64 lines
2.3 KiB
YAML
64 lines
2.3 KiB
YAML
secrets:
|
|
komodo_passkey:
|
|
file: ${SECRETSDIR}/komodo/komodo_passkey
|
|
komodo_webhook_secret:
|
|
file: ${SECRETSDIR}/komodo/komodo_webhook_secret
|
|
komodo_jwt_secret:
|
|
file: ${SECRETSDIR}/komodo/komodo_jwt_secret
|
|
komodo_oidc_client_id:
|
|
file: ${SECRETSDIR}/komodo/komodo_oidc_client_id
|
|
komodo_oidc_client_secret:
|
|
file: ${SECRETSDIR}/komodo/komodo_oidc_client_secret
|
|
services:
|
|
core:
|
|
container_name: ${KOMODO_CORE_CONTAINER_NAME}
|
|
image: ${KOMODO_CORE_IMAGE}:${COMPOSE_KOMODO_IMAGE_TAG:-latest}
|
|
restart: ${KOMODO_RESTART_POLICY}
|
|
secrets:
|
|
- komodo_passkey
|
|
- komodo_webhook_secret
|
|
- komodo_jwt_secret
|
|
- komodo_oidc_client_id
|
|
- komodo_oidc_client_secret
|
|
labels:
|
|
- "komodo.skip=" # Prevent Komodo from stopping with StopAllContainers
|
|
- "traefik.enable=true"
|
|
## HTTP Routers
|
|
- "traefik.http.routers.${KOMODO_HOSTNAME}-rtr.entrypoints=https"
|
|
- "traefik.http.routers.${KOMODO_HOSTNAME}-rtr.rule=(`${KOMODO_HOSTNAME}.${DOMAINNAME1}`)"
|
|
## Middlewares
|
|
# - "traefik.http.routers.${PRIVATEBIN_HOSTNAME}-rtr.middlewares=chain-authelia@file"
|
|
- "traefik.http.routers.${KOMODO_HOSTNAME}-rtr.middlewares=chain-no-auth@file"
|
|
## HTTP Services
|
|
- "traefik.http.routers.${KOMODO_HOSTNAME}-rtr.service=${KOMODO_HOSTNAME}-svc"
|
|
- "traefik.http.services.${KOMODO_HOSTNAME}-svc.loadbalancer.server.port=9120"
|
|
depends_on:
|
|
- ferretdb
|
|
logging:
|
|
driver: ${COMPOSE_LOGGING_DRIVER:-local}
|
|
networks:
|
|
- ${KOMODO_NETWORk_ID}
|
|
- komodo
|
|
ports:
|
|
- 9120:9120
|
|
env_file: ../env/komodo.env
|
|
environment:
|
|
KOMODO_DATABASE_URI: mongodb://${KOMODO_DB_USERNAME}:${KOMODO_DB_PASSWORD}@ferretdb:27017/${KOMODO_DATABASE_DB_NAME:-komodo}?authMechanism=PLAIN
|
|
volumes:
|
|
## Core cache for repos for latest commit hash / contents
|
|
- repo-cache:/repo-cache
|
|
## Store sync files on server
|
|
# - /path/to/syncs:/syncs
|
|
## Optionally mount a custom core.config.toml
|
|
# - /path/to/core.config.toml:/config/config.toml
|
|
## Allows for systemd Periphery connection at
|
|
## "http://host.docker.internal:8120"
|
|
# extra_hosts:
|
|
# - host.docker.internal:host-gateway
|
|
volumes:
|
|
# Core
|
|
repo-cache:
|
|
#networks:
|
|
# komodo: {}
|
|
# proxy:
|
|
# external: true |