summaryrefslogtreecommitdiff
path: root/playbooks/roles/bin/templates/stacks
diff options
context:
space:
mode:
authorElizabeth Hunt <me@liz.coffee>2025-08-11 18:39:55 -0700
committerElizabeth Hunt <me@liz.coffee>2025-08-11 18:39:55 -0700
commit08e92ca3b8ee6c38c3e19126378e51b46cf63b16 (patch)
tree6e9c0e0f394d645cea4208bcfab7e1d98d329e0e /playbooks/roles/bin/templates/stacks
parent4f90a2fc5fd134b27c2f0e32a5f1192003d3f0cf (diff)
downloadinfra-08e92ca3b8ee6c38c3e19126378e51b46cf63b16.tar.gz
infra-08e92ca3b8ee6c38c3e19126378e51b46cf63b16.zip
Oauth proxy and monitoring init
Diffstat (limited to 'playbooks/roles/bin/templates/stacks')
-rw-r--r--playbooks/roles/bin/templates/stacks/docker-compose.yml25
1 files changed, 13 insertions, 12 deletions
diff --git a/playbooks/roles/bin/templates/stacks/docker-compose.yml b/playbooks/roles/bin/templates/stacks/docker-compose.yml
index 5f99f8b..f1a86c4 100644
--- a/playbooks/roles/bin/templates/stacks/docker-compose.yml
+++ b/playbooks/roles/bin/templates/stacks/docker-compose.yml
@@ -1,21 +1,21 @@
services:
- bin:
- image: stonith404/pingvin-share
+ copyparty:
+ image: copyparty/ac:latest
+ user: "1000:1000"
volumes:
- - {{ bin_base }}/volumes/data:/data
+ - "{{ bin_base }}/volumes/share:/w:z"
+ - "{{ bin_base }}/volumes/conf:/cfg:z"
environment:
- TZ={{ timezone }}
- DEPLOYMENT_TIME={{ deployment_time }}
- - TRUST_PROXY=true
- - API_URL=https://{{ bin_domain }}
- - DATA_DIRECTORY=/data
- - DATABASE_URL=file:/data/pingvin-share.db?connection_limit=1
+ - LD_PRELOAD=/usr/lib/libmimalloc-secure.so.NOPE
+ - PYTHONUNBUFFERED=1
healthcheck:
- test: ["CMD", "curl", "--fail", "http://localhost:3000/api/configs"]
- timeout: 3s
+ test: ["CMD-SHELL", "wget --spider -q 127.0.0.1:3923/?reset=/._"]
interval: 1m
- retries: 2
- start_period: 10s
+ timeout: 2s
+ retries: 5
+ start_period: 15s
networks:
- proxy
deploy:
@@ -34,7 +34,8 @@ services:
- traefik.http.routers.bin.tls.certResolver=letsencrypt
- traefik.http.routers.bin.rule=Host(`{{ bin_domain }}`)
- traefik.http.routers.bin.entrypoints=websecure
- - traefik.http.services.bin.loadbalancer.server.port=3000
+ - traefik.http.routers.bin.middlewares=oauth-verify
+ - traefik.http.services.bin.loadbalancer.server.port=3923
networks:
proxy: