nutmix/docker-compose.yml at master · lescuer97/nutmix · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
services:
  traefik:
    image: "traefik:v3.6.4"
    container_name: "traefik"
    restart: unless-stopped
    ports:
      - 80:80
      - "443:443/tcp"   # For normal HTTPS
      - "443:443/udp"   # Required for HTTP/3 (QUIC)
    command:
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.websecure.address=:443"
      # Enable HTTP3 (QUIC)
      - "--entrypoints.websecure.http3=true"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
      - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
      - "--certificatesresolvers.selfhostedservices.acme.tlschallenge=true"
      - "--certificatesresolvers.selfhostedservices.acme.email=${LE_EMAIL_ADDRESS}"
      - "--certificatesresolvers.selfhostedservices.acme.storage=/letsencrypt/acme.json"
    volumes:
      - "./letsencrypt:/letsencrypt"
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
    depends_on:
      - db
      - mint
  db:
    image: postgres:16.8
    restart: always
    ports:
      - 127.0.0.1:5432:5432
    volumes:
      - db:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 30s
      timeout: 30s
      retries: 3

  mint:
    env_file:
      - path: ".env"
        required: true
    image: nutmixbtc/nutmix:latest
    restart: on-failure:10
    depends_on:
      - db
    labels:
      - "traefik.enable=true"
      - "traefik.http.middlewares.mint.headers.browserXSSFilter=true"
      - "traefik.http.middlewares.mint.headers.contentTypeNosniff=true"
      - "traefik.http.middlewares.mint.headers.stsIncludeSubdomains=true"
      - "traefik.http.middlewares.mint.headers.stsPreload=true"
      - "traefik.http.middlewares.mint.headers.stsSeconds=155520011"
      - "traefik.http.middlewares.mint_redirect.redirectregex.permanent=true"
      - "traefik.http.middlewares.mint_redirect.redirectregex.regex=https://(.*)/.well-known/(card|cal)dav"
      - "traefik.http.middlewares.mint_redirect.redirectregex.replacement=https://$${1}/remote.php/dav/"
      - "traefik.http.routers.mint.entrypoints=websecure"
      - "traefik.http.routers.mint.middlewares=mint,mint_redirect,mint-https"
      - "traefik.http.routers.mint.rule=Host(`${MINT_HOSTNAME}`)"
      - "traefik.http.routers.mint.tls.certresolver=selfhostedservices"
      - "traefik.http.services.mint.loadbalancer.server.port=8081"
      - "traefik.http.middlewares.mint.headers.customRequestHeaders.X-Forwarded-Proto=https"
      - "traefik.http.middlewares.mint-https.redirectscheme.scheme=https"
      - "traefik.http.middlewares.mint-ratelimit1.ratelimit.average=30"
      - "traefik.http.middlewares.mint-ratelimit2.ratelimit.burst=60"
      - "traefik.http.routers.mint-http.entrypoints=web"
      - "traefik.http.routers.mint-http.rule=Host(`${MINT_HOSTNAME}`)"
      - "traefik.http.routers.mint-http.middlewares=mint-https@docker"


    volumes:
      - /var/log/nutmix:/root/.config/nutmix
      - ${HOME}/.config/nutmix:/root/.config/nutmix

  # keycloak:
  #   image: quay.io/keycloak/keycloak:25.0.6
  #   command: start
  #   labels:
  #     - "traefik.enable=true"
  #     - "traefik.http.middlewares.keycloak.headers.browserXSSFilter=true"
  #     - "traefik.http.middlewares.keycloak.headers.contentTypeNosniff=true"
  #     - "traefik.http.middlewares.keycloak.headers.stsIncludeSubdomains=true"
  #     - "traefik.http.middlewares.keycloak.headers.stsPreload=true"
  #     - "traefik.http.middlewares.keycloak.headers.stsSeconds=155520011"
  #     - "traefik.http.middlewares.keycloak_redirect.redirectregex.permanent=true"
  #     - "traefik.http.routers.keycloak.entrypoints=websecure"
  #     - "traefik.http.routers.keycloak.middlewares=keycloak,keycloak_redirect,mint-https"
  #     - "traefik.http.routers.keycloak.rule=Host(`${KEYCLOAK_HOSTNAME}`)"
  #     - "traefik.http.routers.keycloak.tls.certresolver=selfhostedservices"
  #     - "traefik.http.services.keycloak.loadbalancer.server.port=8080"
  #     - "traefik.http.middlewares.keycloak.headers.customRequestHeaders.X-Forwarded-Proto=https"
  #     - "traefik.http.middlewares.keycloak-https.redirectscheme.scheme=https"
  #     - "traefik.http.middlewares.keycloak-ratelimit1.ratelimit.average=30"
  #     - "traefik.http.middlewares.keycloak-ratelimit2.ratelimit.burst=60"
  #     - "traefik.http.routers.keycloak-http.entrypoints=web"
  #     - "traefik.http.routers.keycloak-http.rule=Host(`${KEYCLOAK_HOSTNAME}`)"
  #     - "traefik.http.routers.keycloak-http.middlewares=keycloak-https@docker"
  #   environment:
  #     KC_HOSTNAME: ${KEYCLOAK_HOSTNAME}
  #     KC_HOSTNAME_PORT: ${KEYCLOAK_HOSTNAME_PORT}
  #     KC_HOSTNAME_STRICT_BACKCHANNEL: false
  #     KC_HTTP_ENABLED: true
  #     KC_HOSTNAME_STRICT_HTTPS: false
  #     KC_HEALTH_ENABLED: true
  #     KC_PROXY: "edge"
  #     KEYCLOAK_ADMIN: ${KEYCLOAK_ADMIN}
  #     KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
  #     KC_DB: postgres
  #     KC_DB_URL: jdbc:postgresql://keycloak_postgres/${KEYCLOAK_POSTGRES_DB}
  #     KC_DB_USERNAME: ${KEYCLOAK_POSTGRES_USER}
  #     KC_DB_PASSWORD: ${KEYCLOAK_POSTGRES_PASSWORD}
  #   restart: always
  #   depends_on:
  #     - keycloak_postgres
  #
  # keycloak_postgres:
  #   image: postgres:16.8
  #   volumes:
  #     - ${HOME}/.config/nutmix/keycloak_pq_data:/var/lib/postgresql/data
  #   environment:
  #     POSTGRES_DB: ${KEYCLOAK_POSTGRES_DB}
  #     POSTGRES_USER: ${KEYCLOAK_POSTGRES_USER}
  #     POSTGRES_PASSWORD: ${KEYCLOAK_POSTGRES_PASSWORD}
  #   healthcheck:
  #     test:
  #       [
  #         "CMD-SHELL",
  #         "pg_isready -U ${KEYCLOAK_POSTGRES_USER} -d ${KEYCLOAK_POSTGRES_DB}",
  #       ]
  #     interval: 20s
  #     timeout: 5s
  #     retries: 10

volumes:
  db:
    driver: local
  keycloak_pq_data:
    driver: local