null4bl3/home_server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

mastodon

Browse Source
This commit is contained in:
msnie
2025-02-02 18:12:46 +01:00
parent 4be63995df
commit 4fd9df6ff2
6 changed files with 902 additions and 959 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mastodon/docker-compose copy.yml
+101 -101
View File
@@ -1,106 +1,106 @@
version: '3.7' # version: '3.7'
services: # services:
db: # db:
restart: always # restart: always
image: postgres:14-alpine # image: postgres:14-alpine
shm_size: 256mb # shm_size: 256mb
networks: # networks:
- internal_network # - internal_network
healthcheck: # healthcheck:
test: ['CMD', 'pg_isready', '-U', 'postgres'] # test: ['CMD', 'pg_isready', '-U', 'postgres']
volumes: # volumes:
- ./postgres14:/var/lib/postgresql/data # - ./postgres14:/var/lib/postgresql/data
environment: # environment:
- 'POSTGRES_HOST_AUTH_METHOD=trust' # - 'POSTGRES_HOST_AUTH_METHOD=trust'
redis: # redis:
restart: always # restart: always
image: redis:7-alpine # image: redis:7-alpine
networks: # networks:
- internal_network # - internal_network
healthcheck: # healthcheck:
test: ['CMD', 'redis-cli', 'ping'] # test: ['CMD', 'redis-cli', 'ping']
volumes: # volumes:
- ./redis:/data # - ./redis:/data
web: # web:
image: ghcr.io/glitch-soc/mastodon # image: ghcr.io/glitch-soc/mastodon
restart: always # restart: always
env_file: .env.production # env_file: .env.production
command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000" # command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
networks: # networks:
- traefik # - traefik
- internal_network # - internal_network
healthcheck: # healthcheck:
# prettier-ignore # # prettier-ignore
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1'] # test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
depends_on: # depends_on:
- db # - db
- redis # - redis
# - es # # - es
volumes: # volumes:
- ./public/system:/mastodon/public/system # - ./public/system:/mastodon/public/system
labels: # labels:
- "traefik.enable=true" # - "traefik.enable=true"
# Main Web Router # # Main Web Router
- "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure" # - "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
- "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)" # - "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
- "traefik.http.routers.mstdn-web-rtr.tls=true" # - "traefik.http.routers.mstdn-web-rtr.tls=true"
- "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr" # - "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
# Media Router # # Media Router
- "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure" # - "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
- "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))" # - "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
- "traefik.http.routers.mstdn-media-rtr.tls=true" # - "traefik.http.routers.mstdn-media-rtr.tls=true"
- "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr" # - "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
- "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media" # - "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
# CORS Middleware # # CORS Middleware
- "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;" # - "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
- "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*" # - "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
- "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*" # - "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
# Service # # Service
- "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3000" # - "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3000"
streaming: # streaming:
image: ghcr.io/glitch-soc/mastodon # image: ghcr.io/glitch-soc/mastodon
restart: always # restart: always
env_file: .env.production # env_file: .env.production
command: node ./streaming # command: node ./streaming
networks: # networks:
- traefik # - traefik
- internal_network # - internal_network
healthcheck: # healthcheck:
# prettier-ignore # # prettier-ignore
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1'] # test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
depends_on: # depends_on:
- db # - db
- redis # - redis
labels: # labels:
- "traefik.enable=true" # - "traefik.enable=true"
- "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure" # - "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
- "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))" # - "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
- "traefik.http.routers.mstdn-streamer-rtr.tls=true" # - "traefik.http.routers.mstdn-streamer-rtr.tls=true"
- "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr" # - "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
- "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000" # - "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"
sidekiq: # sidekiq:
image: ghcr.io/glitch-soc/mastodon # image: ghcr.io/glitch-soc/mastodon
restart: always # restart: always
env_file: .env.production # env_file: .env.production
command: bundle exec sidekiq # command: bundle exec sidekiq
depends_on: # depends_on:
- db # - db
- redis # - redis
networks: # networks:
- traefik # - traefik
- internal_network # - internal_network
volumes: # volumes:
- ./public/system:/mastodon/public/system # - ./public/system:/mastodon/public/system
healthcheck: # healthcheck:
test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"] # test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
networks: # networks:
traefik: # traefik:
name: traefik # name: traefik
external: true # external: true
internal_network: # internal_network:
internal: true # internal: true
mastodon/docker-compose.ae3.yml
+86 -86
View File
@@ -1,91 +1,91 @@
version: '3' # version: '3'
services: # services:
db: # db:
restart: unless-stopped # restart: unless-stopped
image: postgres:14-alpine # image: postgres:14-alpine
shm_size: 256mb # shm_size: 256mb
networks: # networks:
- default # - default
healthcheck: # healthcheck:
test: ['CMD', 'pg_isready', '-U', 'postgres'] # test: ['CMD', 'pg_isready', '-U', 'postgres']
volumes: # volumes:
- /srv/mastodon/postgres14:/var/lib/postgresql/data # - /srv/mastodon/postgres14:/var/lib/postgresql/data
environment: # environment:
- 'POSTGRES_HOST_AUTH_METHOD=trust' # - 'POSTGRES_HOST_AUTH_METHOD=trust'
redis: # redis:
restart: unless-stopped # restart: unless-stopped
image: redis:7-alpine # image: redis:7-alpine
networks: # networks:
- default # - default
healthcheck: # healthcheck:
test: ['CMD', 'redis-cli', 'ping'] # test: ['CMD', 'redis-cli', 'ping']
volumes: # volumes:
- /srv/mastodon/redis:/data # - /srv/mastodon/redis:/data
web: # web:
image: tootsuite/mastodon # image: tootsuite/mastodon
restart: unless-stopped # restart: unless-stopped
env_file: .env.production # env_file: .env.production
command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000" # command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
networks: # networks:
- traefik # - traefik
- default # - default
healthcheck: # healthcheck:
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1'] # test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
depends_on: # depends_on:
- db # - db
- redis # - redis
volumes: # volumes:
- /srv/mastodon/public/system:/mastodon/public/system # - /srv/mastodon/public/system:/mastodon/public/system
labels: # labels:
- "traefik.enable=true" # - "traefik.enable=true"
- "traefik.http.routers.mastodon.entrypoints=https" # - "traefik.http.routers.mastodon.entrypoints=https"
- "traefik.http.routers.mastodon.rule=(Host(`kvist.knast.cc`))" # - "traefik.http.routers.mastodon.rule=(Host(`kvist.knast.cc`))"
- "traefik.http.routers.mastodon.tls=true" # - "traefik.http.routers.mastodon.tls=true"
- "traefik.http.routers.mastodon.tls.certresolver=http" # - "traefik.http.routers.mastodon.tls.certresolver=http"
- "traefik.http.routers.mastodon.service=mastodon" # - "traefik.http.routers.mastodon.service=mastodon"
- "traefik.http.services.mastodon.loadbalancer.server.port=3000" # - "traefik.http.services.mastodon.loadbalancer.server.port=3000"
- "traefik.docker.network=traefik" # - "traefik.docker.network=traefik"
streaming: # streaming:
image: tootsuite/mastodon # image: tootsuite/mastodon
restart: unless-stopped # restart: unless-stopped
env_file: .env.production # env_file: .env.production
command: node ./streaming/index.js # command: node ./streaming/index.js
networks: # networks:
- default # - default
- traefik # - traefik
healthcheck: # healthcheck:
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1'] # test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
depends_on: # depends_on:
- db # - db
- redis # - redis
labels: # labels:
- "traefik.enable=true" # - "traefik.enable=true"
- "traefik.http.routers.mastodon-api.entrypoints=https" # - "traefik.http.routers.mastodon-api.entrypoints=https"
- "traefik.http.routers.mastodon-api.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))" # - "traefik.http.routers.mastodon-api.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
- "traefik.http.routers.mastodon-api.tls=true" # - "traefik.http.routers.mastodon-api.tls=true"
- "traefik.http.routers.mastodon-api.tls.certresolver=http" # - "traefik.http.routers.mastodon-api.tls.certresolver=http"
- "traefik.http.routers.mastodon-api.service=mastodon-api" # - "traefik.http.routers.mastodon-api.service=mastodon-api"
- "traefik.http.services.mastodon-api.loadbalancer.server.port=4000" # - "traefik.http.services.mastodon-api.loadbalancer.server.port=4000"
- "traefik.docker.network=traefik" # - "traefik.docker.network=traefik"
sidekiq: # sidekiq:
image: tootsuite/mastodon # image: tootsuite/mastodon
restart: unless-stopped # restart: unless-stopped
env_file: .env.production # env_file: .env.production
command: bundle exec sidekiq # command: bundle exec sidekiq
depends_on: # depends_on:
- db # - db
- redis # - redis
networks: # networks:
- default # - default
volumes: # volumes:
- /srv/mastodon/public/system:/mastodon/public/system # - /srv/mastodon/public/system:/mastodon/public/system
healthcheck: # healthcheck:
test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"] # test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
networks: # networks:
traefik: # traefik:
external: true # external: true
mastodon/docker-compose.latest.yml
+4 -61
View File
@@ -1,5 +1,7 @@
# This file is designed for production server deployment, not local development work #
# For a containerized local dev environment, see: https://github.com/mastodon/mastodon/blob/main/docs/DEVELOPMENT.md#docker # THIS IS THE FILE THAT WORKS
#
services: services:
db: db:
@@ -11,7 +13,6 @@ services:
healthcheck: healthcheck:
test: ['CMD', 'pg_isready', '-U', 'postgres'] test: ['CMD', 'pg_isready', '-U', 'postgres']
volumes: volumes:
# - ./postgres14:/var/lib/postgresql/data
- /srv/mastodon/postgres14:/var/lib/postgresql/data - /srv/mastodon/postgres14:/var/lib/postgresql/data
environment: environment:
- 'POSTGRES_HOST_AUTH_METHOD=trust' - 'POSTGRES_HOST_AUTH_METHOD=trust'
@@ -24,43 +25,10 @@ services:
healthcheck: healthcheck:
test: ['CMD', 'redis-cli', 'ping'] test: ['CMD', 'redis-cli', 'ping']
volumes: volumes:
# - ./redis:/data
- /srv/mastodon/redis:/data - /srv/mastodon/redis:/data
# es:
# restart: always
# image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4
# environment:
# - "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true"
# - "xpack.license.self_generated.type=basic"
# - "xpack.security.enabled=false"
# - "xpack.watcher.enabled=false"
# - "xpack.graph.enabled=false"
# - "xpack.ml.enabled=false"
# - "bootstrap.memory_lock=true"
# - "cluster.name=es-mastodon"
# - "discovery.type=single-node"
# - "thread_pool.write.queue_size=1000"
# networks:
# - traefik
# - internal_network
# healthcheck:
# test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
# volumes:
# - ./elasticsearch:/usr/share/elasticsearch/data
# ulimits:
# memlock:
# soft: -1
# hard: -1
# nofile:
# soft: 65536
# hard: 65536
# ports:
# - '127.0.0.1:9200:9200'
web: web:
# You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# build: .
image: ghcr.io/mastodon/mastodon:v4.3.3 image: ghcr.io/mastodon/mastodon:v4.3.3
restart: always restart: always
env_file: .env.production env_file: .env.production
@@ -78,8 +46,6 @@ services:
- redis - redis
# - es # - es
volumes: volumes:
# - ./public/system:/mastodon/public/system
# /mastodon/public/system
- /srv/mastodon/web:/mastodon/public/system - /srv/mastodon/web:/mastodon/public/system
labels: labels:
- traefik.enable=true - traefik.enable=true
@@ -89,10 +55,6 @@ services:
- traefik.http.services.mastodonweb.loadbalancer.server.port=3000 - traefik.http.services.mastodonweb.loadbalancer.server.port=3000
streaming: streaming:
# You can uncomment the following lines if you want to not use the prebuilt image, for example if you have local code changes
# build:
# dockerfile: ./streaming/Dockerfile
# context: .
image: ghcr.io/mastodon/mastodon-streaming:v4.3.3 image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
restart: always restart: always
env_file: .env.production env_file: .env.production
@@ -116,8 +78,6 @@ services:
- traefik.http.services.mastodonstreaming.loadbalancer.server.port=4000 - traefik.http.services.mastodonstreaming.loadbalancer.server.port=4000
sidekiq: sidekiq:
# You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# build: .
image: ghcr.io/mastodon/mastodon:v4.3.3 image: ghcr.io/mastodon/mastodon:v4.3.3
restart: always restart: always
env_file: .env.production env_file: .env.production
@@ -134,23 +94,6 @@ services:
healthcheck: healthcheck:
test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"] test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
## Uncomment to enable federation with tor instances along with adding the following ENV variables
## http_hidden_proxy=http://privoxy:8118
## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
# tor:
# image: sirboops/tor
# networks:
# - traefik
# - internal_network
#
# privoxy:
# image: sirboops/privoxy
# volumes:
# - ./priv-config:/opt/config
# networks:
# - traefik
# - internal_network
networks: networks:
traefik: traefik:
external: true external: true
mastodon/docker-compose.linuxserver.yml
+352 -352
View File
@@ -1,383 +1,383 @@
version: '3.7' # version: '3.7'
services:
mastodon:
image: lscr.io/linuxserver/mastodon:latest
container_name: mastodon
networks:
- traefik
environment:
- PUID=1000
- PGID=1000
- TZ=Etc/UTC
- LOCAL_DOMAIN=knast.cc
- WEB_DOMAIN=kvist.knast.cc
#
# - REDIS_HOST=redis
- REDIS_URL=redis://redis:6379
- REDIS_PORT=6379
#
- DB_HOST=db
- DB_USER=mastodon
- DB_NAME=mastodon
- DB_PASS=mastodon
- DB_PORT=5432
- ES_ENABLED=false
#
- SECRET_KEY_BASE=e0363e8219496e6c2ddf36b9305e48bc622873b8b97cff9af48c3be3134a479ef635647a86b0a550887b5fe06008081b7d491f6c0a447d3aeb297f513b6cb751
- OTP_SECRET=029b6d01d97c2bc4209d5cdc8b3aa59a47f298e8beaeca94b4e0feedf586deb55621ed055aa5e0a6186a7e3d2ad2655203b87281bd9543290f1c1385e2a4b4c7
#
- ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=48cb26b4254c56457e9279b877a11d9e43f9e8e4b63875f80390bfe132597bb61ea405c040a4ff1b16736290c40a9efc166986eb2502c00f77527c6ff22f5b9f
- ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=4da48ca5d54eb6222db3971d446dc9ad5d372ae6555c85b5221ceb56a88248f10977a1c00809a101d1bfcd6cb34aedaeee6fb471deb78912327c143f108f38d2
- ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=24923f2e2296745137e79deb1bdaecf221406278ae7ebebd1c5d583cacb2455a5713c726dbdd107ef4b4c0ab52040b0d9c08af69cc5f75391b0cac49ea313b40
#
- VAPID_PRIVATE_KEY=4da48ca5d54eb6222db3971d446dc9ad5d372ae6555c85b5221ceb56a88248f10977a1c00809a101d1bfcd6cb34aedaeee6fb471deb78912327c143f108f38d2
- VAPID_PUBLIC_KEY=24923f2e2296745137e79deb1bdaecf221406278ae7ebebd1c5d583cacb2455a5713c726dbdd107ef4b4c0ab52040b0d9c08af69cc5f75391b0cac49ea313b40
#
- SMTP_SERVER=mail.example.com
- SMTP_PORT=25
- SMTP_LOGIN=
- SMTP_PASSWORD=
- SMTP_FROM_ADDRESS=mastodon@kvist.knast.cc
#
- S3_ENABLED=false
# - ES_HOST=es #optional
# - ES_PORT=9200 #optional
# - ES_USER=elastic #optional
# - ES_PASS=elastic #optional
# - S3_BUCKET= #optional
# - AWS_ACCESS_KEY_ID= #optional
# - AWS_SECRET_ACCESS_KEY= #optional
# - S3_ALIAS_HOST= #optional
# - SIDEKIQ_ONLY=false #optional
# - SIDEKIQ_QUEUE= #optional
# - SIDEKIQ_DEFAULT=false #optional
# - SIDEKIQ_THREADS=5 #optional
# - DB_POOL=5 #optional
- NO_CHOWN=false
volumes:
- /srv/mastodon:/config
# ports:
# - 8008:80
# - 4433:443
restart: unless-stopped
labels:
- traefik.enable=true
- traefik.http.routers.mastodon.rule=Host(`kvist.knast.cc`)
- traefik.http.routers.mastodon.entrypoints=websecure
- traefik.http.routers.mastodon.tls.certresolver=letsencr
- traefik.http.services.mastodon.loadbalancer.server.port=80
- traefik.http.services.mastodon.loadbalancer.server.port=443
# services: # services:
# db: # mastodon:
# restart: always # image: lscr.io/linuxserver/mastodon:latest
# image: postgres:14-alpine # container_name: mastodon
# shm_size: 256mb
# networks:
# - internal_network
# volumes:
# - /srv/mastodon/postgres14:/var/lib/postgresql/data
# # added from the default, otherwise you'll need to manually create a `mastodon` db and user/role
# # env_file: db.env
# env_file:
# # - .env
# # - db.env
# - .env.production
# environment:
# - 'POSTGRES_HOST_AUTH_METHOD=trust'
# - 'POSTGRES_USER=postgres'
# redis:
# restart: always
# image: redis:7-alpine
# networks:
# - internal_network
# env_file:
# - .env.production
# healthcheck:
# test: ['CMD', 'redis-cli', 'ping']
# # environment:
# # - 'REDIS_URL=redis://redis:6379'
# volumes:
# - /srv/mastodon/redis:/data
# web:
# image: ghcr.io/mastodon/mastodon:v4.3.3
# restart: always
# # env_file:
# # - .env
# # - db.env
# env_file:
# # - .env
# - .env.production
# # - db.env
# # ports:
# # - 3000:3000
# # environment:
# # - PUID=1000
# # - PGID=1000
# command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
# networks: # networks:
# - traefik # - traefik
# - internal_network
# healthcheck: # environment:
# # prettier-ignore # - PUID=1000
# test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1'] # - PGID=1000
# depends_on: # - TZ=Etc/UTC
# - db # - LOCAL_DOMAIN=knast.cc
# - redis # - WEB_DOMAIN=kvist.knast.cc
# #
# # - REDIS_HOST=redis
# - REDIS_URL=redis://redis:6379
# - REDIS_PORT=6379
# #
# - DB_HOST=db
# - DB_USER=mastodon
# - DB_NAME=mastodon
# - DB_PASS=mastodon
# - DB_PORT=5432
# - ES_ENABLED=false
# #
# - SECRET_KEY_BASE=e0363e8219496e6c2ddf36b9305e48bc622873b8b97cff9af48c3be3134a479ef635647a86b0a550887b5fe06008081b7d491f6c0a447d3aeb297f513b6cb751
# - OTP_SECRET=029b6d01d97c2bc4209d5cdc8b3aa59a47f298e8beaeca94b4e0feedf586deb55621ed055aa5e0a6186a7e3d2ad2655203b87281bd9543290f1c1385e2a4b4c7
# #
# - ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=48cb26b4254c56457e9279b877a11d9e43f9e8e4b63875f80390bfe132597bb61ea405c040a4ff1b16736290c40a9efc166986eb2502c00f77527c6ff22f5b9f
# - ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=4da48ca5d54eb6222db3971d446dc9ad5d372ae6555c85b5221ceb56a88248f10977a1c00809a101d1bfcd6cb34aedaeee6fb471deb78912327c143f108f38d2
# - ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=24923f2e2296745137e79deb1bdaecf221406278ae7ebebd1c5d583cacb2455a5713c726dbdd107ef4b4c0ab52040b0d9c08af69cc5f75391b0cac49ea313b40
# #
# - VAPID_PRIVATE_KEY=4da48ca5d54eb6222db3971d446dc9ad5d372ae6555c85b5221ceb56a88248f10977a1c00809a101d1bfcd6cb34aedaeee6fb471deb78912327c143f108f38d2
# - VAPID_PUBLIC_KEY=24923f2e2296745137e79deb1bdaecf221406278ae7ebebd1c5d583cacb2455a5713c726dbdd107ef4b4c0ab52040b0d9c08af69cc5f75391b0cac49ea313b40
# #
# - SMTP_SERVER=mail.example.com
# - SMTP_PORT=25
# - SMTP_LOGIN=
# - SMTP_PASSWORD=
# - SMTP_FROM_ADDRESS=mastodon@kvist.knast.cc
# #
# - S3_ENABLED=false
# # - ES_HOST=es #optional
# # - ES_PORT=9200 #optional
# # - ES_USER=elastic #optional
# # - ES_PASS=elastic #optional
# # - S3_BUCKET= #optional
# # - AWS_ACCESS_KEY_ID= #optional
# # - AWS_SECRET_ACCESS_KEY= #optional
# # - S3_ALIAS_HOST= #optional
# # - SIDEKIQ_ONLY=false #optional
# # - SIDEKIQ_QUEUE= #optional
# # - SIDEKIQ_DEFAULT=false #optional
# # - SIDEKIQ_THREADS=5 #optional
# # - DB_POOL=5 #optional
# - NO_CHOWN=false
# volumes: # volumes:
# - /srv/mastodon/web:/mastodon/public/system # - /srv/mastodon:/config
# # ports:
# # - 8008:80
# # - 4433:443
# restart: unless-stopped
# labels: # labels:
# - traefik.enable=true # - traefik.enable=true
# - traefik.http.routers.mastodonweb.rule=Host(`kvist.knast.cc`) # - traefik.http.routers.mastodon.rule=Host(`kvist.knast.cc`)
# - traefik.http.routers.mastodonweb.entrypoints=websecure # - traefik.http.routers.mastodon.entrypoints=websecure
# - traefik.http.routers.mastodonweb.tls.certresolver=letsencr # - traefik.http.routers.mastodon.tls.certresolver=letsencr
# - traefik.http.services.mastodonweb.loadbalancer.server.port=3000 # - traefik.http.services.mastodon.loadbalancer.server.port=80
# # labels: # - traefik.http.services.mastodon.loadbalancer.server.port=443
# # - "traefik.enable=true"
# # # Main Web Router
# # - "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
# # - "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
# # - "traefik.http.routers.mstdn-web-rtr.tls=true"
# # - "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
# # # Media Router
# # - "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
# # - "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
# # - "traefik.http.routers.mstdn-media-rtr.tls=true"
# # - "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
# # - "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
# # # CORS Middleware
# # - "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
# # - "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
# # - "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
# # # Service
# # - "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3344"
# streaming:
# image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
# restart: always
# # env_file:
# # - .env
# # - db.env
# env_file:
# # - .env
# - .env.production
# # - db.env
# command: node ./streaming
# environment:
# - 'REDIS_URL=redis://redis:6379'
# # ports:
# # - 4000:4000
# networks:
# - traefik
# - internal_network
# healthcheck:
# # prettier-ignore
# test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
# depends_on:
# - db
# - redis
# labels:
# - traefik.enable=true
# - traefik.http.routers.mastodonstreaming.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))
# - traefik.http.routers.mastodonstreaming.entrypoints=websecure
# - traefik.http.routers.mastodonstreaming.tls.certresolver=letsencr
# - traefik.http.services.mastodonstreaming.loadbalancer.server.port=4433
# # labels:
# # - "traefik.enable=true"
# # - "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
# # - "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
# # - "traefik.http.routers.mstdn-streamer-rtr.tls=true"
# # - "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
# # - "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"
# sidekiq: # # services:
# image: ghcr.io/mastodon/mastodon:v4.3.3 # # db:
# restart: always
# env_file:
# # - .env
# - .env.production
# # - db.env
# command: bundle exec sidekiq
# depends_on:
# - db
# - redis
# networks:
# - traefik
# - internal_network
# volumes:
# - /srv/mastodon/sidekiq:/mastodon/public/system
# healthcheck:
# test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
networks:
traefik:
external: true
# internal_network:
# internal: true
# This file is designed for production server deployment, not local development work
# For a containerized local dev environment, see: https://github.com/mastodon/mastodon/blob/main/docs/DEVELOPMENT.md#docker
# services:
# db:
# restart: always
# image: postgres:14-alpine
# shm_size: 256mb
# networks:
# - internal_network
# healthcheck:
# test: ['CMD', 'pg_isready', '-U', 'postgres']
# volumes:
# - ./postgres14:/var/lib/postgresql/data
# environment:
# - 'POSTGRES_HOST_AUTH_METHOD=trust'
# redis:
# restart: always
# image: redis:7-alpine
# networks:
# - internal_network
# healthcheck:
# test: ['CMD', 'redis-cli', 'ping']
# volumes:
# - ./redis:/data
# # es:
# # restart: always # # restart: always
# # image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4 # # image: postgres:14-alpine
# # shm_size: 256mb
# # networks:
# # - internal_network
# # volumes:
# # - /srv/mastodon/postgres14:/var/lib/postgresql/data
# # # added from the default, otherwise you'll need to manually create a `mastodon` db and user/role
# # # env_file: db.env
# # env_file:
# # # - .env
# # # - db.env
# # - .env.production
# # environment: # # environment:
# # - "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true" # # - 'POSTGRES_HOST_AUTH_METHOD=trust'
# # - "xpack.license.self_generated.type=basic" # # - 'POSTGRES_USER=postgres'
# # - "xpack.security.enabled=false"
# # - "xpack.watcher.enabled=false" # # redis:
# # - "xpack.graph.enabled=false" # # restart: always
# # - "xpack.ml.enabled=false" # # image: redis:7-alpine
# # - "bootstrap.memory_lock=true" # # networks:
# # - "cluster.name=es-mastodon" # # - internal_network
# # - "discovery.type=single-node" # # env_file:
# # - "thread_pool.write.queue_size=1000" # # - .env.production
# # healthcheck:
# # test: ['CMD', 'redis-cli', 'ping']
# # # environment:
# # # - 'REDIS_URL=redis://redis:6379'
# # volumes:
# # - /srv/mastodon/redis:/data
# # web:
# # image: ghcr.io/mastodon/mastodon:v4.3.3
# # restart: always
# # # env_file:
# # # - .env
# # # - db.env
# # env_file:
# # # - .env
# # - .env.production
# # # - db.env
# # # ports:
# # # - 3000:3000
# # # environment:
# # # - PUID=1000
# # # - PGID=1000
# # command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
# # networks: # # networks:
# # - traefik # # - traefik
# # - internal_network # # - internal_network
# # healthcheck: # # healthcheck:
# # test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"] # # # prettier-ignore
# # test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
# # depends_on:
# # - db
# # - redis
# # volumes: # # volumes:
# # - ./elasticsearch:/usr/share/elasticsearch/data # # - /srv/mastodon/web:/mastodon/public/system
# # ulimits: # # labels:
# # memlock: # # - traefik.enable=true
# # soft: -1 # # - traefik.http.routers.mastodonweb.rule=Host(`kvist.knast.cc`)
# # hard: -1 # # - traefik.http.routers.mastodonweb.entrypoints=websecure
# # nofile: # # - traefik.http.routers.mastodonweb.tls.certresolver=letsencr
# # soft: 65536 # # - traefik.http.services.mastodonweb.loadbalancer.server.port=3000
# # hard: 65536 # # # labels:
# # ports: # # # - "traefik.enable=true"
# # - '127.0.0.1:9200:9200' # # # # Main Web Router
# # # - "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
# # # - "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
# # # - "traefik.http.routers.mstdn-web-rtr.tls=true"
# # # - "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
# # # # Media Router
# # # - "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
# # # - "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
# # # - "traefik.http.routers.mstdn-media-rtr.tls=true"
# # # - "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
# # # - "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
# # # # CORS Middleware
# # # - "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
# # # - "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
# # # - "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
# # # # Service
# # # - "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3344"
# web: # # streaming:
# # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes # # image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
# # build: . # # restart: always
# image: ghcr.io/mastodon/mastodon:v4.3.3 # # # env_file:
# restart: always # # # - .env
# env_file: # # # - db.env
# - .env
# - .env.production
# - db.env
# command: bundle exec puma -C config/puma.rb
# networks:
# - traefik
# - internal_network
# healthcheck:
# # prettier-ignore
# test: ['CMD-SHELL',"curl -s --noproxy localhost localhost:3000/health | grep -q 'OK' || exit 1"]
# ports:
# - '127.0.0.1:3000:3000'
# depends_on:
# - db
# - redis
# # - es
# volumes:
# - ./public/system:/mastodon/public/system
# streaming:
# # You can uncomment the following lines if you want to not use the prebuilt image, for example if you have local code changes
# # build:
# # dockerfile: ./streaming/Dockerfile
# # context: .
# image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
# restart: always
# # env_file: # # env_file:
# - .env # # # - .env
# - .env.production # # - .env.production
# - db.env # # # - db.env
# command: node ./streaming/index.js # # command: node ./streaming
# networks: # # environment:
# - traefik # # - 'REDIS_URL=redis://redis:6379'
# - internal_network # # # ports:
# healthcheck: # # # - 4000:4000
# # prettier-ignore
# test: ['CMD-SHELL', "curl -s --noproxy localhost localhost:4000/api/v1/streaming/health | grep -q 'OK' || exit 1"]
# ports:
# - '127.0.0.1:4000:4000'
# depends_on:
# - db
# - redis
# sidekiq:
# # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# # build: .
# image: ghcr.io/mastodon/mastodon:v4.3.3
# restart: always
# # env_file:
# - .env
# - .env.production
# - db.env
# command: bundle exec sidekiq
# depends_on:
# - db
# - redis
# networks:
# - traefik
# - internal_network
# volumes:
# - ./public/system:/mastodon/public/system
# healthcheck:
# test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
# ## Uncomment to enable federation with tor instances along with adding the following ENV variables
# ## http_hidden_proxy=http://privoxy:8118
# ## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
# # tor:
# # image: sirboops/tor
# # networks: # # networks:
# # - traefik # # - traefik
# # - internal_network # # - internal_network
# # # # healthcheck:
# # privoxy: # # # prettier-ignore
# # image: sirboops/privoxy # # test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
# # volumes: # # depends_on:
# # - ./priv-config:/opt/config # # - db
# # - redis
# # labels:
# # - traefik.enable=true
# # - traefik.http.routers.mastodonstreaming.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))
# # - traefik.http.routers.mastodonstreaming.entrypoints=websecure
# # - traefik.http.routers.mastodonstreaming.tls.certresolver=letsencr
# # - traefik.http.services.mastodonstreaming.loadbalancer.server.port=4433
# # # labels:
# # # - "traefik.enable=true"
# # # - "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
# # # - "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
# # # - "traefik.http.routers.mstdn-streamer-rtr.tls=true"
# # # - "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
# # # - "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"
# # sidekiq:
# # image: ghcr.io/mastodon/mastodon:v4.3.3
# # restart: always
# # env_file:
# # # - .env
# # - .env.production
# # # - db.env
# # command: bundle exec sidekiq
# # depends_on:
# # - db
# # - redis
# # networks: # # networks:
# # - traefik # # - traefik
# # - internal_network # # - internal_network
# # volumes:
# # - /srv/mastodon/sidekiq:/mastodon/public/system
# # healthcheck:
# # test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
# networks: # networks:
# # traefik:
# traefik: # traefik:
# external: true # external: true
# internal_network: # # internal_network:
# internal: true # # internal: true
# # This file is designed for production server deployment, not local development work
# # For a containerized local dev environment, see: https://github.com/mastodon/mastodon/blob/main/docs/DEVELOPMENT.md#docker
# # services:
# # db:
# # restart: always
# # image: postgres:14-alpine
# # shm_size: 256mb
# # networks:
# # - internal_network
# # healthcheck:
# # test: ['CMD', 'pg_isready', '-U', 'postgres']
# # volumes:
# # - ./postgres14:/var/lib/postgresql/data
# # environment:
# # - 'POSTGRES_HOST_AUTH_METHOD=trust'
# # redis:
# # restart: always
# # image: redis:7-alpine
# # networks:
# # - internal_network
# # healthcheck:
# # test: ['CMD', 'redis-cli', 'ping']
# # volumes:
# # - ./redis:/data
# # # es:
# # # restart: always
# # # image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4
# # # environment:
# # # - "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true"
# # # - "xpack.license.self_generated.type=basic"
# # # - "xpack.security.enabled=false"
# # # - "xpack.watcher.enabled=false"
# # # - "xpack.graph.enabled=false"
# # # - "xpack.ml.enabled=false"
# # # - "bootstrap.memory_lock=true"
# # # - "cluster.name=es-mastodon"
# # # - "discovery.type=single-node"
# # # - "thread_pool.write.queue_size=1000"
# # # networks:
# # # - traefik
# # # - internal_network
# # # healthcheck:
# # # test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
# # # volumes:
# # # - ./elasticsearch:/usr/share/elasticsearch/data
# # # ulimits:
# # # memlock:
# # # soft: -1
# # # hard: -1
# # # nofile:
# # # soft: 65536
# # # hard: 65536
# # # ports:
# # # - '127.0.0.1:9200:9200'
# # web:
# # # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# # # build: .
# # image: ghcr.io/mastodon/mastodon:v4.3.3
# # restart: always
# # env_file:
# # - .env
# # - .env.production
# # - db.env
# # command: bundle exec puma -C config/puma.rb
# # networks:
# # - traefik
# # - internal_network
# # healthcheck:
# # # prettier-ignore
# # test: ['CMD-SHELL',"curl -s --noproxy localhost localhost:3000/health | grep -q 'OK' || exit 1"]
# # ports:
# # - '127.0.0.1:3000:3000'
# # depends_on:
# # - db
# # - redis
# # # - es
# # volumes:
# # - ./public/system:/mastodon/public/system
# # streaming:
# # # You can uncomment the following lines if you want to not use the prebuilt image, for example if you have local code changes
# # # build:
# # # dockerfile: ./streaming/Dockerfile
# # # context: .
# # image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
# # restart: always
# # # env_file:
# # - .env
# # - .env.production
# # - db.env
# # command: node ./streaming/index.js
# # networks:
# # - traefik
# # - internal_network
# # healthcheck:
# # # prettier-ignore
# # test: ['CMD-SHELL', "curl -s --noproxy localhost localhost:4000/api/v1/streaming/health | grep -q 'OK' || exit 1"]
# # ports:
# # - '127.0.0.1:4000:4000'
# # depends_on:
# # - db
# # - redis
# # sidekiq:
# # # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# # # build: .
# # image: ghcr.io/mastodon/mastodon:v4.3.3
# # restart: always
# # # env_file:
# # - .env
# # - .env.production
# # - db.env
# # command: bundle exec sidekiq
# # depends_on:
# # - db
# # - redis
# # networks:
# # - traefik
# # - internal_network
# # volumes:
# # - ./public/system:/mastodon/public/system
# # healthcheck:
# # test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
# # ## Uncomment to enable federation with tor instances along with adding the following ENV variables
# # ## http_hidden_proxy=http://privoxy:8118
# # ## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
# # # tor:
# # # image: sirboops/tor
# # # networks:
# # # - traefik
# # # - internal_network
# # #
# # # privoxy:
# # # image: sirboops/privoxy
# # # volumes:
# # # - ./priv-config:/opt/config
# # # networks:
# # # - traefik
# # # - internal_network
# # networks: # # networks:
# # # traefik:
# # traefik: # # traefik:
# # external: true # # external: true
# # internal_network:
# # internal: true
# # # networks:
# # # traefik:
# # # external: true
mastodon/docker-compose.traefik.yml
+94 -94
View File
@@ -1,99 +1,99 @@
version: "3" # version: "3"
services: # services:
db: # db:
restart: unless-stopped # restart: unless-stopped
image: postgres:14-alpine # image: postgres:14-alpine
shm_size: 256mb # shm_size: 256mb
networks: # networks:
- default # - default
healthcheck: # healthcheck:
test: ["CMD", "pg_isready", "-U", "postgres"] # test: ["CMD", "pg_isready", "-U", "postgres"]
volumes: # volumes:
- ./postgres14:/var/lib/postgresql/data # - ./postgres14:/var/lib/postgresql/data
environment: # environment:
- "POSTGRES_HOST_AUTH_METHOD=trust" # - "POSTGRES_HOST_AUTH_METHOD=trust"
redis: # redis:
restart: unless-stopped # restart: unless-stopped
image: redis:7-alpine # image: redis:7-alpine
networks: # networks:
- default # - default
healthcheck: # healthcheck:
test: ["CMD", "redis-cli", "ping"] # test: ["CMD", "redis-cli", "ping"]
volumes: # volumes:
- /srv/mastodon/redis:/data # - /srv/mastodon/redis:/data
web: # web:
image: ghcr.io/mastodon/mastodon:v4.3.3 # image: ghcr.io/mastodon/mastodon:v4.3.3
restart: unless-stopped # restart: unless-stopped
env_file: .env.production # env_file: .env.production
command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000" # command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
networks: # networks:
- traefik # - traefik
- default # - default
healthcheck: # healthcheck:
test: # test:
[ # [
"CMD-SHELL", # "CMD-SHELL",
"wget -q --spider --proxy=off localhost:3000/health || exit 1", # "wget -q --spider --proxy=off localhost:3000/health || exit 1",
] # ]
depends_on: # depends_on:
- db # - db
- redis # - redis
volumes: # volumes:
- /srv/mastodon/web/mastodon/public/system # - /srv/mastodon/web/mastodon/public/system
labels: # labels:
- "traefik.enable=true" # - "traefik.enable=true"
- "traefik.http.routers.mastodon.entrypoints=https" # - "traefik.http.routers.mastodon.entrypoints=https"
- "traefik.http.routers.mastodon.rule=(Host(`kvist.knast.cc`))" # - "traefik.http.routers.mastodon.rule=(Host(`kvist.knast.cc`))"
- "traefik.http.routers.mastodon.tls=true" # - "traefik.http.routers.mastodon.tls=true"
- "traefik.http.routers.mastodon.tls.certresolver=http" # - "traefik.http.routers.mastodon.tls.certresolver=http"
- "traefik.http.routers.mastodon.service=mastodon" # - "traefik.http.routers.mastodon.service=mastodon"
- "traefik.http.services.mastodon.loadbalancer.server.port=3000" # - "traefik.http.services.mastodon.loadbalancer.server.port=3000"
- "traefik.docker.network=proxy" # - "traefik.docker.network=proxy"
streaming: # streaming:
image: ghcr.io/mastodon/mastodon-streaming:v4.3.3 # image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
restart: unless-stopped # restart: unless-stopped
env_file: .env.production # env_file: .env.production
command: node ./streaming/index.js # command: node ./streaming/index.js
networks: # networks:
- default # - default
- traefik # - traefik
healthcheck: # healthcheck:
test: # test:
[ # [
"CMD-SHELL", # "CMD-SHELL",
"wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1", # "wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1",
] # ]
depends_on: # depends_on:
- db # - db
- redis # - redis
labels: # labels:
- "traefik.enable=true" # - "traefik.enable=true"
- "traefik.http.routers.mastodon-api.entrypoints=https" # - "traefik.http.routers.mastodon-api.entrypoints=https"
- "traefik.http.routers.mastodon-api.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))" # - "traefik.http.routers.mastodon-api.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
- "traefik.http.routers.mastodon-api.tls=true" # - "traefik.http.routers.mastodon-api.tls=true"
- "traefik.http.routers.mastodon-api.tls.certresolver=http" # - "traefik.http.routers.mastodon-api.tls.certresolver=http"
- "traefik.http.routers.mastodon-api.service=mastodon-api" # - "traefik.http.routers.mastodon-api.service=mastodon-api"
- "traefik.http.services.mastodon-api.loadbalancer.server.port=4000" # - "traefik.http.services.mastodon-api.loadbalancer.server.port=4000"
- "traefik.docker.network=proxy" # - "traefik.docker.network=proxy"
sidekiq: # sidekiq:
image: tootsuite/mastodon # image: tootsuite/mastodon
restart: unless-stopped # restart: unless-stopped
env_file: .env.production # env_file: .env.production
command: bundle exec sidekiq # command: bundle exec sidekiq
depends_on: # depends_on:
- db # - db
- redis # - redis
networks: # networks:
- default # - default
volumes: # volumes:
- /srv/mastodon/sidekiq:/mastodon/public/system # - /srv/mastodon/sidekiq:/mastodon/public/system
healthcheck: # healthcheck:
test: ["CMD-SHELL", "ps aux | grep '[s]idekiq\ 6' || false"] # test: ["CMD-SHELL", "ps aux | grep '[s]idekiq\ 6' || false"]
networks: # networks:
traefik: # traefik:
external: true # external: true
mastodon/docker-compose.yml
+231 -231
View File
@@ -1,162 +1,4 @@
version: '3.7' # version: '3.7'
services:
db:
restart: always
image: postgres:14-alpine
shm_size: 256mb
networks:
- internal_network
volumes:
- /srv/mastodon/postgres14:/var/lib/postgresql/data
# added from the default, otherwise you'll need to manually create a `mastodon` db and user/role
# env_file: db.env
env_file:
- .env
- .env.production
- db.env
environment:
- 'POSTGRES_HOST_AUTH_METHOD=trust'
- 'POSTGRES_USER=postgres'
redis:
restart: always
image: redis:7-alpine
networks:
- internal_network
env_file:
- .env.production
healthcheck:
test: ['CMD', 'redis-cli', 'ping']
# environment:
# - 'REDIS_URL=redis://redis:6379'
volumes:
- /srv/mastodon/redis:/data
web:
image: ghcr.io/mastodon/mastodon:v4.3.3
restart: always
# env_file:
# - .env
# - db.env
env_file:
- .env
- .env.production
- db.env
# ports:
# - 3000:3000
environment:
- PUID=1000
- PGID=1000
command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
networks:
- traefik
- internal_network
healthcheck:
# prettier-ignore
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
depends_on:
- db
- redis
volumes:
- /srv/mastodon/web:/mastodon/public
labels:
- traefik.enable=true
- traefik.http.routers.mastodonweb.rule=Host(`kvist.knast.cc`)
- traefik.http.routers.mastodonweb.entrypoints=websecure
- traefik.http.routers.mastodonweb.tls.certresolver=letsencr
- traefik.http.services.mastodonweb.loadbalancer.server.port=3000
# labels:
# - "traefik.enable=true"
# # Main Web Router
# - "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
# - "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
# - "traefik.http.routers.mstdn-web-rtr.tls=true"
# - "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
# # Media Router
# - "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
# - "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
# - "traefik.http.routers.mstdn-media-rtr.tls=true"
# - "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
# - "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
# # CORS Middleware
# - "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
# - "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
# - "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
# # Service
# - "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3344"
streaming:
image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
restart: always
# env_file:
# - .env
# - db.env
env_file:
- .env
- .env.production
- db.env
command: node ./streaming
environment:
- 'REDIS_URL=redis://redis:6379'
# ports:
# - 4000:4000
networks:
- traefik
- internal_network
healthcheck:
# prettier-ignore
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
depends_on:
- db
- redis
labels:
- traefik.enable=true
- traefik.http.routers.mastodonstreaming.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))
- traefik.http.routers.mastodonstreaming.entrypoints=websecure
- traefik.http.routers.mastodonstreaming.tls.certresolver=letsencr
- traefik.http.services.mastodonstreaming.loadbalancer.server.port=4433
# labels:
# - "traefik.enable=true"
# - "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
# - "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
# - "traefik.http.routers.mstdn-streamer-rtr.tls=true"
# - "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
# - "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"
sidekiq:
image: ghcr.io/mastodon/mastodon:v4.3.3
restart: always
env_file:
- .env
- .env.production
- db.env
command: bundle exec sidekiq
depends_on:
- db
- redis
networks:
- traefik
- internal_network
volumes:
- /srv/mastodon/sidekiq:/mastodon/public/system
healthcheck:
test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
networks:
traefik:
external: true
internal_network:
internal: true
# This file is designed for production server deployment, not local development work
# For a containerized local dev environment, see: https://github.com/mastodon/mastodon/blob/main/docs/DEVELOPMENT.md#docker
# services: # services:
# db: # db:
# restart: always # restart: always
@@ -164,109 +6,128 @@ networks:
# shm_size: 256mb # shm_size: 256mb
# networks: # networks:
# - internal_network # - internal_network
# healthcheck:
# test: ['CMD', 'pg_isready', '-U', 'postgres']
# volumes: # volumes:
# - ./postgres14:/var/lib/postgresql/data # - /srv/mastodon/postgres14:/var/lib/postgresql/data
# # added from the default, otherwise you'll need to manually create a `mastodon` db and user/role
# # env_file: db.env
# env_file:
# - .env
# - .env.production
# - db.env
# environment: # environment:
# - 'POSTGRES_HOST_AUTH_METHOD=trust' # - 'POSTGRES_HOST_AUTH_METHOD=trust'
# - 'POSTGRES_USER=postgres'
# redis: # redis:
# restart: always # restart: always
# image: redis:7-alpine # image: redis:7-alpine
# networks: # networks:
# - internal_network # - internal_network
# env_file:
# - .env.production
# healthcheck: # healthcheck:
# test: ['CMD', 'redis-cli', 'ping'] # test: ['CMD', 'redis-cli', 'ping']
# volumes:
# - ./redis:/data
# # es:
# # restart: always
# # image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4
# # environment: # # environment:
# # - "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true" # # - 'REDIS_URL=redis://redis:6379'
# # - "xpack.license.self_generated.type=basic" # volumes:
# # - "xpack.security.enabled=false" # - /srv/mastodon/redis:/data
# # - "xpack.watcher.enabled=false"
# # - "xpack.graph.enabled=false"
# # - "xpack.ml.enabled=false"
# # - "bootstrap.memory_lock=true"
# # - "cluster.name=es-mastodon"
# # - "discovery.type=single-node"
# # - "thread_pool.write.queue_size=1000"
# # networks:
# # - traefik
# # - internal_network
# # healthcheck:
# # test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
# # volumes:
# # - ./elasticsearch:/usr/share/elasticsearch/data
# # ulimits:
# # memlock:
# # soft: -1
# # hard: -1
# # nofile:
# # soft: 65536
# # hard: 65536
# # ports:
# # - '127.0.0.1:9200:9200'
# web: # web:
# # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# # build: .
# image: ghcr.io/mastodon/mastodon:v4.3.3 # image: ghcr.io/mastodon/mastodon:v4.3.3
# restart: always # restart: always
# # env_file:
# # - .env
# # - db.env
# env_file: # env_file:
# - .env # - .env
# - .env.production # - .env.production
# - db.env # - db.env
# command: bundle exec puma -C config/puma.rb # # ports:
# # - 3000:3000
# environment:
# - PUID=1000
# - PGID=1000
# command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
# networks: # networks:
# - traefik # - traefik
# - internal_network # - internal_network
# healthcheck: # healthcheck:
# # prettier-ignore # # prettier-ignore
# test: ['CMD-SHELL',"curl -s --noproxy localhost localhost:3000/health | grep -q 'OK' || exit 1"] # test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
# ports:
# - '127.0.0.1:3000:3000'
# depends_on: # depends_on:
# - db # - db
# - redis # - redis
# # - es
# volumes: # volumes:
# - ./public/system:/mastodon/public/system # - /srv/mastodon/web:/mastodon/public
# labels:
# - traefik.enable=true
# - traefik.http.routers.mastodonweb.rule=Host(`kvist.knast.cc`)
# - traefik.http.routers.mastodonweb.entrypoints=websecure
# - traefik.http.routers.mastodonweb.tls.certresolver=letsencr
# - traefik.http.services.mastodonweb.loadbalancer.server.port=3000
# # labels:
# # - "traefik.enable=true"
# # # Main Web Router
# # - "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
# # - "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
# # - "traefik.http.routers.mstdn-web-rtr.tls=true"
# # - "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
# # # Media Router
# # - "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
# # - "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
# # - "traefik.http.routers.mstdn-media-rtr.tls=true"
# # - "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
# # - "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
# # # CORS Middleware
# # - "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
# # - "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
# # - "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
# # # Service
# # - "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3344"
# streaming: # streaming:
# # You can uncomment the following lines if you want to not use the prebuilt image, for example if you have local code changes
# # build:
# # dockerfile: ./streaming/Dockerfile
# # context: .
# image: ghcr.io/mastodon/mastodon-streaming:v4.3.3 # image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
# restart: always # restart: always
# # env_file: # # env_file:
# # - .env
# # - db.env
# env_file:
# - .env # - .env
# - .env.production # - .env.production
# - db.env # - db.env
# command: node ./streaming/index.js # command: node ./streaming
# environment:
# - 'REDIS_URL=redis://redis:6379'
# # ports:
# # - 4000:4000
# networks: # networks:
# - traefik # - traefik
# - internal_network # - internal_network
# healthcheck: # healthcheck:
# # prettier-ignore # # prettier-ignore
# test: ['CMD-SHELL', "curl -s --noproxy localhost localhost:4000/api/v1/streaming/health | grep -q 'OK' || exit 1"] # test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
# ports:
# - '127.0.0.1:4000:4000'
# depends_on: # depends_on:
# - db # - db
# - redis # - redis
# labels:
# - traefik.enable=true
# - traefik.http.routers.mastodonstreaming.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))
# - traefik.http.routers.mastodonstreaming.entrypoints=websecure
# - traefik.http.routers.mastodonstreaming.tls.certresolver=letsencr
# - traefik.http.services.mastodonstreaming.loadbalancer.server.port=4433
# # labels:
# # - "traefik.enable=true"
# # - "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
# # - "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
# # - "traefik.http.routers.mstdn-streamer-rtr.tls=true"
# # - "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
# # - "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"
# sidekiq: # sidekiq:
# # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# # build: .
# image: ghcr.io/mastodon/mastodon:v4.3.3 # image: ghcr.io/mastodon/mastodon:v4.3.3
# restart: always # restart: always
# # env_file: # env_file:
# - .env # - .env
# - .env.production # - .env.production
# - db.env # - db.env
@@ -278,34 +139,173 @@ networks:
# - traefik # - traefik
# - internal_network # - internal_network
# volumes: # volumes:
# - ./public/system:/mastodon/public/system # - /srv/mastodon/sidekiq:/mastodon/public/system
# healthcheck: # healthcheck:
# test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"] # test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
# ## Uncomment to enable federation with tor instances along with adding the following ENV variables
# ## http_hidden_proxy=http://privoxy:8118
# ## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
# # tor:
# # image: sirboops/tor
# # networks:
# # - traefik
# # - internal_network
# #
# # privoxy:
# # image: sirboops/privoxy
# # volumes:
# # - ./priv-config:/opt/config
# # networks:
# # - traefik
# # - internal_network
# networks: # networks:
# # traefik:
# traefik: # traefik:
# external: true # external: true
# internal_network: # internal_network:
# internal: true # internal: true
# # This file is designed for production server deployment, not local development work
# # For a containerized local dev environment, see: https://github.com/mastodon/mastodon/blob/main/docs/DEVELOPMENT.md#docker
# # services:
# # db:
# # restart: always
# # image: postgres:14-alpine
# # shm_size: 256mb
# # networks: # # networks:
# # - internal_network
# # healthcheck:
# # test: ['CMD', 'pg_isready', '-U', 'postgres']
# # volumes:
# # - ./postgres14:/var/lib/postgresql/data
# # environment:
# # - 'POSTGRES_HOST_AUTH_METHOD=trust'
# # redis:
# # restart: always
# # image: redis:7-alpine
# # networks:
# # - internal_network
# # healthcheck:
# # test: ['CMD', 'redis-cli', 'ping']
# # volumes:
# # - ./redis:/data
# # # es:
# # # restart: always
# # # image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4
# # # environment:
# # # - "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true"
# # # - "xpack.license.self_generated.type=basic"
# # # - "xpack.security.enabled=false"
# # # - "xpack.watcher.enabled=false"
# # # - "xpack.graph.enabled=false"
# # # - "xpack.ml.enabled=false"
# # # - "bootstrap.memory_lock=true"
# # # - "cluster.name=es-mastodon"
# # # - "discovery.type=single-node"
# # # - "thread_pool.write.queue_size=1000"
# # # networks:
# # # - traefik
# # # - internal_network
# # # healthcheck:
# # # test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
# # # volumes:
# # # - ./elasticsearch:/usr/share/elasticsearch/data
# # # ulimits:
# # # memlock:
# # # soft: -1
# # # hard: -1
# # # nofile:
# # # soft: 65536
# # # hard: 65536
# # # ports:
# # # - '127.0.0.1:9200:9200'
# # web:
# # # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# # # build: .
# # image: ghcr.io/mastodon/mastodon:v4.3.3
# # restart: always
# # env_file:
# # - .env
# # - .env.production
# # - db.env
# # command: bundle exec puma -C config/puma.rb
# # networks:
# # - traefik
# # - internal_network
# # healthcheck:
# # # prettier-ignore
# # test: ['CMD-SHELL',"curl -s --noproxy localhost localhost:3000/health | grep -q 'OK' || exit 1"]
# # ports:
# # - '127.0.0.1:3000:3000'
# # depends_on:
# # - db
# # - redis
# # # - es
# # volumes:
# # - ./public/system:/mastodon/public/system
# # streaming:
# # # You can uncomment the following lines if you want to not use the prebuilt image, for example if you have local code changes
# # # build:
# # # dockerfile: ./streaming/Dockerfile
# # # context: .
# # image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
# # restart: always
# # # env_file:
# # - .env
# # - .env.production
# # - db.env
# # command: node ./streaming/index.js
# # networks:
# # - traefik
# # - internal_network
# # healthcheck:
# # # prettier-ignore
# # test: ['CMD-SHELL', "curl -s --noproxy localhost localhost:4000/api/v1/streaming/health | grep -q 'OK' || exit 1"]
# # ports:
# # - '127.0.0.1:4000:4000'
# # depends_on:
# # - db
# # - redis
# # sidekiq:
# # # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# # # build: .
# # image: ghcr.io/mastodon/mastodon:v4.3.3
# # restart: always
# # # env_file:
# # - .env
# # - .env.production
# # - db.env
# # command: bundle exec sidekiq
# # depends_on:
# # - db
# # - redis
# # networks:
# # - traefik
# # - internal_network
# # volumes:
# # - ./public/system:/mastodon/public/system
# # healthcheck:
# # test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
# # ## Uncomment to enable federation with tor instances along with adding the following ENV variables
# # ## http_hidden_proxy=http://privoxy:8118
# # ## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
# # # tor:
# # # image: sirboops/tor
# # # networks:
# # # - traefik
# # # - internal_network
# # #
# # # privoxy:
# # # image: sirboops/privoxy
# # # volumes:
# # # - ./priv-config:/opt/config
# # # networks:
# # # - traefik
# # # - internal_network
# # networks:
# # # traefik:
# # traefik: # # traefik:
# # external: true # # external: true
# # internal_network:
# # internal: true
# # # networks:
# # # traefik:
# # # external: true