52 lines
3.0 KiB
YAML
52 lines
3.0 KiB
YAML
# Use with an appropriate .env file
|
|
|
|
services:
|
|
app:
|
|
image: git.kolkman.org/olaf/link-log:development # or :latest or a version-tag
|
|
container_name: ${APP_CONTAINER_NAME:-linklog-app}
|
|
volumes:
|
|
- ./linklog_data:/app/backend/data
|
|
environment:
|
|
APP_ENV: ${APP_ENV:-production}
|
|
LINKLOG_APP_NAME: ${LINKLOG_APP_NAME:-LinkLog}
|
|
LINKLOG_DATABASE_PATH: ${LINKLOG_DATABASE_PATH:-/app/backend/data/linklog.db}
|
|
LINKLOG_SECRET_KEY: ${LINKLOG_SECRET_KEY:?Set LINKLOG_SECRET_KEY in .env}
|
|
LINKLOG_TOKEN_EXPIRY_MINUTES: ${LINKLOG_TOKEN_EXPIRY_MINUTES:-15}
|
|
LINKLOG_REFRESH_TOKEN_EXPIRY_DAYS: ${LINKLOG_REFRESH_TOKEN_EXPIRY_DAYS:-30}
|
|
LINKLOG_PUBLIC_URL: ${LINKLOG_PUBLIC_URL:-linklog.example.com}
|
|
LINKLOG_SMTP_HOST: ${LINKLOG_SMTP_HOST:-smtp.example.com}
|
|
LINKLOG_SMTP_PORT: ${LINKLOG_SMTP_PORT:-587}
|
|
LINKLOG_SMTP_USERNAME: ${LINKLOG_SMTP_USERNAME:?Set LINKLOG_SMTP_USERNAME in .env}
|
|
LINKLOG_SMTP_PASSWORD: ${LINKLOG_SMTP_PASSWORD:?Set LINKLOG_SMTP_PASSWORD in .env}
|
|
LINKLOG_SMTP_FROM: ${LINKLOG_SMTP_FROM:-LinkLog <no-reply@example.com>}
|
|
LINKLOG_SMTP_USE_TLS: ${LINKLOG_SMTP_USE_TLS:-true}
|
|
LINKLOG_EMAIL_VERIFICATION_EXPIRY_HOURS: ${LINKLOG_EMAIL_VERIFICATION_EXPIRY_HOURS:-24}
|
|
LINKLOG_PASSWORD_RESET_EXPIRY_HOURS: ${LINKLOG_PASSWORD_RESET_EXPIRY_HOURS:-1}
|
|
LINKLOG_MASTODON_CLIENT_NAME: ${LINKLOG_MASTODON_CLIENT_NAME:-LinkLog}
|
|
LINKLOG_MASTODON_OAUTH_EXPIRY_MINUTES: ${LINKLOG_MASTODON_OAUTH_EXPIRY_MINUTES:-10}
|
|
LINKLOG_LOG_LEVEL: ${LINKLOG_LOG_LEVEL:-INFO}
|
|
LINKLOG_TRACKING_PARAMS: ${LINKLOG_TRACKING_PARAMS:-}
|
|
restart: ${APP_RESTART_POLICY:-unless-stopped}
|
|
healthcheck:
|
|
test: ["CMD", "python", "-c", "from urllib.request import urlopen; urlopen('http://127.0.0.1:8000/health', timeout=3)"]
|
|
interval: ${APP_HEALTHCHECK_INTERVAL:-30s}
|
|
timeout: ${APP_HEALTHCHECK_TIMEOUT:-5s}
|
|
start_period: ${APP_HEALTHCHECK_START_PERIOD:-10s}
|
|
retries: ${APP_HEALTHCHECK_RETRIES:-3}
|
|
labels:
|
|
traefik.enable: true
|
|
traefik.http.middlewares.web-https-redirect.redirectscheme.scheme: https
|
|
traefik.http.services.linklog.loadbalancer.server.port: 8000
|
|
traefik.docker.network: linklog_traefik # network to be shared with traefik
|
|
|
|
|
|
traefik.http.routers.linklog.entrypoints: web
|
|
traefik.http.routers.linklog.rule: Host(`${LINKLOG_PUBLIC_URL:-linklog.example.com}`) # Make sure to change
|
|
traefik.http.routers.linklog.middlewares: web-https-redirect,servicests # these middlewares must exist
|
|
traefik.http.routers.linklog-secure.entrypoints: websecure
|
|
traefik.http.routers.linklog-secure.rule: Host(`${LINKLOG_PUBLIC_URL:-linklog.example.com}`) #Make sure to change
|
|
traefik.http.routers.linklog-secure.tls: true
|
|
traefik.http.routers.linklog-secure.middlewares: servicests
|
|
|
|
traefik.http.routers.linklog-secure.tls.certresolver: myresolver # or your resovler, e.g certbot
|
|
traefik.http.routers.linklog-secure.service: linklog |