Update stack.staging.yml

This commit is contained in:
colin 2025-02-05 10:20:02 -05:00
parent f49cc9c108
commit 3ff68fd656
1 changed files with 43 additions and 84 deletions

View File

@ -1,87 +1,46 @@
version: '3'
services:
database:
image: git.nixc.us/colin/hedgedoc:staging-database
environment:
- POSTGRES_USER=hedgedoc
- POSTGRES_PASSWORD=password
- POSTGRES_DB=hedgedoc
volumes:
- /mnt/tank/persist/nixc.us/hedgedoc/staging/db:/var/lib/postgresql/data
deploy:
replicas: 1
placement:
constraints:
## - node.labels.role == db
- node.hostname == ingress.nixc.us
# - node.labels.mac-rack == true
labels:
- "us.nixc.autodeploy=true"
- "traefik.enable=false"
networks:
- default
# logging:
# driver: "gelf"
# options:
# gelf-address: "udp://log.nixc.us:15124"
# tag: "hedgedoc_database"
hedgedoc:
# Make sure to use the latest release from https://hedgedoc.org/latest-release
image: git.nixc.us/colin/hedgedoc:staging-hedgedoc
environment:
# CMD_ALLOW_ANONYMOUS: "true"
CMD_ALLOW_ANONYMOUS_EDITS: "true"
CMD_ALLOW_FREEURL: "true"
CMD_DB_URL: "postgres://hedgedoc:password@hedgedoc_database:5432/hedgedoc"
CMD_DOMAIN: "hedgedoc.nixc.us"
# CMD_URL_ADDPORT: "true"
CMD_PROTOCOL_USESSL: "true"
CMD_SESSION_SECRET: "kcxFbvEv4gQeeDuXTJJDQ4Vj878C4p2AQFe9Ur33tLeUdQNzGGiQz6NAmEoxjZXH"
CMD_DB_USERNAME: "hedgedoc"
CMD_DB_PASSWORD: "password"
CMD_DB_HOST: "database"
CMD_DB_PORT: "5432"
# CMD_LDAP_URL: ldap://lldap_lldap:3890
# CMD_LDAP_BINDDN: uid=admin,ou=people,dc=nixc,dc=us
# CMD_LDAP_BINDCREDENTIALS: ehgJHdnbMvz8vEGVSYqRAC2r3WUisLxTRLnuXuXb72DEvhi8Ayzu4CQj9h2sexpX
# CMD_LDAP_SEARCHBASE: ou=people,dc=nixc,dc=us
# CMD_LDAP_SEARCHFILTER: '(&(memberOf=cn=hedgedocUsers,ou=groups,dc=nixc,dc=us)(uid={{username}}))'
# CMD_LDAP_USERIDFIELD: uid
volumes:
- /mnt/tank/persist/nixc.us/hedgedoc/staging/uploads:/hedgedoc/public/uploads
# ports:
# - "3000:3000"
depends_on:
- database
deploy:
replicas: 1
placement:
constraints:
## - node.labels.role == db
- node.hostname == ingress.nixc.us
# - node.labels.mac-rack == true
labels:
- "us.nixc.autodeploy=true"
- "traefik.enable=true"
- "traefik.http.routers.staging_hedgedoc.tls=true"
- "traefik.http.services.staging_hedgedoc.loadbalancer.server.port=3000"
- "traefik.http.routers.staging_hedgedoc.rule=Host(`staging.hedgedoc.nixc.us`)"
- "traefik.http.routers.staging_hedgedoc.entrypoints=websecure"
- "traefik.http.routers.staging_hedgedoc.tls.certresolver=letsencryptresolver"
- "traefik.http.routers.staging_hedgedoc.service=staging_hedgedoc"
- "traefik.docker.network=traefik"
# - 'traefik.http.routers.staging_hedgedoc.middlewares=authelia@docker'
networks:
- default
- traefik
# logging:
# driver: "gelf"
# options:
# gelf-address: "udp://log.nixc.us:15124"
# tag: "hedgedoc_app"
networks: networks:
traefik: traefik:
external: true external: true
default:
external: false services:
firefox:
image: lscr.io/linuxserver/firefox:latest
# image: jlesage/firefox
environment:
# DISPLAY_WIDTH: '1280'
# DISPLAY_HEIGHT: '720'
# KEEP_APP_RUNNING: '1'
# KASM_PORT: 80
PUID: 1000
GUID: 1000
tmpfs:
- /tmp:size=2G
volumes:
# - '/mnt/tank/persist/nixc.us/marketing-browser/production/config:/config:rw'
- '/etc/localtime:/etc/localtime:ro'
# - "istock:/config/Downloads"
- type: tmpfs
target: /dev/shm
deploy:
# placement:
# constraints:
# - node.hostname == macmini1
replicas: 1
labels:
- "traefik.enable=true"
- "traefik.http.routers.istock_firefox.tls=true"
- "traefik.http.services.istock_firefox.loadbalancer.server.port=3000"
- "traefik.http.routers.istock_firefox.rule=Host(`marketing-browser.staging.nixc.us`)"
- "traefik.http.routers.istock_firefox.entrypoints=websecure"
- "traefik.http.routers.istock_firefox.tls.certresolver=letsencryptresolver"
- "traefik.http.routers.istock_firefox.service=istock_firefox"
- "traefik.docker.network=traefik"
- 'traefik.http.routers.istock_firefox.middlewares=authelia_authelia@docker'
networks:
- traefik
dns:
- 1.1.1.1
- 8.8.8.8
# volumes:
# istock:
# external: true