dns-accounts.json"
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.api.rule=Host(`berry.local/traefik`)"
|
|
- "traefik.http.routers.api.service=api@internal"
|
|
- "traefik.http.routers.api.entrypoints=web"
|
|
# - "traefik.http.routers.synology.rule=Host(`nas.gerle.i234.me`)"
|
|
# - "traefik.http.routers.synology.service=nas"
|
|
# - "traefik.http.services.nas.loadBalancer.passHostHeader=true"
|
|
# - "traefik.http.services.nas.loadBalancer.servers.url=https://192.168.2.2:5001"
|
|
networks:
|
|
- dockernet
|
|
- default
|
|
|
|
#############################################################################
|
|
##################### WhoAmI #####################
|
|
#############################################################################
|
|
whoami:
|
|
container_name: whoami
|
|
image: 'traefik/whoami'
|
|
restart: 'unless-stopped'
|
|
labels:
|
|
- 'traefik.enable=true'
|
|
- 'traefik.http.routers.whoami.rule=Host(`whoami.gerle.duckdns.org`)'
|
|
- 'traefik.http.services.whoami.loadbalancer.server.port=80'
|
|
- "traefik.http.routers.whoami.entrypoints=websecure"
|
|
- "traefik.http.routers.whoami.tls.certResolver=letsencrypt"
|
|
networks:
|
|
- dockernet
|
|
|
|
|
|
#############################################################################
|
|
##################### GiTea #####################
|
|
#############################################################################
|
|
|
|
git:
|
|
image: gitea/gitea:latest
|
|
container_name: gitea
|
|
environment:
|
|
- GITEA__database__DB_TYPE=mysql
|
|
- GITEA__database__HOST=gitdb
|
|
- GITEA__database__NAME=gitea
|
|
- GITEA__database__USER=gitea
|
|
- GITEA__database__PASSWD=${GITEA_DB_PW}
|
|
- GITEA__repository__DEFAULT_BRANCH=master
|
|
- GITEA__mailer__ENABLED=true
|
|
- GITEA__mailer__FROM=${MAIL_ADDR}
|
|
- GITEA__mailer__PROTOCOL=smtp+starttls
|
|
- GITEA__mailer__SMTP_ADDR=${MAIL_HOST}
|
|
- GITEA__mailer__SMTP_PORT=${MAIL_PORT}
|
|
# - GITEA__mailer__IS_TLS_ENABLED=true
|
|
- GITEA__mailer__USER=${MAIL_USER}
|
|
- GITEA__mailer__PASSWD=${MAIL_PW}
|
|
- GITEA__server__ROOT_URL="https://git.gerle.duckdns.org"
|
|
restart: always
|
|
networks:
|
|
- gitea
|
|
- dockernet
|
|
volumes:
|
|
- ./volumes/gitea:/data
|
|
- /etc/timezone:/etc/timezone:ro
|
|
- /etc/localtime:/etc/localtime:ro
|
|
ports:
|
|
- "3000:3000"
|
|
- "222:22"
|
|
labels:
|
|
- 'traefik.enable=true'
|
|
- 'traefik.http.routers.git.rule=Host(`git.gerle.duckdns.org`)'
|
|
- 'traefik.http.services.git.loadbalancer.server.port=3000'
|
|
- "traefik.http.routers.git.entrypoints=websecure"
|
|
- "traefik.http.routers.git.tls.certResolver=letsencrypt"
|
|
depends_on:
|
|
- gitdb
|
|
|
|
#############################################################################
|
|
##################### Networks #####################
|
|
#############################################################################
|
|
|
|
networks:
|
|
dockernet:
|
|
external: true
|
|
gitea:
|
|
external: false
|
|
|
|
# secrets:
|
|
# mariadb_root:
|
|
# file: ./docker/secrets/mariadb_root
|
|
# vikunja-db_database:
|
|
# file: ./docker/secrets/vikunja-db_database
|
|
# vikunja-db_user:
|
|
# file: ./docker/secrets/vikunja-db_user
|
|
# vikunja-db_pw:
|
|
# file: ./docker/secrets/vikunja-db_pw
|
|
# gitea-db_database:
|
|
# file: ./docker/secrets/gitea-db_database
|
|
# gitea-db_user:
|
|
# file: ./docker/secrets/gitea-db_user
|
|
# gitea-db_pw:
|
|
# file: ./docker/secrets/gitea-db_pw
|
|
# viknja_jwt:
|
|
# file: ./docker/secrets/vikunja_jwt
|
|
# mail_host:
|
|
# file: ./docker/secrets/mail_host
|
|
# mail_user:
|
|
# file: ./docker/secrets/mail_user
|
|
# mail_pw:
|
|
# file: ./docker/secrets/mail_pw
|
|
# duckdns_token:
|
|
# file: ./docker/secrets/duckdns_token
|
|
|
|
|