This commit is contained in:
msnie
2025-02-02 18:12:46 +01:00
parent 4be63995df
commit 4fd9df6ff2
6 changed files with 902 additions and 959 deletions
+101 -101
View File
@@ -1,106 +1,106 @@
version: '3.7'
services:
db:
restart: always
image: postgres:14-alpine
shm_size: 256mb
networks:
- internal_network
healthcheck:
test: ['CMD', 'pg_isready', '-U', 'postgres']
volumes:
- ./postgres14:/var/lib/postgresql/data
environment:
- 'POSTGRES_HOST_AUTH_METHOD=trust'
# version: '3.7'
# services:
# db:
# restart: always
# image: postgres:14-alpine
# shm_size: 256mb
# networks:
# - internal_network
# healthcheck:
# test: ['CMD', 'pg_isready', '-U', 'postgres']
# volumes:
# - ./postgres14:/var/lib/postgresql/data
# environment:
# - 'POSTGRES_HOST_AUTH_METHOD=trust'
redis:
restart: always
image: redis:7-alpine
networks:
- internal_network
healthcheck:
test: ['CMD', 'redis-cli', 'ping']
volumes:
- ./redis:/data
# redis:
# restart: always
# image: redis:7-alpine
# networks:
# - internal_network
# healthcheck:
# test: ['CMD', 'redis-cli', 'ping']
# volumes:
# - ./redis:/data
web:
image: ghcr.io/glitch-soc/mastodon
restart: always
env_file: .env.production
command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
networks:
- traefik
- internal_network
healthcheck:
# prettier-ignore
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
depends_on:
- db
- redis
# - es
volumes:
- ./public/system:/mastodon/public/system
labels:
- "traefik.enable=true"
# Main Web Router
- "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
- "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
- "traefik.http.routers.mstdn-web-rtr.tls=true"
- "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
# Media Router
- "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
- "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
- "traefik.http.routers.mstdn-media-rtr.tls=true"
- "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
- "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
# CORS Middleware
- "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
- "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
- "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
# Service
- "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3000"
# web:
# image: ghcr.io/glitch-soc/mastodon
# restart: always
# env_file: .env.production
# command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
# networks:
# - traefik
# - internal_network
# healthcheck:
# # prettier-ignore
# test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
# depends_on:
# - db
# - redis
# # - es
# volumes:
# - ./public/system:/mastodon/public/system
# labels:
# - "traefik.enable=true"
# # Main Web Router
# - "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
# - "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
# - "traefik.http.routers.mstdn-web-rtr.tls=true"
# - "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
# # Media Router
# - "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
# - "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
# - "traefik.http.routers.mstdn-media-rtr.tls=true"
# - "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
# - "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
# # CORS Middleware
# - "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
# - "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
# - "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
# # Service
# - "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3000"
streaming:
image: ghcr.io/glitch-soc/mastodon
restart: always
env_file: .env.production
command: node ./streaming
networks:
- traefik
- internal_network
healthcheck:
# prettier-ignore
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
depends_on:
- db
- redis
labels:
- "traefik.enable=true"
- "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
- "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
- "traefik.http.routers.mstdn-streamer-rtr.tls=true"
- "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
- "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"
# streaming:
# image: ghcr.io/glitch-soc/mastodon
# restart: always
# env_file: .env.production
# command: node ./streaming
# networks:
# - traefik
# - internal_network
# healthcheck:
# # prettier-ignore
# test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
# depends_on:
# - db
# - redis
# labels:
# - "traefik.enable=true"
# - "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
# - "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
# - "traefik.http.routers.mstdn-streamer-rtr.tls=true"
# - "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
# - "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"
sidekiq:
image: ghcr.io/glitch-soc/mastodon
restart: always
env_file: .env.production
command: bundle exec sidekiq
depends_on:
- db
- redis
networks:
- traefik
- internal_network
volumes:
- ./public/system:/mastodon/public/system
healthcheck:
test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
# sidekiq:
# image: ghcr.io/glitch-soc/mastodon
# restart: always
# env_file: .env.production
# command: bundle exec sidekiq
# depends_on:
# - db
# - redis
# networks:
# - traefik
# - internal_network
# volumes:
# - ./public/system:/mastodon/public/system
# healthcheck:
# test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
networks:
traefik:
name: traefik
external: true
internal_network:
internal: true
# networks:
# traefik:
# name: traefik
# external: true
# internal_network:
# internal: true