happydomain/docker-compose.yml at master · happyDomain/happydomain · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
services:
  unbound:
    image: alpinelinux/unbound
    restart: unless-stopped

    configs:
      - source: unbound_conf
        target: /etc/unbound/unbound.conf
        uid: "100"
        gid: "101"

    networks:
      default:
        ipv4_address: 172.28.0.53

  happydomain:
    image: happydomain/happydomain
    build:
      context: .
      dockerfile: Dockerfile
    ports:
      - "8081:8081"
    environment:
      HAPPYDOMAIN_NO_AUTH: "1"

      # Override some checkers options: use local checkers instead of remote public ones
      HAPPYDOMAIN_CHECKER_MATRIXIM_FEDERATIONTESTERSERVER: "http://matrixfederationtester:8080/api/report?server_name=%s"
      HAPPYDOMAIN_CHECKER_ZONEMASTER_ZONEMASTERAPIURL: "http://zonemaster:5000"
      HAPPYDOMAIN_CHECKER_DNSVIZ_ENDPOINT: "http://dnsviz:8080"

      # Add more settings here
      # HAPPYDOMAIN_MAIL_SMTP_HOST: "mailer"

      # If a reverse proxy fronts happyDomain, declare its exact address so
      # that X-Forwarded-For is honoured (see docs/reverse-proxy.md). Left
      # unset, forwarded headers are ignored and every client behind the proxy
      # shares the proxy address. Give the address of the proxy itself, not the
      # network it sits on: trusting the whole bridge would let any sibling
      # container reaching port 8081 directly forge its client IP.
      # HAPPYDOMAIN_TRUSTED_PROXY: "172.28.0.10"

      # happyDomain refuses to connect to anything that is not publicly
      # routable, so a DNS server or a router on your own network has to be
      # named explicitly (see docs/outbound-targets.md). The address below is
      # the compose network's DNS server, which the resolver tool would
      # otherwise be unable to query.
      # HAPPYDOMAIN_OUTBOUND_ALLOWED_TARGET: "172.28.0.53"
      # HAPPYDOMAIN_RESOLVER_ALLOWED_TARGET: "172.28.0.53"

    dns:
      - 172.28.0.53
    restart: unless-stopped

    volumes:
      - storage:/data:rw

  dnsviz:
    image: happydomain/checker-dnsviz
    restart: unless-stopped

  matrixfederationtester:
    image: matrixdotorg/federation-tester-backend
    environment:
      BIND_ADDRESS: "0.0.0.0:8080"
    restart: unless-stopped

  zonemaster:
    image: zonemaster/backend
    command: full
    restart: unless-stopped

configs:
  unbound_conf:
    content: |
      server:
          verbosity: 1
          interface: 0.0.0.0
          port: 53
          do-ip4: yes
          do-ip6: no
          do-udp: yes
          do-tcp: yes

          access-control: 127.0.0.0/8 allow
          access-control: 172.28.0.0/24 allow

          # Short cache for a testing resolver
          cache-max-ttl: 60

          # Buffers: let the system decide
          so-sndbuf: 0
          so-rcvbuf: 0

          # Trust anchor (static, ships with the image)
          trust-anchor-file: "/etc/unbound/root.key"

volumes:
  storage:

networks:
  default:
    ipam:
      config:
        - subnet: 172.28.0.0/24