1 Commits

Author SHA1 Message Date
renovate-bot 47a0399e4b Update fnsys/dockhand Docker tag to v1.0.26 2026-04-20 07:01:34 +00:00
15 changed files with 61 additions and 164 deletions
+53 -35
View File
@@ -1,53 +1,71 @@
# Vaultwarden Configuration - (Bitwarden-compatible) Password Manager
services:
vaultwarden_db:
# PostgreSQL Database Configuration
container_name: vaultwarden_db
image: docker.io/library/postgres:17.5
restart: unless-stopped
restart: unless-stopped # Auto-recover from crashes
# Database credentials
environment:
- POSTGRES_USER=${POSTGRES_USER}
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
- POSTGRES_DB=${POSTGRES_DB}
- POSTGRES_USER=${POSTGRES_USER} # Database username
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD} # Database password
- POSTGRES_DB=${POSTGRES_DB} # Database name
# Persistent storage configuration
volumes:
- ${APPDATA_PATH}/vaultwarden/db:/var/lib/postgresql/data
- ${APPDATA_PATH}/vaultwarden/db:/var/lib/postgresql/data # Database files
# Network configuration
ports:
- ${DB_PORT}:5432
- ${DB_PORT}:5432 # PostgreSQL default port
networks:
- backend
- backend # Connects to backend network
# Health monitoring
healthcheck:
test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
interval: 30s
timeout: 5s
retries: 5
start_period: 20s
test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"] # Connection check
interval: 30s # Check every 30 seconds
timeout: 5s # Maximum check duration
retries: 5 # Allow 5 failures before marking unhealthy
start_period: 20s # Initial grace period
vaultwarden_server:
container_name: vaultwarden_server
image: ghcr.io/dani-garcia/vaultwarden:1.34.1
restart: unless-stopped
# Container configuration
image: ghcr.io/dani-garcia/vaultwarden:1.34.1 # Official Vaultwarden image
restart: unless-stopped # Auto-restart on failure
depends_on:
vaultwarden_db:
condition: service_healthy
environment:
- PUID=${PUID}
- PGID=${PGID}
- TZ=${TZ}
- DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@vaultwarden_db:5432/${POSTGRES_DB}
- WEBSOCKET_ENABLED=${WEBSOCKET_ENABLED}
- LOG_FILE=/data/vaultwarden.log
# Uncomment and set these only on first run
# - DOMAIN=${DOMAIN}
# - SIGNUPS_ALLOWED=${SIGNUPS_ALLOWED}
# - ADMIN_TOKEN=${ADMIN_TOKEN}
volumes:
- ${APPDATA_PATH}/vaultwarden/data:/data
ports:
- ${SERVER_PORT}:80
networks:
- frontend
- backend
condition: service_healthy # Wait for healthy database
# Application settings
environment:
- PUID=${PUID} # User ID for file permissions
- PGID=${PGID} # Group ID for file permissions
- TZ=${TZ} # Timezone configuration
- DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@vaultwarden_db:5432/${POSTGRES_DB} # DB connection
- WEBSOCKET_ENABLED=${WEBSOCKET_ENABLED} # Real-time updates
- LOG_FILE=/data/vaultwarden.log # Log file location
# Uncomment and set these only on first run
# - DOMAIN=${DOMAIN} # Domain Name
# - SIGNUPS_ALLOWED=${SIGNUPS_ALLOWED} # User registration
# - ADMIN_TOKEN=${ADMIN_TOKEN} # Admin interface access token
# Persistent storage configuration
volumes:
- ${APPDATA_PATH}/vaultwarden/data:/data # Vault data storage
# Network configuration
ports:
- ${SERVER_PORT}:80 # Web interface port
networks:
- frontend # Connects to frontend network
- backend # Connects to backend network
# External network definitions
networks:
frontend:
external: true
external: true # Uses existing frontend network
backend:
external: true
external: true # Uses existing backend network
+1 -1
View File
@@ -1,7 +1,7 @@
services:
adminer:
container_name: adminer
image: docker.io/library/adminer:5.4.2@sha256:41898b976011fd87f2d3037366ad97f7d89fddfebc8aa8b3a7d77d0c465aa37b
image: docker.io/library/adminer:5.4.2@sha256:16a72c6140f64d00a3a9edf8d3d3b18a7b0a29ca31b0453378d9eb71f01f9e34
restart: unless-stopped
ports:
- ${PORT}:8080
+2 -2
View File
@@ -1,7 +1,7 @@
services:
dockhand_db:
container_name: dockhand_db
image: docker.io/library/postgres:18.3@sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4
image: docker.io/library/postgres:18.3@sha256:a9abf4275f9e99bff8e6aed712b3b7dfec9cac1341bba01c1ffdfce9ff9fc34a
restart: unless-stopped
environment:
- POSTGRES_USER=${POSTGRES_USER}
@@ -21,7 +21,7 @@ services:
dockhand:
container_name: dockhand
image: fnsys/dockhand:v1.0.27@sha256:8c2f62e215d257e3b17fd0d458d4fcd134f67c4ee495831b818004677ad57e3b
image: fnsys/dockhand:v1.0.26@sha256:5e54ccac0df8ca1548ebb8d15587ec141f3c503cd87561ce03a3d525e69bf0d3
restart: unless-stopped
depends_on:
dockhand_db:
+1 -1
View File
@@ -1,7 +1,7 @@
services:
forgejo:
container_name: forgejo
image: codeberg.org/forgejo/forgejo:15.0.1-rootless@sha256:4f4d168b4e792d0f73e5f4da0548f3b54b9c9d03fb85f277c97eb985cb9a290a
image: codeberg.org/forgejo/forgejo:14.0.3-rootless@sha256:3bde16a366e57f37c09599b77ceb83ed05b1934f8224072f8140bc66cf243608
restart: unless-stopped
user: ${PUID}:${PGID}
volumes:
+1 -1
View File
@@ -1,7 +1,7 @@
services:
gitea_runner:
container_name: gitea_runner
image: docker.io/gitea/act_runner:0.6.0@sha256:b2df7d04d17334ff8e741c32b0df099d5df046d96599cb330d4ed7c097cb087f
image: docker.io/gitea/act_runner:0.3.1@sha256:c2a169c5e99864c25e32527cef3d82203225e09558773022bf3dc164a2e6d762
restart: unless-stopped
environment:
CONFIG_FILE: /config.yml
+1 -1
View File
@@ -1,7 +1,7 @@
services:
hawser:
container_name: hawser
image: ghcr.io/finsys/hawser:0.2.41@sha256:53bb1e23fb302f337d70fe111affee5f30f476c56aeb33c6c8c1d510fdc4133c
image: ghcr.io/finsys/hawser:0.2.39@sha256:03c9f31205f7b5ee7aef55bf3058d050fe4ac8a745029c19107eaa0c34ef3422
restart: unless-stopped
environment:
- TOKEN=${TOKEN}
+1 -1
View File
@@ -1,7 +1,7 @@
services:
healthchecks:
container_name: healthchecks
image: ghcr.io/linuxserver/healthchecks:4.2.20260428@sha256:2973440afcdcf5884b334782a70b7a7c292595810ad3a162f0289d2e878f2c80
image: ghcr.io/linuxserver/healthchecks:4.1.20260323@sha256:9284fb75cc62aafebb01eceef41f1630cc5c97c25ea2e310083e9799f36836f3
restart: unless-stopped
environment:
- PUID=${PUID}
+1 -1
View File
@@ -1,7 +1,7 @@
services:
home-assistant:
container_name: home-assistant
image: ghcr.io/home-assistant/home-assistant:2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
image: ghcr.io/home-assistant/home-assistant:2026.4.0@sha256:7fbf6a5e006e889d7799476ad7646bd18e9dc73e8a4ccd9326b41798de6bb3bf
restart: unless-stopped
volumes:
- ${APPDATA_PATH}/home-assistant/config:/config
+1 -1
View File
@@ -1,7 +1,7 @@
services:
kiwix:
container_name: kiwix
image: ghcr.io/kiwix/kiwix-serve:3.8.2@sha256:0b6541355b250c6b45d2d7725e88f22f1d6a0f45ad9480d9c0bd4bc58436a12f
image: ghcr.io/kiwix/kiwix-serve:3.8.2@sha256:acdab28186a66b51bfd4202210c6732931ea95cf41c711148a0c9770b9fcc9e1
restart: unless-stopped
command:
- '*.zim'
+2 -2
View File
@@ -1,7 +1,7 @@
services:
lldap_db:
container_name: lldap_db
image: docker.io/library/postgres:18.3@sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4
image: docker.io/library/postgres:18.3@sha256:a9abf4275f9e99bff8e6aed712b3b7dfec9cac1341bba01c1ffdfce9ff9fc34a
restart: unless-stopped
environment:
- POSTGRES_USER=${POSTGRES_USER}
@@ -21,7 +21,7 @@ services:
lldap:
container_name: lldap
image: ghcr.io/lldap/lldap:v0.6.3-alpine-rootless@sha256:ba2c50930ea998eefd5454aa678a7977448019248b1827da87d330df0b71c284
image: ghcr.io/lldap/lldap:v0.6.2-alpine-rootless@sha256:35df821899ec54c11eaab395e9c68e191e2582592cba343b0a904f6821aadcd2
restart: unless-stopped
depends_on:
lldap_db:
-10
View File
@@ -1,10 +0,0 @@
services:
newt:
container_name: newt
image: fosrl/newt:1.12.2
restart: unless-stopped
environment:
- PANGOLIN_ENDPOINT=${PANGOLIN_ENDPOINT}
- NEWT_ID=${NEWT_ID}
- NEWT_SECRET=${NEWT_SECRET}
network_mode: host
-45
View File
@@ -1,45 +0,0 @@
name: pangolin
services:
pangolin:
container_name: pangolin
image: ghcr.io/fosrl/pangolin:1.18.0
restart: unless-stopped
deploy:
resources:
limits:
memory: 1g
reservations:
memory: 256m
volumes:
- ./config:/app/config
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:3001/api/v1/"]
interval: "10s"
timeout: "10s"
retries: 15
traefik:
container_name: traefik
image: ghcr.io/traefik/traefik:v3.6.14
restart: unless-stopped
depends_on:
pangolin:
condition: service_healthy
command:
- --configFile=/etc/traefik/traefik_config.yml
environment:
- CLOUDFLARE_DNS_API_TOKEN=${CLOUDFLARE_DNS_API_TOKEN}
volumes:
- ./config/traefik:/etc/traefik:ro # Volume to store the Traefik configuration
- ./config/letsencrypt:/letsencrypt # Volume to store the Let's Encrypt certificates
- ./config/traefik/logs:/var/log/traefik # Volume to store Traefik logs
ports:
- 443:443
- 80:80
- 22:22
- 2222:2222
networks:
default:
driver: bridge
name: pangolin
-66
View File
@@ -1,66 +0,0 @@
name: pangolin
services:
pangolin:
container_name: pangolin
image: ghcr.io/fosrl/pangolin:1.18.0
restart: unless-stopped
volumes:
- ./config:/app/config
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:3001/api/v1/"]
interval: "10s"
timeout: "10s"
retries: 15
gerbil:
container_name: gerbil
image: ghcr.io/fosrl/gerbil:1.3.1
restart: unless-stopped
depends_on:
pangolin:
condition: service_healthy
command:
- --reachableAt=http://gerbil:3004
- --generateAndSaveKeyTo=/var/config/key
- --remoteConfig=http://pangolin:3001/api/v1/
cap_add:
- NET_ADMIN
- SYS_MODULE
volumes:
- ./config/:/var/config
ports:
- 51820:51820/udp
- 21820:21820/udp
- 443:443
- 80:80
traefik:
container_name: traefik
image: ghcr.io/traefik/traefik:v3.6.14
restart: unless-stopped
depends_on:
pangolin:
condition: service_healthy
command:
- --configFile=/etc/traefik/traefik_config.yml
environment:
- CLOUDFLARE_DNS_API_TOKEN=${CLOUDFLARE_DNS_API_TOKEN}
volumes:
- ./config/traefik:/etc/traefik:ro # Volume to store the Traefik configuration
- ./config/letsencrypt:/letsencrypt # Volume to store the Let's Encrypt certificates
- ./config/traefik/logs:/var/log/traefik # Volume to store Traefik logs
network_mode: service:gerbil # Ports appear on the gerbil service
webfinger: # For Tailscale
container_name: webfinger
image: nginx:1.30.0-alpine
volumes:
- ./webfinger/webfinger.json:/usr/share/nginx/html/.well-known/webfinger:ro
- ./webfinger/nginx.conf:/etc/nginx/conf.d/default.conf:ro
restart: unless-stopped
networks:
default:
driver: bridge
name: pangolin
enable_ipv6: true # activate if your system supports IPv6
+2 -2
View File
@@ -1,7 +1,7 @@
services:
pocket-id-db:
container_name: pocket-id-db
image: docker.io/library/postgres:18.3@sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4
image: docker.io/library/postgres:18.3@sha256:a9abf4275f9e99bff8e6aed712b3b7dfec9cac1341bba01c1ffdfce9ff9fc34a
restart: unless-stopped
environment:
- POSTGRES_USER=${POSTGRES_USER}
@@ -21,7 +21,7 @@ services:
pocket-id:
container_name: pocket-id
image: ghcr.io/pocket-id/pocket-id:v2.6.2-distroless@sha256:a9adc636b5d30098307b8a1292c5887a59690cd5429aac5e87b588852f9c346d
image: ghcr.io/pocket-id/pocket-id:v2.5.0-distroless@sha256:deadc3c4dd6655a7d7f959200db1c74e394942dc061e6f3732b709983a08aab7
restart: unless-stopped
depends_on:
pocket-id-db: