msnie
107 lines
3.4 KiB
YAML
107 lines
3.4 KiB
YAML
version: '3.7'
|
|
services:
|
|
db:
|
|
restart: always
|
|
image: postgres:14-alpine
|
|
shm_size: 256mb
|
|
networks:
|
|
- internal_network
|
|
healthcheck:
|
|
test: ['CMD', 'pg_isready', '-U', 'postgres']
|
|
volumes:
|
|
- ./postgres14:/var/lib/postgresql/data
|
|
environment:
|
|
- 'POSTGRES_HOST_AUTH_METHOD=trust'
|
|
|
|
redis:
|
|
restart: always
|
|
image: redis:7-alpine
|
|
networks:
|
|
- internal_network
|
|
healthcheck:
|
|
test: ['CMD', 'redis-cli', 'ping']
|
|
volumes:
|
|
- ./redis:/data
|
|
|
|
web:
|
|
image: ghcr.io/glitch-soc/mastodon
|
|
restart: always
|
|
env_file: .env.production
|
|
command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
|
|
networks:
|
|
- traefik
|
|
- internal_network
|
|
healthcheck:
|
|
# prettier-ignore
|
|
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
# - es
|
|
volumes:
|
|
- ./public/system:/mastodon/public/system
|
|
labels:
|
|
- "traefik.enable=true"
|
|
# Main Web Router
|
|
- "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
|
|
- "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
|
|
- "traefik.http.routers.mstdn-web-rtr.tls=true"
|
|
- "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
|
|
# Media Router
|
|
- "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
|
|
- "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
|
|
- "traefik.http.routers.mstdn-media-rtr.tls=true"
|
|
- "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
|
|
- "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
|
|
# CORS Middleware
|
|
- "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
|
|
- "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
|
|
- "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
|
|
# Service
|
|
- "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3000"
|
|
|
|
streaming:
|
|
image: ghcr.io/glitch-soc/mastodon
|
|
restart: always
|
|
env_file: .env.production
|
|
command: node ./streaming
|
|
networks:
|
|
- traefik
|
|
- internal_network
|
|
healthcheck:
|
|
# prettier-ignore
|
|
test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
|
|
- "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
|
|
- "traefik.http.routers.mstdn-streamer-rtr.tls=true"
|
|
- "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
|
|
- "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"
|
|
|
|
sidekiq:
|
|
image: ghcr.io/glitch-soc/mastodon
|
|
restart: always
|
|
env_file: .env.production
|
|
command: bundle exec sidekiq
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
networks:
|
|
- traefik
|
|
- internal_network
|
|
volumes:
|
|
- ./public/system:/mastodon/public/system
|
|
healthcheck:
|
|
test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]
|
|
|
|
networks:
|
|
traefik:
|
|
name: traefik
|
|
external: true
|
|
internal_network:
|
|
internal: true
|