admin/skato-compose
1
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects 2 Releases Wiki Activity

changed some ports to prevent pod port conflicts; added a container for opengist

Browse Source
This commit is contained in:
xenobyte
2026-07-06 12:58:05 -04:00
parent 7e08866339
commit 24f561f030
1 changed files with 47 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
dependent/compose.yml
View File

@@ -23,6 +23,8 @@ secrets:
file: ~/.podsecrets/email.pass
redis.pass:
file: ~/.podsecrets/redis.pass
# opengist.secret:
# file: ~/.podsecrets/opengist.secret
services:
# @NOTE https://oneuptime.com/blog/post/2026-03-18-use-podman-containers-wireguard-vpn/view
@@ -36,6 +38,7 @@ services:
# - NET_RAW
restart: unless-stopped
volumes:
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
- /lib/modules:/lib/modules:ro
- ~/.wg/containerized:/config/wg-confs:Z
@@ -69,6 +72,7 @@ services:
devices:
- /dev/net/tun:/dev/net/tun
volumes:
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
- /lib/modules:/lib/modules:ro
- "tailscale-lib:/var/lib/tailscale"
@@ -104,13 +108,16 @@ services:
- 443
- 443/udp
volumes:
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
- ~/.config/caddy:/etc/caddy:Z
- ~/srv/${SERVER_FQDN}:/srv/${SERVER_FQDN}:z
- ~/srv/acme.${SERVER_FQDN}:/srv/acme.${SERVER_FQDN}:ro,z
- ~/srv/certbot.${SERVER_FQDN}:/srv/certbot.${SERVER_FQDN}:ro,z
- ~/srv/notes.${SERVER_FQDN}:/srv/notes.${SERVER_FQDN}:z
- ~/srv/blog.${SERVER_FQDN}:/srv/blog.${SERVER_FQDN}:z
- ~/srv/${NEXTCLOUD_SUBDOMAIN}.${SERVER_FQDN}:/srv/${NEXTCLOUD_SUBDOMAIN}.${SERVER_FQDN}:ro,z
# - ~/srv/${GITEA_SUBDOMAIN}.${SERVER_FQDN}:/srv/${GITEA_SUBDOMAIN}.${SERVER_FQDN}:ro,z
# - ~/srv/${OG_SUBDOMAIN}.${SERVER_FQDN}:/srv/${OG_SUBDOMAIN}.${SERVER_FQDN}:ro,z
- "caddy-share:/usr/share/caddy"
- "caddy-data:/data:z"
- ~/.caddy:/config:Z
@@ -120,7 +127,6 @@ services:
- wgclient
env_file:
- ~/.all.env
- ~/.nextcloud.env
labels:
glance.name: Caddy
glance.id: caddy
@@ -134,10 +140,11 @@ services:
container_name: sslcerts
restart: on-failure
volumes:
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
- ~/.config/letsencrypt:/etc/letsencrypt:z
- "certbot-lib:/var/lib/letsencrypt"
- ~/srv/acme.${SERVER_FQDN}:/srv/acme.${SERVER_FQDN}:z
- ~/srv/certbot.${SERVER_FQDN}:/srv/certbot.${SERVER_FQDN}:z
networks:
- "container:wgclient"
depends_on:
@@ -162,6 +169,7 @@ services:
expose:
- 6379
volumes:
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
- "redis-data:/data:z"
- ~/.config/redis:/etc/redis:Z
@@ -186,6 +194,7 @@ services:
expose:
- 3306
volumes:
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
# @TODO use Ansible to adjust/edit configuration below
# @NOTE https://dev.mysql.com/doc/refman/8.0/en/using-encrypted-connections.html
@@ -222,6 +231,7 @@ services:
expose:
- 9000
volumes:
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
- ~/srv/${NEXTCLOUD_SUBDOMAIN}.${SERVER_FQDN}:/var/www/html:z
networks:
@@ -283,7 +293,7 @@ services:
- ~/.config/gitea:/data:z
expose:
- 3000
- ${GITEA_SSH_PORT:-2222}
- ${GITEA_SSH_PORT:-2323}
networks:
- "container:wgclient"
depends_on:
@@ -301,7 +311,7 @@ services:
GITEA_server_PROTOCOL: http
GITEA_server_DOMAIN: ${GITEA_SUBDOMAIN}.${SERVER_FQDN}
# @NOTE https://gist.github.com/erik-toth/087262f19941da9bf4c2ce449fe98a47
GITEA_server_SSH_PORT: ${GITEA_SSH_PORT:-2222}
GITEA_server_SSH_PORT: ${GITEA_SSH_PORT:-2323}
GITEA_server_SSH_EXPOSE_ANONYMOUS: "false"
GITEA_server_START_SSH_SERVER: "false"
GITEA_server_LANDING_PAGE: ${GITEA_LANDING:-explore}
@@ -346,6 +356,37 @@ services:
glance.url: "${SERVER_FQDN_SCHEME}://${GITEA_SUBDOMAIN}.${SERVER_FQDN}"
glance.description: Git version control forge server
gist:
image: ghcr.io/thomiceli/opengist:1
container_name: gist
restart: unless-stopped
volumes:
- /etc/localtime:/etc/localtime:ro
- ~/.config/opengist:/opengist:z
expose:
- 6157
- 2222
networks:
- "container:wgclient"
depends_on:
- revproxy0
- wgclient
env_file:
- ~/.all.env
- ~/.mysql.env
environment:
OG_DB_PASSWD_FILE: /run/secrets/user-mysql.pass
OG_DB_URI: ${OG_DB_TYPE}://${MYSQL_DB_USER:-admin}:${OG_DB_PASSWD}@${MYSQL_DB_HOST:?Enter the container name, hostname or public FQDN of your DBMS}:3306/${OG_DB_NAME:-opengist}
secrets:
- "user-mysql.pass"
# - opengist.secret
labels:
glance.name: OpenGist
glance.id: opengist
glance.icon: "si:opengist"
glance.url: "${SERVER_FQDN_SCHEME}://${OG_SUBDOMAIN}.${SERVER_FQDN}"
glance.description: Pastebin server
glance:
image: glanceapp/glance
container_name: glance