tiles.versatiles.org/compose.yaml at main · versatiles-org/tiles.versatiles.org · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
services:
  versatiles:
    container_name: versatiles
    image: versatiles/versatiles:latest
    restart: always
    networks: [docker_network]
    expose: [8080]
    command: ["serve", "-c", "/config_dir/versatiles.yaml"]
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:8080/"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s
    volumes:
      - ./volumes/tiles/:/data/tiles/:ro
      - ./volumes/frontend/:/data/frontend/:ro
      - ./volumes/versatiles_conf/:/config_dir/:ro

  download-updater:
    container_name: download-updater
    build:
      context: ./download
      dockerfile: Dockerfile
    profiles: [donotstart]
    networks: [docker_network]
    environment:
      - DOMAIN=${DOWNLOAD_DOMAIN}
      - STORAGE_URL=${STORAGE_URL}
      - STORAGE_PASS=${STORAGE_PASS}
    security_opt:
      - no-new-privileges:true
    volumes:
      - ./volumes/tiles:/volumes/tiles:rw
      - ./volumes/download/content:/volumes/content:rw
      - ./volumes/download/nginx_conf:/volumes/nginx_conf:rw
      - ./volumes/download/hash_cache:/volumes/download/hash_cache:rw
      - ./volumes/versatiles_conf:/volumes/versatiles_conf:rw
      - ./.ssh:/app/.ssh:ro

  nginx:
    container_name: nginx
    image: nginx:1.28-alpine
    restart: always
    depends_on:
      versatiles:
        condition: service_healthy
    networks: [docker_network]
    ports: [80:80, 443:443]
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/templates/:/etc/nginx/templates/:ro
      - ./volumes/cache/:/data/nginx/cache/:rw
      - ./volumes/certbot-www/:/var/www/certbot/:ro
      - ./volumes/nginx-cert/:/etc/nginx/ssl/:ro
      - ./volumes/nginx-log/:/var/log/nginx/:rw
      - ./volumes/download/nginx_conf/:/etc/nginx/sites/:ro
      - ./volumes/tiles/:/volumes/tiles/:ro
      - ./volumes/download/content/:/volumes/content/:ro
      - ./nginx/docker-entrypoint.d/10-compute-cache-size.envsh:/docker-entrypoint.d/10-compute-cache-size.envsh:ro
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://localhost/"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s
    environment:
      - DOMAIN_NAME=${DOMAIN_NAME}
      - RAM_DISK_GB=${RAM_DISK_GB}

  certbot:
    container_name: certbot
    image: certbot/certbot:v5.3.1
    depends_on:
      nginx:
        condition: service_healthy
    profiles: [donotstart]
    security_opt:
      - no-new-privileges:true
    volumes:
      - ./volumes/certbot-cert/:/etc/letsencrypt/:rw
      - ./volumes/certbot-www/:/var/www/certbot/:rw

networks:
  docker_network:
    driver: bridge