null4bl3/home_server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
4fd9df6ff28c5ae1ff5d72f4c335dd023c51f406
home_server/mastodon/docker-compose.yml
T
msnie 4fd9df6ff2 mastodon
2025-02-02 18:12:46 +01:00

312 lines
9.7 KiB
YAML
Raw Blame History

# version: '3.7'
# services:
# db:
# restart: always
# image: postgres:14-alpine
# shm_size: 256mb
# networks:
# - internal_network
# volumes:
# - /srv/mastodon/postgres14:/var/lib/postgresql/data
# # added from the default, otherwise you'll need to manually create a `mastodon` db and user/role
# # env_file: db.env
# env_file:
# - .env
# - .env.production
# - db.env
# environment:
# - 'POSTGRES_HOST_AUTH_METHOD=trust'
# - 'POSTGRES_USER=postgres'
# redis:
# restart: always
# image: redis:7-alpine
# networks:
# - internal_network
# env_file:
# - .env.production
# healthcheck:
# test: ['CMD', 'redis-cli', 'ping']
# # environment:
# # - 'REDIS_URL=redis://redis:6379'
# volumes:
# - /srv/mastodon/redis:/data
# web:
# image: ghcr.io/mastodon/mastodon:v4.3.3
# restart: always
# # env_file:
# # - .env
# # - db.env
# env_file:
# - .env
# - .env.production
# - db.env
# # ports:
# # - 3000:3000
# environment:
# - PUID=1000
# - PGID=1000
# command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
# networks:
# - traefik
# - internal_network
# healthcheck:
# # prettier-ignore
# test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
# depends_on:
# - db
# - redis
# volumes:
# - /srv/mastodon/web:/mastodon/public
# labels:
# - traefik.enable=true
# - traefik.http.routers.mastodonweb.rule=Host(`kvist.knast.cc`)
# - traefik.http.routers.mastodonweb.entrypoints=websecure
# - traefik.http.routers.mastodonweb.tls.certresolver=letsencr
# - traefik.http.services.mastodonweb.loadbalancer.server.port=3000
# # labels:
# # - "traefik.enable=true"
# # # Main Web Router
# # - "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
# # - "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
# # - "traefik.http.routers.mstdn-web-rtr.tls=true"
# # - "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
# # # Media Router
# # - "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
# # - "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
# # - "traefik.http.routers.mstdn-media-rtr.tls=true"
# # - "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
# # - "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
# # # CORS Middleware
# # - "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
# # - "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
# # - "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
# # # Service
# # - "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3344"
# streaming:
# image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
# restart: always
# # env_file:
# # - .env
# # - db.env
# env_file:
# - .env
# - .env.production
# - db.env
# command: node ./streaming
# environment:
# - 'REDIS_URL=redis://redis:6379'
# # ports:
# # - 4000:4000
# networks:
# - traefik
# - internal_network
# healthcheck:
# # prettier-ignore
# test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
# depends_on:
# - db
# - redis
# labels:
# - traefik.enable=true
# - traefik.http.routers.mastodonstreaming.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))
# - traefik.http.routers.mastodonstreaming.entrypoints=websecure
# - traefik.http.routers.mastodonstreaming.tls.certresolver=letsencr
# - traefik.http.services.mastodonstreaming.loadbalancer.server.port=4433
# # labels:
# # - "traefik.enable=true"
# # - "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
# # - "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
# # - "traefik.http.routers.mstdn-streamer-rtr.tls=true"
# # - "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
# # - "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"
# sidekiq:
# image: ghcr.io/mastodon/mastodon:v4.3.3
# restart: always
# env_file:
# - .env
# - .env.production
# - db.env
# command: bundle exec sidekiq
# depends_on:
# - db
# - redis
# networks:
# - traefik
# - internal_network
# volumes:
# - /srv/mastodon/sidekiq:/mastodon/public/system
# healthcheck:
# test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
# networks:
# traefik:
# external: true
# internal_network:
# internal: true
# # This file is designed for production server deployment, not local development work
# # For a containerized local dev environment, see: https://github.com/mastodon/mastodon/blob/main/docs/DEVELOPMENT.md#docker
# # services:
# # db:
# # restart: always
# # image: postgres:14-alpine
# # shm_size: 256mb
# # networks:
# # - internal_network
# # healthcheck:
# # test: ['CMD', 'pg_isready', '-U', 'postgres']
# # volumes:
# # - ./postgres14:/var/lib/postgresql/data
# # environment:
# # - 'POSTGRES_HOST_AUTH_METHOD=trust'
# # redis:
# # restart: always
# # image: redis:7-alpine
# # networks:
# # - internal_network
# # healthcheck:
# # test: ['CMD', 'redis-cli', 'ping']
# # volumes:
# # - ./redis:/data
# # # es:
# # # restart: always
# # # image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4
# # # environment:
# # # - "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true"
# # # - "xpack.license.self_generated.type=basic"
# # # - "xpack.security.enabled=false"
# # # - "xpack.watcher.enabled=false"
# # # - "xpack.graph.enabled=false"
# # # - "xpack.ml.enabled=false"
# # # - "bootstrap.memory_lock=true"
# # # - "cluster.name=es-mastodon"
# # # - "discovery.type=single-node"
# # # - "thread_pool.write.queue_size=1000"
# # # networks:
# # # - traefik
# # # - internal_network
# # # healthcheck:
# # # test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
# # # volumes:
# # # - ./elasticsearch:/usr/share/elasticsearch/data
# # # ulimits:
# # # memlock:
# # # soft: -1
# # # hard: -1
# # # nofile:
# # # soft: 65536
# # # hard: 65536
# # # ports:
# # # - '127.0.0.1:9200:9200'
# # web:
# # # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# # # build: .
# # image: ghcr.io/mastodon/mastodon:v4.3.3
# # restart: always
# # env_file:
# # - .env
# # - .env.production
# # - db.env
# # command: bundle exec puma -C config/puma.rb
# # networks:
# # - traefik
# # - internal_network
# # healthcheck:
# # # prettier-ignore
# # test: ['CMD-SHELL',"curl -s --noproxy localhost localhost:3000/health | grep -q 'OK' || exit 1"]
# # ports:
# # - '127.0.0.1:3000:3000'
# # depends_on:
# # - db
# # - redis
# # # - es
# # volumes:
# # - ./public/system:/mastodon/public/system
# # streaming:
# # # You can uncomment the following lines if you want to not use the prebuilt image, for example if you have local code changes
# # # build:
# # # dockerfile: ./streaming/Dockerfile
# # # context: .
# # image: ghcr.io/mastodon/mastodon-streaming:v4.3.3
# # restart: always
# # # env_file:
# # - .env
# # - .env.production
# # - db.env
# # command: node ./streaming/index.js
# # networks:
# # - traefik
# # - internal_network
# # healthcheck:
# # # prettier-ignore
# # test: ['CMD-SHELL', "curl -s --noproxy localhost localhost:4000/api/v1/streaming/health | grep -q 'OK' || exit 1"]
# # ports:
# # - '127.0.0.1:4000:4000'
# # depends_on:
# # - db
# # - redis
# # sidekiq:
# # # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
# # # build: .
# # image: ghcr.io/mastodon/mastodon:v4.3.3
# # restart: always
# # # env_file:
# # - .env
# # - .env.production
# # - db.env
# # command: bundle exec sidekiq
# # depends_on:
# # - db
# # - redis
# # networks:
# # - traefik
# # - internal_network
# # volumes:
# # - ./public/system:/mastodon/public/system
# # healthcheck:
# # test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
# # ## Uncomment to enable federation with tor instances along with adding the following ENV variables
# # ## http_hidden_proxy=http://privoxy:8118
# # ## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
# # # tor:
# # # image: sirboops/tor
# # # networks:
# # # - traefik
# # # - internal_network
# # #
# # # privoxy:
# # # image: sirboops/privoxy
# # # volumes:
# # # - ./priv-config:/opt/config
# # # networks:
# # # - traefik
# # # - internal_network
# # networks:
# # # traefik:
# # traefik:
# # external: true
# # internal_network:
# # internal: true
# # # networks:
# # # traefik:
# # # external: true
Reference in New Issue View Git Blame Copy Permalink