Allow for use NPM or at least different ports

[mamama1]

My docker host serves several containers and stacks and 80 as well as 443 is taken. I could of course just adapt the compose file but i think more sustainable way would be to expose ports and maybe nginx option through env variables.

for now I'll edit the compose file...

[mamama1]

Look what I had to do to the compose file to make this work in my environment :D

Issue with the stack IMHO is, that it assumes that it just owns the host's IP. Or at least it is built in a way, assuming very basic setups.

In my case, I wanted to bind the stack to a different (macvlan) IP on my docker host, so I can have firewall rules which allow explicitly the routerfleet's IP to access all my routers for backing up the configs. I did not want my main docker-host's IP to be the one to be able to access all of my infrastructure.

Also, it just assumes, that you have no ingress load balancer yet and just comes hardcoded with a nginx. I already have an npm container which handles all of my ingress and letsencrypt cert stuff.

I understand, that all this is probably made to make this container as accessible and easy to install as possible, but IMHO it absolutely does not take into account any kinds of more complex setups, unfortunately.

services:
  routerfleet-postgres:
    container_name: routerfleet-postgres
    restart: unless-stopped
    image: postgres:16
    volumes:
      - postgres_data:/var/lib/postgresql/data
    environment:
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - TZ=${TIMEZONE}
    networks:
      - internal_backend
  
  routerfleet:
    container_name: routerfleet
    cap_add:
      - NET_ADMIN
    restart: unless-stopped
    image: eduardosilva/routerfleet:latest
    environment:
      - SERVER_ADDRESS=${SERVER_ADDRESS}
      - DEBUG_MODE=${DEBUG_MODE}
      - DATABASE_ENGINE=${DATABASE_ENGINE}
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - TZ=${TIMEZONE}
      - COMPOSE_VERSION=08a
      - COMPOSE_TYPE=with-postgres
    volumes:
      - sqlite_volume:/var/lib/routerfleet_sqlite/
      - media_root:/var/lib/routerfleet/
      - static_volume:/app_static_files/
      - app_secrets:/app_secrets/
    network_mode: "service:routerfleet-nginx"
    command: /bin/bash /app/init.sh
    depends_on:
      - routerfleet-postgres

  routerfleet-cron:
    container_name: routerfleet-cron
    restart: unless-stopped
    image: eduardosilva/routerfleet-cron:latest
    environment:
      - TZ=${TIMEZONE}
    network_mode: "service:routerfleet-nginx"
    depends_on:
      - routerfleet

  routerfleet-monitoring:
    container_name: routerfleet-monitoring
    restart: unless-stopped
    image: eduardosilva/routerfleet-monitoring:latest
    environment:
      - TZ=${TIMEZONE}
    volumes:
      - app_secrets:/app_secrets/
    network_mode: "service:routerfleet-nginx"
    depends_on:
      - routerfleet

  routerfleet-nginx:
    container_name: routerfleet-nginx
    restart: unless-stopped
    image: eduardosilva/routerfleet-nginx:latest
    cap_add:
      - NET_ADMIN
    environment:
      - HTTPS_REDIRECT_POLICY=${HTTPS_REDIRECT_POLICY}
      - TZ=${TIMEZONE}
    volumes:
      - static_volume:/static
      - https_cert:/certificate
    networks:
      management_public:
        ipv4_address: 192.168.31.93
      internal_backend:
    extra_hosts:
      - "routerfleet:127.0.0.1"
    command: >
      /bin/sh -c "
      ifconfig eth0 up;
      sleep 2;
      route del default || true;
      route add default gw 192.168.31.89 eth1;
      nginx -g 'daemon off;'"
    #depends_on:
    #  - routerfleet

volumes:
  static_volume:
  https_cert:
  media_root:
  postgres_data:
  sqlite_volume:
  app_secrets:

networks:
  internal_backend:
    driver: bridge
  management_public:
    driver: macvlan
    driver_opts:
      parent: ens192
    ipam:
      config:
        - subnet: 192.168.31.88/29
          gateway: 192.168.31.89