From 08e92ca3b8ee6c38c3e19126378e51b46cf63b16 Mon Sep 17 00:00:00 2001
From: Elizabeth Hunt <me@liz.coffee>
Date: Mon, 11 Aug 2025 18:39:55 -0700
Subject: Oauth proxy and monitoring init

---
 .../roles/bin/templates/stacks/docker-compose.yml  | 25 +++++++++++-----------
 1 file changed, 13 insertions(+), 12 deletions(-)

(limited to 'playbooks/roles/bin/templates/stacks/docker-compose.yml')

diff --git a/playbooks/roles/bin/templates/stacks/docker-compose.yml b/playbooks/roles/bin/templates/stacks/docker-compose.yml
index 5f99f8b..f1a86c4 100644
--- a/playbooks/roles/bin/templates/stacks/docker-compose.yml
+++ b/playbooks/roles/bin/templates/stacks/docker-compose.yml
@@ -1,21 +1,21 @@
 services:
-  bin:
-    image: stonith404/pingvin-share
+  copyparty:
+    image: copyparty/ac:latest
+    user: "1000:1000"
     volumes:
-      - {{ bin_base }}/volumes/data:/data
+      - "{{ bin_base }}/volumes/share:/w:z"
+      - "{{ bin_base }}/volumes/conf:/cfg:z"
     environment:
       - TZ={{ timezone }}
       - DEPLOYMENT_TIME={{ deployment_time }}
-      - TRUST_PROXY=true
-      - API_URL=https://{{ bin_domain }}
-      - DATA_DIRECTORY=/data
-      - DATABASE_URL=file:/data/pingvin-share.db?connection_limit=1
+      - LD_PRELOAD=/usr/lib/libmimalloc-secure.so.NOPE
+      - PYTHONUNBUFFERED=1
     healthcheck:
-      test: ["CMD", "curl", "--fail", "http://localhost:3000/api/configs"]
-      timeout: 3s
+      test: ["CMD-SHELL", "wget --spider -q 127.0.0.1:3923/?reset=/._"]
       interval: 1m
-      retries: 2
-      start_period: 10s
+      timeout: 2s
+      retries: 5
+      start_period: 15s
     networks:
       - proxy
     deploy:
@@ -34,7 +34,8 @@ services:
         - traefik.http.routers.bin.tls.certResolver=letsencrypt
         - traefik.http.routers.bin.rule=Host(`{{ bin_domain }}`)
         - traefik.http.routers.bin.entrypoints=websecure
-        - traefik.http.services.bin.loadbalancer.server.port=3000
+        - traefik.http.routers.bin.middlewares=oauth-verify
+        - traefik.http.services.bin.loadbalancer.server.port=3923
 
 networks:
   proxy:
-- 
cgit v1.2.3-70-g09d2