Add network #6

Merged
ryuupendragon merged 3 commits from network into main 2025-07-08 16:40:16 +05:30
20 changed files with 150 additions and 59 deletions

View File

@@ -4,4 +4,10 @@ services:
container_name: adminer container_name: adminer
ports: ports:
- ${PORT}:8080 - ${PORT}:8080
networks:
- backend
restart: unless-stopped restart: unless-stopped
networks:
backend:
external: true

View File

@@ -2,9 +2,6 @@ services:
crowdsec: crowdsec:
image: ghcr.io/crowdsecurity/crowdsec:v1.6.9 image: ghcr.io/crowdsecurity/crowdsec:v1.6.9
container_name: crowdsec container_name: crowdsec
networks:
proxy:
ipv4_address: 172.30.0.3
environment: environment:
- BOUNCER_KEY_CADDY=${CROWDSEC_API_KEY} - BOUNCER_KEY_CADDY=${CROWDSEC_API_KEY}
- GID=${GID} - GID=${GID}
@@ -14,6 +11,8 @@ services:
- ${APPDATA_PATH}/caddy/crowdsec-db:/var/lib/crowdsec/data/ - ${APPDATA_PATH}/caddy/crowdsec-db:/var/lib/crowdsec/data/
- ${APPDATA_PATH}/caddy/crowdsec-config:/etc/crowdsec/ - ${APPDATA_PATH}/caddy/crowdsec-config:/etc/crowdsec/
- ${APPDATA_PATH}/caddy/caddy-logs:/var/log/caddy:ro - ${APPDATA_PATH}/caddy/caddy-logs:/var/log/caddy:ro
networks:
- backend
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: ["CMD-SHELL", "wget --spider --quiet --tries=1 --timeout=5 http://localhost:8080/health > /dev/null 2>&1 || exit 1"] test: ["CMD-SHELL", "wget --spider --quiet --tries=1 --timeout=5 http://localhost:8080/health > /dev/null 2>&1 || exit 1"]
@@ -30,9 +29,6 @@ services:
condition: service_healthy condition: service_healthy
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
networks:
proxy:
ipv4_address: 172.30.0.2
environment: environment:
- CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN} - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
- CROWDSEC_API_KEY=${CROWDSEC_API_KEY} - CROWDSEC_API_KEY=${CROWDSEC_API_KEY}
@@ -46,13 +42,13 @@ services:
- ${HTTP_PORT}:80 - ${HTTP_PORT}:80
- ${HTTPS_PORT}:443 - ${HTTPS_PORT}:443
- ${HTTPS_PORT}:443/udp - ${HTTPS_PORT}:443/udp
networks:
- frontend
- backend
restart: unless-stopped restart: unless-stopped
networks: networks:
proxy: frontend:
name: proxy external: true
driver: bridge backend:
ipam: external: true
config:
- subnet: 172.30.0.0/16
gateway: 172.30.0.1

View File

@@ -2,8 +2,6 @@ services:
crowdsec: crowdsec:
image: ghcr.io/crowdsecurity/crowdsec:v1.6.9 image: ghcr.io/crowdsecurity/crowdsec:v1.6.9
container_name: crowdsec container_name: crowdsec
networks:
- backend
environment: environment:
- BOUNCER_KEY_CADDY=${CROWDSEC_API_KEY} - BOUNCER_KEY_CADDY=${CROWDSEC_API_KEY}
- GID=${GID} - GID=${GID}
@@ -13,6 +11,8 @@ services:
- ${APPDATA_PATH}/caddy/crowdsec-db:/var/lib/crowdsec/data/ - ${APPDATA_PATH}/caddy/crowdsec-db:/var/lib/crowdsec/data/
- ${APPDATA_PATH}/caddy/crowdsec-config:/etc/crowdsec/ - ${APPDATA_PATH}/caddy/crowdsec-config:/etc/crowdsec/
- ${APPDATA_PATH}/caddy/caddy-logs:/var/log/caddy:ro - ${APPDATA_PATH}/caddy/caddy-logs:/var/log/caddy:ro
networks:
- backend
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: ["CMD-SHELL", "wget --spider --quiet --tries=1 --timeout=5 http://localhost:8080/health > /dev/null 2>&1 || exit 1"] test: ["CMD-SHELL", "wget --spider --quiet --tries=1 --timeout=5 http://localhost:8080/health > /dev/null 2>&1 || exit 1"]
@@ -29,9 +29,6 @@ services:
condition: service_healthy condition: service_healthy
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
networks:
- frontend
- backend
environment: environment:
- CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN} - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
- CROWDSEC_API_KEY=${CROWDSEC_API_KEY} - CROWDSEC_API_KEY=${CROWDSEC_API_KEY}
@@ -45,6 +42,9 @@ services:
- ${HTTP_PORT}:80 - ${HTTP_PORT}:80
- ${HTTPS_PORT}:443 - ${HTTPS_PORT}:443
- ${HTTPS_PORT}:443/udp - ${HTTPS_PORT}:443/udp
networks:
- frontend
- backend
restart: unless-stopped restart: unless-stopped
networks: networks:

View File

@@ -4,9 +4,6 @@ services:
container_name: caddy container_name: caddy
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
networks:
proxy:
ipv4_address: 172.30.0.2
environment: environment:
- CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN} - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
volumes: volumes:
@@ -19,13 +16,10 @@ services:
- ${HTTP_PORT}:80 - ${HTTP_PORT}:80
- ${HTTPS_PORT}:443 - ${HTTPS_PORT}:443
- ${HTTPS_PORT}:443/udp - ${HTTPS_PORT}:443/udp
networks:
- frontend
restart: unless-stopped restart: unless-stopped
networks: networks:
proxy: frontend:
name: proxy external: true
driver: bridge
ipam:
config:
- subnet: 172.30.0.0/16
gateway: 172.30.0.1

View File

@@ -4,9 +4,6 @@ services:
container_name: caddy container_name: caddy
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
networks:
proxy:
ipv4_address: 172.30.0.2
environment: environment:
- CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN} - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
volumes: volumes:
@@ -19,13 +16,10 @@ services:
- ${HTTP_PORT}:80 - ${HTTP_PORT}:80
- ${HTTPS_PORT}:443 - ${HTTPS_PORT}:443
- ${HTTPS_PORT}:443/udp - ${HTTPS_PORT}:443/udp
networks:
- frontend
restart: unless-stopped restart: unless-stopped
networks: networks:
proxy: frontend:
name: proxy external: true
driver: bridge
ipam:
config:
- subnet: 172.30.0.0/16
gateway: 172.30.0.1

View File

@@ -2,9 +2,6 @@ services:
crowdsec: crowdsec:
image: ghcr.io/crowdsecurity/crowdsec:v1.6.9 image: ghcr.io/crowdsecurity/crowdsec:v1.6.9
container_name: crowdsec container_name: crowdsec
networks:
proxy:
ipv4_address: 172.30.0.3
environment: environment:
- BOUNCER_KEY_CADDY=${CROWDSEC_API_KEY} - BOUNCER_KEY_CADDY=${CROWDSEC_API_KEY}
- GID=${GID} - GID=${GID}
@@ -14,6 +11,8 @@ services:
- ${APPDATA_PATH}/caddy/crowdsec-db:/var/lib/crowdsec/data/ - ${APPDATA_PATH}/caddy/crowdsec-db:/var/lib/crowdsec/data/
- ${APPDATA_PATH}/caddy/crowdsec-config:/etc/crowdsec/ - ${APPDATA_PATH}/caddy/crowdsec-config:/etc/crowdsec/
- ${APPDATA_PATH}/caddy/caddy-logs:/var/log/caddy:ro - ${APPDATA_PATH}/caddy/caddy-logs:/var/log/caddy:ro
networks:
- backend
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: ["CMD-SHELL", "wget --spider --quiet --tries=1 --timeout=5 http://localhost:8080/health > /dev/null 2>&1 || exit 1"] test: ["CMD-SHELL", "wget --spider --quiet --tries=1 --timeout=5 http://localhost:8080/health > /dev/null 2>&1 || exit 1"]
@@ -30,9 +29,6 @@ services:
condition: service_healthy condition: service_healthy
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
networks:
proxy:
ipv4_address: 172.30.0.2
environment: environment:
- CROWDSEC_API_KEY=${CROWDSEC_API_KEY} - CROWDSEC_API_KEY=${CROWDSEC_API_KEY}
volumes: volumes:
@@ -45,13 +41,13 @@ services:
- ${HTTP_PORT}:80 - ${HTTP_PORT}:80
- ${HTTPS_PORT}:443 - ${HTTPS_PORT}:443
- ${HTTPS_PORT}:443/udp - ${HTTPS_PORT}:443/udp
networks:
- frontend
- backend
restart: unless-stopped restart: unless-stopped
networks: networks:
proxy: frontend:
name: proxy external: true
driver: bridge backend:
ipam: external: true
config:
- subnet: 172.30.0.0/16
gateway: 172.30.0.1

View File

@@ -10,4 +10,10 @@ services:
- /etc/localtime:/etc/localtime:ro - /etc/localtime:/etc/localtime:ro
ports: ports:
- ${SERVER_PORT}:3000 - ${SERVER_PORT}:3000
networks:
- frontend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true

View File

@@ -13,6 +13,8 @@ services:
- ${APPDATA_PATH}/gitea-mirror/data:/app/data - ${APPDATA_PATH}/gitea-mirror/data:/app/data
ports: ports:
- ${PORT}:4321 - ${PORT}:4321
networks:
- internal
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: ["CMD", "wget", "--no-verbose", "--tries=3", "--spider", "http://localhost:4321/api/health"] test: ["CMD", "wget", "--no-verbose", "--tries=3", "--spider", "http://localhost:4321/api/health"]
@@ -20,3 +22,7 @@ services:
timeout: 10s timeout: 10s
retries: 5 retries: 5
start_period: 15s start_period: 15s
networks:
internal:
external: true

View File

@@ -12,6 +12,8 @@ services:
- ${APPDATA_PATH}/gitea/db:/var/lib/mysql - ${APPDATA_PATH}/gitea/db:/var/lib/mysql
ports: ports:
- ${DB_PORT}:3306 - ${DB_PORT}:3306
networks:
- backend
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"] test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
@@ -41,4 +43,13 @@ services:
ports: ports:
- ${SERVER_PORT}:3000 - ${SERVER_PORT}:3000
- ${SSH_PORT}:22 - ${SSH_PORT}:22
networks:
- frontend
- backend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true
backend:
external: true

View File

@@ -10,6 +10,8 @@ services:
- ${APPDATA_PATH}/gitea/db:/var/lib/postgresql/data - ${APPDATA_PATH}/gitea/db:/var/lib/postgresql/data
ports: ports:
- ${DB_PORT}:5432 - ${DB_PORT}:5432
networks:
- backend
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"] test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
@@ -39,4 +41,13 @@ services:
ports: ports:
- ${SERVER_PORT}:3000 - ${SERVER_PORT}:3000
- ${SSH_PORT}:22 - ${SSH_PORT}:22
networks:
- frontend
- backend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true
backend:
external: true

View File

@@ -8,5 +8,11 @@ services:
volumes: volumes:
- ${APPDATA_PATH}/gotify/config:/app/data - ${APPDATA_PATH}/gotify/config:/app/data
ports: ports:
- "${PORT}:80" - ${PORT}:80
networks:
- frontend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true

View File

@@ -28,6 +28,12 @@ services:
volumes: volumes:
- ${APPDATA_PATH}/healthchecks/config:/config - ${APPDATA_PATH}/healthchecks/config:/config
ports: ports:
- "${PORT}:8000" - ${PORT}:8000
- "${SMTP_PORT}:2525" - ${SMTP_PORT}:2525
networks:
- frontend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true

View File

@@ -12,6 +12,8 @@ services:
- ${APPDATA_PATH}/opengist/db:/var/lib/mysql - ${APPDATA_PATH}/opengist/db:/var/lib/mysql
ports: ports:
- ${DB_PORT}:3306 - ${DB_PORT}:3306
networks:
- backend
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"] test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
@@ -44,4 +46,13 @@ services:
- ${APPDATA_PATH}/opengist/data:/opengist - ${APPDATA_PATH}/opengist/data:/opengist
ports: ports:
- ${SERVER_PORT}:6157 - ${SERVER_PORT}:6157
networks:
- frontend
- backend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true
backend:
external: true

View File

@@ -10,6 +10,8 @@ services:
- ${APPDATA_PATH}/opengist/db:/var/lib/postgresql/data - ${APPDATA_PATH}/opengist/db:/var/lib/postgresql/data
ports: ports:
- ${DB_PORT}:5432 - ${DB_PORT}:5432
networks:
- backend
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"] test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
@@ -42,4 +44,13 @@ services:
- ${APPDATA_PATH}/opengist/data:/opengist - ${APPDATA_PATH}/opengist/data:/opengist
ports: ports:
- ${SERVER_PORT}:6157 - ${SERVER_PORT}:6157
networks:
- frontend
- backend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true
backend:
external: true

View File

@@ -9,5 +9,11 @@ services:
- ${APPDATA_PATH}/pingvin-share/images:/opt/app/frontend/public/img - ${APPDATA_PATH}/pingvin-share/images:/opt/app/frontend/public/img
- ${DATA_PATH}:/opt/app/backend/data - ${DATA_PATH}:/opt/app/backend/data
ports: ports:
- "${PORT}:3000" - ${PORT}:3000
networks:
- frontend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true

View File

@@ -23,8 +23,14 @@ services:
- ${APPDATA_PATH}/radicale/config:/config:ro - ${APPDATA_PATH}/radicale/config:/config:ro
ports: ports:
- ${PORT}:5232 - ${PORT}:5232
networks:
- frontend
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: curl -f http://127.0.0.1:5232 || exit 1 test: curl -f http://127.0.0.1:5232 || exit 1
interval: 30s interval: 30s
retries: 3 retries: 3
networks:
frontend:
external: true

View File

@@ -6,12 +6,14 @@ services:
- DOCKER_ENABLE_SECURITY=${DOCKER_ENABLE_SECURITY} - DOCKER_ENABLE_SECURITY=${DOCKER_ENABLE_SECURITY}
- SECURITY_ENABLELOGIN=${SECURITY_ENABLELOGIN} - SECURITY_ENABLELOGIN=${SECURITY_ENABLELOGIN}
- LANGS=${LANGS} - LANGS=${LANGS}
ports:
- "${PORT}:8080"
volumes: volumes:
- ${APPDATA_DATA}/stirling-pdf/training_data:/usr/share/tessdata - ${APPDATA_DATA}/stirling-pdf/training_data:/usr/share/tessdata
- ${APPDATA_DATA}/stirling-pdf/config:/configs - ${APPDATA_DATA}/stirling-pdf/config:/configs
- ${APPDATA_DATA}/stirling-pdf/custom_files:/customFiles/ - ${APPDATA_DATA}/stirling-pdf/custom_files:/customFiles/
- ${APPDATA_DATA}/stirling-pdf/logs:/logs/ - ${APPDATA_DATA}/stirling-pdf/logs:/logs/
- ${APPDATA_DATA}/stirling-pdf/pipeline:/pipeline/ - ${APPDATA_DATA}/stirling-pdf/pipeline:/pipeline/
ports:
- ${PORT}:8080
networks:
- frontend
restart: unless-stopped restart: unless-stopped

View File

@@ -8,5 +8,11 @@ services:
- ${APPDATA_PATH}/syncyomi/config:/config - ${APPDATA_PATH}/syncyomi/config:/config
- ${APPDATA_PATH}/syncyomi/log:/log - ${APPDATA_PATH}/syncyomi/log:/log
ports: ports:
- "${PORT}:8282" - ${PORT}:8282
networks:
- frontend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true

View File

@@ -5,5 +5,11 @@ services:
volumes: volumes:
- ${APPDATA_PATH}/uptime-kuma/config:/app/data - ${APPDATA_PATH}/uptime-kuma/config:/app/data
ports: ports:
- "${PORT}:3001" - ${PORT}:3001
networks:
- frontend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true

View File

@@ -10,6 +10,8 @@ services:
- ${APPDATA_PATH}/vaultwarden/db:/var/lib/postgresql/data - ${APPDATA_PATH}/vaultwarden/db:/var/lib/postgresql/data
ports: ports:
- ${DB_PORT}:5432 - ${DB_PORT}:5432
networks:
- backend
restart: unless-stopped restart: unless-stopped
healthcheck: healthcheck:
test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"] test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
@@ -38,4 +40,13 @@ services:
- ${APPDATA_PATH}/vaultwarden/data:/data/ - ${APPDATA_PATH}/vaultwarden/data:/data/
ports: ports:
- ${SERVER_PORT}:80 - ${SERVER_PORT}:80
networks:
- frontend
- backend
restart: unless-stopped restart: unless-stopped
networks:
frontend:
external: true
backend:
external: true