more ipfs config
This commit is contained in:
Yann Autissier
@@ -1,6 +1,6 @@
|
||||
MYOS_RC_PROMPT_SET=true
|
||||
MYOS_RC_PS1_SET=true
|
||||
MYOS_RC_SCREEN_ATTACH=true
|
||||
MYOS_RC_SOURCE=/etc/profile.d/rc_functions.sh
|
||||
MYOS_RC_SSH_ADD=true
|
||||
MYOS_RC_TMUX_ATTACH=false
|
||||
USER_MYOS_RC_PROMPT_SET=true
|
||||
USER_MYOS_RC_PS1_SET=true
|
||||
USER_MYOS_RC_SCREEN_ATTACH=true
|
||||
USER_MYOS_RC_SOURCE=/etc/profile.d/rc_functions.sh
|
||||
USER_MYOS_RC_SSH_ADD=true
|
||||
USER_MYOS_RC_TMUX_ATTACH=false
|
||||
|
||||
+7
-7
@@ -20,14 +20,14 @@ services:
|
||||
container_name: ${DOCKER_NAME}
|
||||
environment:
|
||||
- ENV=${ENV}
|
||||
- RC_00_SOURCE=${MYOS_RC_SOURCE}
|
||||
- RC_01_PS1_SET=${MYOS_RC_PS1_SET}
|
||||
- RC_02_PROMPT_SET=${MYOS_RC_PROMPT_SET}
|
||||
- RC_03_SSH_ADD=${MYOS_RC_SSH_ADD}
|
||||
- RC_04_TMUX_ATTACH=${MYOS_RC_TMUX_ATTACH}
|
||||
- RC_05_SCREEN_ATTACH=${MYOS_RC_SCREEN_ATTACH}
|
||||
- RC_00_SOURCE=${USER_MYOS_RC_SOURCE}
|
||||
- RC_01_PS1_SET=${USER_MYOS_RC_PS1_SET}
|
||||
- RC_02_PROMPT_SET=${USER_MYOS_RC_PROMPT_SET}
|
||||
- RC_03_SSH_ADD=${USER_MYOS_RC_SSH_ADD}
|
||||
- RC_04_TMUX_ATTACH=${USER_MYOS_RC_TMUX_ATTACH}
|
||||
- RC_05_SCREEN_ATTACH=${USER_MYOS_RC_SCREEN_ATTACH}
|
||||
- SHELL=${DOCKER_SHELL}
|
||||
image: ${DOCKER_IMAGE}:${DOCKER_IMAGE_TAG}
|
||||
image: ${DOCKER_IMAGE}
|
||||
networks:
|
||||
- private
|
||||
restart: always
|
||||
|
||||
@@ -1,4 +1,9 @@
|
||||
IPFS_ADDRESSES_API_DOMAIN=${DOCKER_NETWORK_PRIVATE}
|
||||
IPFS_ADDRESSES_GATEWAY_INET4=0.0.0.0
|
||||
IPFS_IPNS_USEPUBSUB=true
|
||||
IPFS_LOGGING=error
|
||||
IPFS_PUBSUB_ENABLE=true
|
||||
IPFS_PUBSUB_ROUTER=gossipsub
|
||||
IPFS_ROUTING_TYPE=dht
|
||||
IPFS_SERVICE_8080_CHECK_TCP=/ipfs/QmYwAPJzv5CZsnA625s3Xf2nemtYgPpHdWEz79ojWnPbdG/readme
|
||||
IPFS_SERVICE_8080_TAGS=urlprefix-ipfs.${APP_DOMAIN}/
|
||||
|
||||
+29
-2
@@ -9,15 +9,42 @@ services:
|
||||
- UID=${UID}
|
||||
context: ../..
|
||||
dockerfile: docker/ipfs/Dockerfile
|
||||
command: daemon --migrate=true
|
||||
command: daemon --agent-version-suffix=${COMPOSE_PROJECT_NAME} --enable-gc --migrate
|
||||
cpus: 0.5
|
||||
environment:
|
||||
- IPFS_ADDRESSES_API=${IPFS_ADDRESSES_API}
|
||||
- IPFS_ADDRESSES_API_DOMAIN=${IPFS_ADDRESSES_API_DOMAIN}
|
||||
- IPFS_ADDRESSES_API_INET4=${IPFS_ADDRESSES_API_INET4}
|
||||
- IPFS_ADDRESSES_API_PORT=${IPFS_ADDRESSES_API_PORT}
|
||||
- IPFS_ADDRESSES_GATEWAY=${IPFS_ADDRESSES_GATEWAY}
|
||||
- IPFS_ADDRESSES_GATEWAY_DOMAIN=${IPFS_ADDRESSES_GATEWAY_DOMAIN}
|
||||
- IPFS_ADDRESSES_GATEWAY_INET4=${IPFS_ADDRESSES_GATEWAY_INET4}
|
||||
- IPFS_ADDRESSES_GATEWAY_PORT=${IPFS_ADDRESSES_GATEWAY_PORT}
|
||||
- IPFS_API_HTTPHEADERS=${IPFS_API_HTTPHEADERS}
|
||||
- IPFS_API_HTTPHEADERS_ACA_CREDENTIALS=${IPFS_API_HTTPHEADERS_ACA_CREDENTIALS}
|
||||
- IPFS_API_HTTPHEADERS_ACA_HEADERS=${IPFS_API_HTTPHEADERS_ACA_HEADERS}
|
||||
- IPFS_API_HTTPHEADERS_ACA_METHODS=${IPFS_API_HTTPHEADERS_ACA_METHODS}
|
||||
- IPFS_API_HTTPHEADERS_ACA_ORIGIN=${IPFS_API_HTTPHEADERS_ACA_ORIGIN}
|
||||
- IPFS_BOOTSTRAP=${IPFS_BOOTSTRAP}
|
||||
- IPFS_DATASTORE_GCPERIOD=${IPFS_DATASTORE_GCPERIOD}
|
||||
- IPFS_DISK_USAGE_PERCENT=${IPFS_DISK_USAGE_PERCENT}
|
||||
- IPFS_EXPERIMENTAL_ACCELERATEDDHTCLIENT=${IPFS_EXPERIMENTAL_ACCELERATEDDHTCLIENT}
|
||||
- IPFS_EXPERIMENTAL_FILESTOREENABLED=${IPFS_EXPERIMENTAL_FILESTOREENABLED}
|
||||
- IPFS_EXPERIMENTAL_GRAPHSYNCENABLED=${IPFS_EXPERIMENTAL_GRAPHSYNCENABLED}
|
||||
- IPFS_EXPERIMENTAL_LIBP2PSTREAMMOUNTING=${IPFS_EXPERIMENTAL_LIBP2PSTREAMMOUNTING}
|
||||
- IPFS_EXPERIMENTAL_P2PHTTPPROXY=${IPFS_EXPERIMENTAL_P2PHTTPPROXY}
|
||||
- IPFS_EXPERIMENTAL_STRATEGICPROVIDING=${IPFS_EXPERIMENTAL_STRATEGICPROVIDING}
|
||||
- IPFS_EXPERIMENTAL_URLSTOREENABLED=${IPFS_EXPERIMENTAL_URLSTOREENABLED}
|
||||
- IPFS_IPNS_REPUBLISHPERIOD=${IPFS_IPNS_REPUBLISHPERIOD}
|
||||
- IPFS_IPNS_RECORDLIFETIME=${IPFS_IPNS_RECORDLIFETIME}
|
||||
- IPFS_IPNS_USEPUBSUB=${IPFS_IPNS_USEPUBSUB}
|
||||
- IPFS_LOGGING=${IPFS_LOGGING}
|
||||
- IPFS_PROFILE=${IPFS_PROFILE}
|
||||
- IPFS_PUBSUB_ENABLE=${IPFS_PUBSUB_ENABLE}
|
||||
- IPFS_PUBSUB_ROUTER=${IPFS_PUBSUB_ROUTER}
|
||||
- IPFS_ROUTING_TYPE=${IPFS_ROUTING_TYPE}
|
||||
- IPFS_SWARM_CONNMGR_HIGHWATER=${IPFS_SWARM_CONNMGR_HIGHWATER}
|
||||
- IPFS_SWARM_CONNMGR_LOWWATER=${IPFS_SWARM_CONNMGR_LOWWATER}
|
||||
image: ${DOCKER_REPOSITORY}/ipfs:${DOCKER_IMAGE_TAG}
|
||||
labels:
|
||||
- SERVICE_4001_CHECK_TCP=true
|
||||
@@ -35,13 +62,13 @@ services:
|
||||
- 4001
|
||||
- 5001/tcp
|
||||
- 8080/tcp
|
||||
restart: always
|
||||
ulimits:
|
||||
nofile:
|
||||
soft: 65536
|
||||
hard: 65536
|
||||
volumes:
|
||||
- ipfs:/data/ipfs:delegated
|
||||
restart: always
|
||||
|
||||
volumes:
|
||||
ipfs:
|
||||
|
||||
+3
-3
@@ -1,4 +1,4 @@
|
||||
node ?= node/node
|
||||
node ?= node/node node/portainer
|
||||
ENV_VARS += DOCKER_HOST_IFACE DOCKER_HOST_INET4 DOCKER_INTERNAL_DOCKER_HOST IPFS_PROFILE
|
||||
IPFS_PROFILE ?= $(if $(filter-out amd64 x86_64,$(PROCESSOR_ARCHITECTURE)),lowpower,server)
|
||||
|
||||
@@ -16,8 +16,8 @@ node-%: stack-node-%;
|
||||
# target node-ssl-certs: Create ${DOMAIN}.key.pem and ${DOMAIN}.crt.pem files
|
||||
.PHONY: node-ssl-certs
|
||||
node-ssl-certs:
|
||||
docker run --rm --mount source=$(COMPOSE_PROJECT_NAME_NODE)_ssl-certs,target=/certs alpine [ -f /certs/$(DOMAIN).crt.pem -a -f /certs/$(DOMAIN).key.pem ] \
|
||||
|| $(RUN) docker run --rm -e DOMAIN=$(DOMAIN) --mount source=$(COMPOSE_PROJECT_NAME_NODE)_ssl-certs,target=/certs alpine sh -c "\
|
||||
docker run --rm --mount source=$(NODE_COMPOSE_PROJECT_NAME)_ssl-certs,target=/certs alpine [ -f /certs/$(DOMAIN).crt.pem -a -f /certs/$(DOMAIN).key.pem ] \
|
||||
|| $(RUN) docker run --rm -e DOMAIN=$(DOMAIN) --mount source=$(NODE_COMPOSE_PROJECT_NAME)_ssl-certs,target=/certs alpine sh -c "\
|
||||
apk --no-cache add openssl \
|
||||
&& { [ -f /certs/${DOMAIN}.key.pem ] || openssl genrsa -out /certs/${DOMAIN}.key.pem 2048; } \
|
||||
&& openssl req -key /certs/${DOMAIN}.key.pem -out /certs/${DOMAIN}.crt.pem \
|
||||
|
||||
@@ -1,7 +1,4 @@
|
||||
CONSUL_ACL_TOKENS_MASTER=01234567-89AB-CDEF-0123-456789ABCDEF
|
||||
CONSUL_CONSUL_HTTP_TOKEN=01234567-89AB-CDEF-0123-456789ABCDEF
|
||||
CONSUL_SERVICE_8500_TAGS=urlprefix-consul.${DOMAIN}/
|
||||
FABIO_CONSUL_HTTP_TOKEN=01234567-89AB-CDEF-0123-456789ABCDEF
|
||||
FABIO_SERVICE_9998_TAGS=urlprefix-fabio.${DOMAIN}/
|
||||
PORTAINER_SERVICE_9000_TAGS=urlprefix-portainer.${DOMAIN}/
|
||||
REGISTRATOR_CONSUL_HTTP_TOKEN=01234567-89AB-CDEF-0123-456789ABCDEF
|
||||
NODE_CONSUL_ACL_TOKENS_MASTER=01234567-89AB-CDEF-0123-456789ABCDEF
|
||||
NODE_CONSUL_HTTP_TOKEN=01234567-89AB-CDEF-0123-456789ABCDEF
|
||||
NODE_CONSUL_SERVICE_8500_TAGS=urlprefix-consul.${DOMAIN}/
|
||||
NODE_FABIO_SERVICE_9998_TAGS=urlprefix-fabio.${DOMAIN}/
|
||||
|
||||
@@ -1,2 +1,2 @@
|
||||
CADVISOR_EXPORTER_SERVICE_8080_TAGS=urlprefix-cadvisor-exporter.${DOMAIN}/
|
||||
NODE_CADVISOR_EXPORTER_SERVICE_8080_TAGS=urlprefix-cadvisor-exporter.${DOMAIN}/
|
||||
NODE_EXPORTER_SERVICE_9100_TAGS=urlprefix-node-exporter.${DOMAIN}/
|
||||
|
||||
@@ -2,13 +2,13 @@ version: '3.6'
|
||||
|
||||
services:
|
||||
cadvisor-exporter:
|
||||
container_name: ${COMPOSE_PROJECT_NAME_NODE}_cadvisor-exporter
|
||||
container_name: ${NODE_COMPOSE_PROJECT_NAME}_cadvisor-exporter
|
||||
hostname: ${HOSTNAME}
|
||||
image: google/cadvisor:latest
|
||||
labels:
|
||||
- SERVICE_8080_CHECK_TCP=true
|
||||
- SERVICE_8080_NAME=${COMPOSE_SERVICE_NAME_NODE}-cadvisor-exporter:8080
|
||||
- SERVICE_8080_TAGS=${CADVISOR_SERVICE_EXPORTER_8080_TAGS}
|
||||
- SERVICE_8080_NAME=${NODE_COMPOSE_SERVICE_NAME}-cadvisor-exporter:8080
|
||||
- SERVICE_8080_TAGS=${NODE_CADVISOR_EXPORTER_SERVICE_8080_TAGS}
|
||||
- SERVICE_9200_IGNORE=true
|
||||
networks:
|
||||
- public
|
||||
@@ -26,13 +26,13 @@ services:
|
||||
- "^/(sys|proc|dev|host|etc|rootfs/var/lib/docker/containers|rootfs/var/lib/docker/overlay2|rootfs/run/docker/netns|rootfs/var/lib/docker/aufs)($$|/)"
|
||||
- '--path.procfs=/host/proc'
|
||||
- '--path.sysfs=/host/sys'
|
||||
container_name: ${COMPOSE_PROJECT_NAME_NODE}_node-exporter
|
||||
container_name: ${NODE_COMPOSE_PROJECT_NAME}_node-exporter
|
||||
hostname: ${HOSTNAME}
|
||||
image: prom/node-exporter:latest
|
||||
labels:
|
||||
- SERVICE_9100_CHECK_TCP=true
|
||||
- SERVICE_9100_NAME=${COMPOSE_SERVICE_NAME_NODE}-node-exporter:9100
|
||||
- SERVICE_9100_TAGS=${SERVICE_NODE_EXPORTER_HTTP_TAGS}
|
||||
- SERVICE_9100_NAME=${NODE_COMPOSE_SERVICE_NAME}-node-exporter:9100
|
||||
- SERVICE_9100_TAGS=${NODE_EXPORTER_SERVICE_9100_TAGS}
|
||||
networks:
|
||||
- public
|
||||
ports:
|
||||
|
||||
@@ -1,4 +1,9 @@
|
||||
IPFS_ADDRESSES_API_DOMAIN_NODE=${DOCKER_NETWORK_PUBLIC}
|
||||
IPFS_LOGGING_NODE=error
|
||||
IPFS_SERVICE_8080_CHECK_TCP_NODE=/ipfs/QmYwAPJzv5CZsnA625s3Xf2nemtYgPpHdWEz79ojWnPbdG/readme
|
||||
IPFS_SERVICE_8080_TAGS_NODE=urlprefix-ipfs.${DOMAIN}/
|
||||
NODE_IPFS_ADDRESSES_API_DOMAIN=${DOCKER_NETWORK_PUBLIC}
|
||||
NODE_IPFS_ADDRESSES_GATEWAY_INET4=0.0.0.0
|
||||
NODE_IPFS_IPNS_USEPUBSUB=true
|
||||
NODE_IPFS_LOGGING=error
|
||||
NODE_IPFS_PUBSUB_ENABLE=true
|
||||
NODE_IPFS_PUBSUB_ROUTER=gossipsub
|
||||
NODE_IPFS_ROUTING_TYPE=dht
|
||||
NODE_IPFS_SERVICE_8080_CHECK_TCP=/ipfs/QmYwAPJzv5CZsnA625s3Xf2nemtYgPpHdWEz79ojWnPbdG/readme
|
||||
NODE_IPFS_SERVICE_8080_TAGS=urlprefix-ipfs.${DOMAIN}/
|
||||
|
||||
+42
-15
@@ -8,25 +8,52 @@ services:
|
||||
- IPFS_VERSION=0.13.0
|
||||
context: ../..
|
||||
dockerfile: docker/ipfs/Dockerfile
|
||||
command: daemon --migrate=true
|
||||
container_name: ${COMPOSE_PROJECT_NAME_NODE}_ipfs
|
||||
command: daemon --agent-version-suffix=${NODE_COMPOSE_PROJECT_NAME} --enable-gc --migrate
|
||||
container_name: ${NODE_COMPOSE_PROJECT_NAME}_ipfs
|
||||
cpus: 0.5
|
||||
environment:
|
||||
- IPFS_ADDRESSES_API=${IPFS_ADDRESSES_API_NODE}
|
||||
- IPFS_ADDRESSES_API_DOMAIN=${IPFS_ADDRESSES_API_DOMAIN_NODE}
|
||||
- IPFS_ADDRESSES_API_INET4=${IPFS_ADDRESSES_API_INET4_NODE}
|
||||
- IPFS_ADDRESSES_API_PORT=${IPFS_ADDRESSES_API_PORT_NODE}
|
||||
- IPFS_LOGGING=${IPFS_LOGGING_NODE}
|
||||
- IPFS_ADDRESSES_API=${NODE_IPFS_ADDRESSES_API}
|
||||
- IPFS_ADDRESSES_API_DOMAIN=${NODE_IPFS_ADDRESSES_API_DOMAIN}
|
||||
- IPFS_ADDRESSES_API_INET4=${NODE_IPFS_ADDRESSES_API_INET4}
|
||||
- IPFS_ADDRESSES_API_PORT=${NODE_IPFS_ADDRESSES_API_PORT}
|
||||
- IPFS_ADDRESSES_GATEWAY=${NODE_IPFS_ADDRESSES_GATEWAY}
|
||||
- IPFS_ADDRESSES_GATEWAY_DOMAIN=${NODE_IPFS_ADDRESSES_GATEWAY_DOMAIN}
|
||||
- IPFS_ADDRESSES_GATEWAY_INET4=${NODE_IPFS_ADDRESSES_GATEWAY_INET4}
|
||||
- IPFS_ADDRESSES_GATEWAY_PORT=${NODE_IPFS_ADDRESSES_GATEWAY_PORT}
|
||||
- IPFS_API_HTTPHEADERS=${NODE_IPFS_API_HTTPHEADERS}
|
||||
- IPFS_API_HTTPHEADERS_ACA_CREDENTIALS=${NODE_IPFS_API_HTTPHEADERS_ACA_CREDENTIALS}
|
||||
- IPFS_API_HTTPHEADERS_ACA_HEADERS=${NODE_IPFS_API_HTTPHEADERS_ACA_HEADERS}
|
||||
- IPFS_API_HTTPHEADERS_ACA_METHODS=${NODE_IPFS_API_HTTPHEADERS_ACA_METHODS}
|
||||
- IPFS_API_HTTPHEADERS_ACA_ORIGIN=${NODE_IPFS_API_HTTPHEADERS_ACA_ORIGIN}
|
||||
- IPFS_BOOTSTRAP=${NODE_IPFS_BOOTSTRAP}
|
||||
- IPFS_DATASTORE_GCPERIOD=${NODE_IPFS_DATASTORE_GCPERIOD}
|
||||
- IPFS_DISK_USAGE_PERCENT=${NODE_IPFS_DISK_USAGE_PERCENT}
|
||||
- IPFS_EXPERIMENTAL_ACCELERATEDDHTCLIENT=${NODE_IPFS_EXPERIMENTAL_ACCELERATEDDHTCLIENT}
|
||||
- IPFS_EXPERIMENTAL_FILESTOREENABLED=${NODE_IPFS_EXPERIMENTAL_FILESTOREENABLED}
|
||||
- IPFS_EXPERIMENTAL_GRAPHSYNCENABLED=${NODE_IPFS_EXPERIMENTAL_GRAPHSYNCENABLED}
|
||||
- IPFS_EXPERIMENTAL_LIBP2PSTREAMMOUNTING=${NODE_IPFS_EXPERIMENTAL_LIBP2PSTREAMMOUNTING}
|
||||
- IPFS_EXPERIMENTAL_P2PHTTPPROXY=${NODE_IPFS_EXPERIMENTAL_P2PHTTPPROXY}
|
||||
- IPFS_EXPERIMENTAL_STRATEGICPROVIDING=${NODE_IPFS_EXPERIMENTAL_STRATEGICPROVIDING}
|
||||
- IPFS_EXPERIMENTAL_URLSTOREENABLED=${NODE_IPFS_EXPERIMENTAL_URLSTOREENABLED}
|
||||
- IPFS_IPNS_REPUBLISHPERIOD=${NODE_IPFS_IPNS_REPUBLISHPERIOD}
|
||||
- IPFS_IPNS_RECORDLIFETIME=${NODE_IPFS_IPNS_RECORDLIFETIME}
|
||||
- IPFS_IPNS_USEPUBSUB=${NODE_IPFS_IPNS_USEPUBSUB}
|
||||
- IPFS_LOGGING=${NODE_IPFS_LOGGING}
|
||||
- IPFS_PROFILE=${IPFS_PROFILE}
|
||||
image: ${DOCKER_REPOSITORY_NODE}/ipfs:${DOCKER_IMAGE_TAG}
|
||||
- IPFS_PUBSUB_ENABLE=${NODE_IPFS_PUBSUB_ENABLE}
|
||||
- IPFS_PUBSUB_ROUTER=${NODE_IPFS_PUBSUB_ROUTER}
|
||||
- IPFS_ROUTING_TYPE=${NODE_IPFS_ROUTING_TYPE}
|
||||
- IPFS_SWARM_CONNMGR_HIGHWATER=${NODE_IPFS_SWARM_CONNMGR_HIGHWATER}
|
||||
- IPFS_SWARM_CONNMGR_LOWWATER=${NODE_IPFS_SWARM_CONNMGR_LOWWATER}
|
||||
image: ${NODE_DOCKER_REPOSITORY}/ipfs:${DOCKER_IMAGE_TAG}
|
||||
labels:
|
||||
- SERVICE_4001_CHECK_TCP=true
|
||||
- SERVICE_4001_NAME=${COMPOSE_SERVICE_NAME_NODE}-ipfs:4001
|
||||
- SERVICE_4001_NAME=${NODE_COMPOSE_SERVICE_NAME}-ipfs:4001
|
||||
- SERVICE_5001_CHECK_TCP=true
|
||||
- SERVICE_5001_NAME=${COMPOSE_SERVICE_NAME_NODE}-ipfs:5001
|
||||
- SERVICE_8080_CHECK_HTTP=${IPFS_SERVICE_8080_CHECK_TCP_NODE}
|
||||
- SERVICE_8080_NAME=${COMPOSE_SERVICE_NAME_NODE}-ipfs:8080
|
||||
- SERVICE_8080_TAGS=${IPFS_SERVICE_8080_TAGS_NODE}
|
||||
- SERVICE_5001_NAME=${NODE_COMPOSE_SERVICE_NAME}-ipfs:5001
|
||||
- SERVICE_8080_CHECK_HTTP=${NODE_IPFS_SERVICE_8080_CHECK_TCP}
|
||||
- SERVICE_8080_NAME=${NODE_COMPOSE_SERVICE_NAME}-ipfs:8080
|
||||
- SERVICE_8080_TAGS=${NODE_IPFS_SERVICE_8080_TAGS}
|
||||
- SERVICE_8081_IGNORE=true
|
||||
networks:
|
||||
- public
|
||||
@@ -34,17 +61,17 @@ services:
|
||||
- 4001:4001
|
||||
- 5001/tcp
|
||||
- 8080/tcp
|
||||
restart: always
|
||||
ulimits:
|
||||
nofile:
|
||||
soft: 65536
|
||||
hard: 65536
|
||||
volumes:
|
||||
- ipfs:/data/ipfs:delegated
|
||||
restart: always
|
||||
|
||||
volumes:
|
||||
ipfs:
|
||||
name: ${COMPOSE_PROJECT_NAME_NODE}_ipfs
|
||||
name: ${NODE_COMPOSE_PROJECT_NAME}_ipfs
|
||||
|
||||
networks:
|
||||
public:
|
||||
|
||||
+19
-19
@@ -8,20 +8,20 @@ services:
|
||||
- DOCKER_BUILD_DIR=docker/consul
|
||||
context: ../..
|
||||
dockerfile: docker/consul/Dockerfile
|
||||
container_name: ${COMPOSE_PROJECT_NAME_NODE}_consul
|
||||
image: ${DOCKER_REPOSITORY_NODE}/consul:${DOCKER_IMAGE_TAG}
|
||||
container_name: ${NODE_COMPOSE_PROJECT_NAME}_consul
|
||||
image: ${NODE_DOCKER_REPOSITORY}/consul:${DOCKER_IMAGE_TAG}
|
||||
environment:
|
||||
CONSUL_BIND_INTERFACE: '${DOCKER_HOST_IFACE}'
|
||||
CONSUL_CLIENT_INTERFACE: '${DOCKER_HOST_IFACE}'
|
||||
CONSUL_HTTP_TOKEN: '${CONSUL_CONSUL_HTTP_TOKEN}'
|
||||
CONSUL_HTTP_TOKEN: '${NODE_CONSUL_HTTP_TOKEN}'
|
||||
CONSUL_LOCAL_CONFIG: '{ "log_level": "warn"
|
||||
, "enable_script_checks": true
|
||||
, "acl": { "enabled": true
|
||||
, "default_policy": "deny"
|
||||
, "down_policy": "extend-cache"
|
||||
, "enable_token_persistence": true
|
||||
, "tokens": { "initial_management": "$CONSUL_ACL_TOKENS_MASTER"
|
||||
, "agent": "$CONSUL_CONSUL_HTTP_TOKEN"
|
||||
, "tokens": { "initial_management": "${NODE_CONSUL_ACL_TOKENS_MASTER}"
|
||||
, "agent": "${NODE_CONSUL_HTTP_TOKEN}"
|
||||
}
|
||||
}
|
||||
}'
|
||||
@@ -31,8 +31,8 @@ services:
|
||||
- SERVICE_8301_IGNORE=true
|
||||
- SERVICE_8302_IGNORE=true
|
||||
- SERVICE_8500_CHECK_HTTP=/v1/health/service/consul
|
||||
- SERVICE_8500_NAME=${COMPOSE_SERVICE_NAME_NODE}-consul:8500
|
||||
- SERVICE_8500_TAGS=${CONSUL_SERVICE_8500_TAGS}
|
||||
- SERVICE_8500_NAME=${NODE_COMPOSE_SERVICE_NAME}-consul:8500
|
||||
- SERVICE_8500_TAGS=${NODE_CONSUL_SERVICE_8500_TAGS}
|
||||
- SERVICE_8600_IGNORE=true
|
||||
- SERVICE_ADDRESS=${DOCKER_HOST_INET4}
|
||||
- SERVICE_CHECK_SCRIPT=docker-healthcheck ${DOCKER_HOST_INET4}
|
||||
@@ -51,9 +51,9 @@ services:
|
||||
- PROCESSOR_ARCHITECTURE=${PROCESSOR_ARCHITECTURE}
|
||||
context: ../..
|
||||
dockerfile: docker/fabio/Dockerfile
|
||||
container_name: ${COMPOSE_PROJECT_NAME_NODE}_fabio
|
||||
image: ${DOCKER_REPOSITORY_NODE}/fabio:${DOCKER_IMAGE_TAG}
|
||||
command: -registry.backend "consul" -registry.consul.addr "consul:8500" -registry.consul.token "$FABIO_CONSUL_HTTP_TOKEN" -proxy.addr ":80,:443;cs=local" -proxy.cs "cs=local;type=file;cert=/certs/${DOMAIN}.crt.pem;key=/certs/${DOMAIN}.key.pem"
|
||||
container_name: ${NODE_COMPOSE_PROJECT_NAME}_fabio
|
||||
image: ${NODE_DOCKER_REPOSITORY}/fabio:${DOCKER_IMAGE_TAG}
|
||||
command: -registry.backend "consul" -registry.consul.addr "consul:8500" -registry.consul.token "${NODE_CONSUL_HTTP_TOKEN}" -proxy.addr ":80,:443;cs=local" -proxy.cs "cs=local;type=file;cert=/certs/${DOMAIN}.crt.pem;key=/certs/${DOMAIN}.key.pem"
|
||||
depends_on:
|
||||
- consul
|
||||
extra_hosts:
|
||||
@@ -61,12 +61,12 @@ services:
|
||||
hostname: ${HOSTNAME}
|
||||
labels:
|
||||
- SERVICE_80_CHECK_TCP=true
|
||||
- SERVICE_80_NAME=${COMPOSE_SERVICE_NAME_NODE}-fabio:80
|
||||
- SERVICE_80_NAME=${NODE_COMPOSE_SERVICE_NAME}-fabio:80
|
||||
- SERVICE_443_CHECK_TCP=true
|
||||
- SERVICE_443_NAME=${COMPOSE_SERVICE_NAME_NODE}-fabio:443
|
||||
- SERVICE_443_NAME=${NODE_COMPOSE_SERVICE_NAME}-fabio:443
|
||||
- SERVICE_9998_CHECK_HTTP=/routes
|
||||
- SERVICE_9998_NAME=${COMPOSE_SERVICE_NAME_NODE}-fabio:9998
|
||||
- SERVICE_9998_TAGS=${FABIO_SERVICE_9998_TAGS}
|
||||
- SERVICE_9998_NAME=${NODE_COMPOSE_SERVICE_NAME}-fabio:9998
|
||||
- SERVICE_9998_TAGS=${NODE_FABIO_SERVICE_9998_TAGS}
|
||||
- SERVICE_9999_IGNORE=true
|
||||
ports:
|
||||
- 80:80/tcp
|
||||
@@ -85,13 +85,13 @@ services:
|
||||
- GIT_AUTHOR_EMAIL=${GIT_AUTHOR_EMAIL}
|
||||
context: ../..
|
||||
dockerfile: docker/registrator/Dockerfile
|
||||
container_name: ${COMPOSE_PROJECT_NAME_NODE}_registrator
|
||||
image: ${DOCKER_REPOSITORY_NODE}/registrator:${DOCKER_IMAGE_TAG}
|
||||
container_name: ${NODE_COMPOSE_PROJECT_NAME}_registrator
|
||||
image: ${NODE_DOCKER_REPOSITORY}/registrator:${DOCKER_IMAGE_TAG}
|
||||
command: -internal -cleanup -deregister always -resync=30 -useIpFromNetwork "${DOCKER_NETWORK_PUBLIC}" -useIpFromLabel SERVICE_ADDRESS consul://consul:8500
|
||||
depends_on:
|
||||
- consul
|
||||
environment:
|
||||
- CONSUL_HTTP_TOKEN=${REGISTRATOR_CONSUL_HTTP_TOKEN}
|
||||
- CONSUL_HTTP_TOKEN=${NODE_CONSUL_HTTP_TOKEN}
|
||||
extra_hosts:
|
||||
- consul:${DOCKER_INTERNAL_DOCKER_HOST}
|
||||
hostname: ${HOSTNAME}
|
||||
@@ -102,10 +102,10 @@ services:
|
||||
|
||||
volumes:
|
||||
consul:
|
||||
name: ${COMPOSE_PROJECT_NAME_NODE}_consul
|
||||
name: ${NODE_COMPOSE_PROJECT_NAME}_consul
|
||||
ssl-certs:
|
||||
external: true
|
||||
name: ${COMPOSE_PROJECT_NAME_NODE}_ssl-certs
|
||||
name: ${NODE_COMPOSE_PROJECT_NAME}_ssl-certs
|
||||
|
||||
networks:
|
||||
public:
|
||||
|
||||
@@ -8,8 +8,8 @@ services:
|
||||
context: ../..
|
||||
dockerfile: docker/pdns-server/Dockerfile
|
||||
command: /usr/local/sbin/pdns_recursor --local-address='192.168.0.1:53' --allow-from='127.0.0.0/8, 192.168.1.0/24, 172.16.0.0/12'
|
||||
container_name: ${COMPOSE_PROJECT_NAME_NODE}_pdns-recursor
|
||||
container_name: ${NODE_COMPOSE_PROJECT_NAME}_pdns-recursor
|
||||
hostname: ${HOSTNAME}
|
||||
image: ${DOCKER_REPOSITORY_NODE}/pdns-recursor:${DOCKER_IMAGE_TAG}
|
||||
image: ${NODE_DOCKER_REPOSITORY}/pdns-recursor:${DOCKER_IMAGE_TAG}
|
||||
network_mode: host
|
||||
restart: always
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
NODE_PORTAINER_SERVICE_9000_TAGS=urlprefix-portainer.${DOMAIN}/
|
||||
@@ -0,0 +1,28 @@
|
||||
version: '3.6'
|
||||
|
||||
services:
|
||||
portainer:
|
||||
image: portainer/portainer:latest
|
||||
labels:
|
||||
- SERVICE_8000_IGNORE=true
|
||||
- SERVICE_9000_CHECK_HTTP=/
|
||||
- SERVICE_9000_NAME=${NODE_COMPOSE_SERVICE_NAME}-portainer:9000
|
||||
- SERVICE_9000_TAGS=${NODE_PORTAINER_SERVICE_9000_TAGS}
|
||||
networks:
|
||||
- public
|
||||
ports:
|
||||
- 8000
|
||||
- 9000
|
||||
restart: always
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- portainer:/data
|
||||
|
||||
volumes:
|
||||
portainer:
|
||||
name: ${NODE_COMPOSE_PROJECT_NAME}_portainer
|
||||
|
||||
networks:
|
||||
public:
|
||||
external: true
|
||||
name: ${DOCKER_NETWORK_PUBLIC}
|
||||
@@ -1,3 +1,3 @@
|
||||
VSFTPD_S3_AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
|
||||
VSFTPD_S3_AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
|
||||
VSFTPD_S3_FTPD_USERS=ftpuser::ftppass::ftpbucket
|
||||
NODE_VSFTPD_S3_AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
|
||||
NODE_VSFTPD_S3_AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
|
||||
NODE_VSFTPD_S3_FTPD_USERS=ftpuser::ftppass::ftpbucket
|
||||
|
||||
@@ -9,28 +9,28 @@ services:
|
||||
dockerfile: docker/vsftpd-s3/Dockerfile
|
||||
cap_add:
|
||||
- sys_admin
|
||||
container_name: ${COMPOSE_PROJECT_NAME_NODE}_vsftpd-s3
|
||||
container_name: ${NODE_COMPOSE_PROJECT_NAME}_vsftpd-s3
|
||||
devices:
|
||||
- /dev/fuse
|
||||
environment:
|
||||
- AWS_ACCESS_KEY_ID=${VSFTPD_S3_AWS_ACCESS_KEY_ID}
|
||||
- AWS_SECRET_ACCESS_KEY=${VSFTPD_S3_AWS_SECRET_ACCESS_KEY}
|
||||
- DIR_REMOTE=${VSFTPD_S3_DIR_REMOTE}
|
||||
- FTP_HOST=${VSFTPD_S3_FTP_HOST}
|
||||
- FTP_PASS=${VSFTPD_S3_FTP_PASS}
|
||||
- FTP_SYNC=${VSFTPD_S3_FTP_SYNC}
|
||||
- FTP_USER=${VSFTPD_S3_FTP_USER}
|
||||
- FTPD_USER=${VSFTPD_S3_FTPD_USER}
|
||||
- FTPD_USERS=${VSFTPD_S3_FTPD_USERS}
|
||||
- PASV_MAX_PORT=${VSFTPD_S3_PASV_MAX_PORT}
|
||||
- PASV_MIN_PORT=${VSFTPD_S3_PASV_MIN_PORT}
|
||||
- AWS_ACCESS_KEY_ID=${NODE_VSFTPD_S3_AWS_ACCESS_KEY_ID}
|
||||
- AWS_SECRET_ACCESS_KEY=${NODE_VSFTPD_S3_AWS_SECRET_ACCESS_KEY}
|
||||
- DIR_REMOTE=${NODE_VSFTPD_S3_DIR_REMOTE}
|
||||
- FTP_HOST=${NODE_VSFTPD_S3_FTP_HOST}
|
||||
- FTP_PASS=${NODE_VSFTPD_S3_FTP_PASS}
|
||||
- FTP_SYNC=${NODE_VSFTPD_S3_FTP_SYNC}
|
||||
- FTP_USER=${NODE_VSFTPD_S3_FTP_USER}
|
||||
- FTPD_USER=${NODE_VSFTPD_S3_FTPD_USER}
|
||||
- FTPD_USERS=${NODE_VSFTPD_S3_FTPD_USERS}
|
||||
- PASV_MAX_PORT=${NODE_VSFTPD_S3_PASV_MAX_PORT}
|
||||
- PASV_MIN_PORT=${NODE_VSFTPD_S3_PASV_MIN_PORT}
|
||||
hostname: ${HOSTNAME}
|
||||
image: ${DOCKER_REPOSITORY_NODE}/vsftpd-s3:${DOCKER_IMAGE_TAG}
|
||||
image: ${NODE_DOCKER_REPOSITORY}/vsftpd-s3:${DOCKER_IMAGE_TAG}
|
||||
labels:
|
||||
- SERVICE_21_CHECK_TCP=true
|
||||
- SERVICE_21_NAME=${COMPOSE_SERVICE_NAME_NODE}-vsftpd-s3:21
|
||||
- SERVICE_21_NAME=${NODE_COMPOSE_SERVICE_NAME}-vsftpd-s3:21
|
||||
- SERVICE_22_CHECK_TCP=true
|
||||
- SERVICE_22_NAME=${COMPOSE_SERVICE_NAME_NODE}-vsftpd-s3:22
|
||||
- SERVICE_22_NAME=${NODE_COMPOSE_SERVICE_NAME}-vsftpd-s3:22
|
||||
- SERVICE_65000_IGNORE=true
|
||||
security_opt:
|
||||
- apparmor:unconfined
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
PORTAINER_SERVICE_9000_TAGS=urlprefix-portainer.${APP_DOMAIN}/
|
||||
@@ -0,0 +1,7 @@
|
||||
IPFS_API_HTTPHEADERS_ACA_CREDENTIALS=["true"]
|
||||
IPFS_API_HTTPHEADERS_ACA_METHODS=["PUT", "GET", "POST"]
|
||||
IPFS_API_HTTPHEADERS_ACA_ORIGIN=["http://astroport", "https://astroport.com", "https://qo-op.com", "https://tube.copylaradio.com" ]
|
||||
IPFS_EXPERIMENTAL_LIBP2PSTREAMMOUNTING=true
|
||||
IPFS_EXPERIMENTAL_P2PHTTPPROXY=true
|
||||
IPFS_SWARM_CONNMGR_HIGHWATER=0
|
||||
IPFS_SWARM_CONNMGR_LOWWATER=0
|
||||
Reference in New Issue
Block a user