Compare commits
18
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
48571fd377 | ||
|
|
a6807ca197 | ||
|
|
f11a6a7a41 | ||
|
|
9972bd1969 | ||
|
|
79c3a4730e | ||
|
|
936e38877f | ||
|
|
30cf903584 | ||
|
|
675519900c | ||
|
|
e8d32c3944 | ||
|
|
6bf9a2b714 | ||
|
|
770214e013 | ||
|
|
d9b07838c5 | ||
|
|
6aa2c73c74 | ||
|
|
e1bc4dc1f4 | ||
|
|
82e4e9d8bc | ||
|
|
bbbf912279 | ||
|
|
ed9e2522f1 | ||
|
|
836ec2581b |
+59
-55
@@ -1,63 +1,67 @@
|
|||||||
name: pangolin
|
|
||||||
services:
|
services:
|
||||||
pangolin:
|
vaultwarden:
|
||||||
image: docker.io/fosrl/pangolin:ee-latest
|
image: vaultwarden/server:latest
|
||||||
container_name: pangolin
|
container_name: vaultwarden
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
deploy:
|
networks:
|
||||||
resources:
|
- hydra-local
|
||||||
limits:
|
environment:
|
||||||
memory: 1g
|
DOMAIN: "https://vault.doeringer.eu"
|
||||||
reservations:
|
LOGIN_RATELIMIT_MAX_BURST: 10
|
||||||
memory: 256m
|
LOGIN_RATELIMIT_SECONDS: 60
|
||||||
|
ADMIN_RATELIMIT_MAX_BURST: 10
|
||||||
|
ADMIN_RATELIMIT_SECONDS: 60
|
||||||
|
ADMIN_TOKEN: YV6FaKCmmJHW0vVs5dgHv8CWh1Vpj5
|
||||||
|
SENDS_ALLOWED: true
|
||||||
|
EMERGENCY_ACCESS_ALLOWED: true
|
||||||
|
WEB_VAULT_ENABLED: true
|
||||||
|
SIGNUP_ALLOWD: false
|
||||||
|
SMTP_HOST: live.smtp.mailtrap.io
|
||||||
|
SMTP_FROM: admin@doeringer.eu
|
||||||
|
SMTP_FROM_NAME: Contact Tobias
|
||||||
|
SMTP_SECURITY: starttls
|
||||||
|
SMTP_PORT: 587
|
||||||
|
SMTP_USERNAME: smtp@mailtrap.io
|
||||||
|
SMTP_PASSWORD: f2149ea35ddb1c5f622f8253550e55e1
|
||||||
|
SMTP_AUTH_MECHANISM: LOGIN
|
||||||
volumes:
|
volumes:
|
||||||
- /opt/pangolin/config:/app/config
|
- /opt/90_Security/vw-data/:/data/
|
||||||
healthcheck:
|
|
||||||
test: ["CMD", "curl", "-f", "http://localhost:3001/api/v1/"]
|
|
||||||
interval: "10s"
|
|
||||||
timeout: "10s"
|
|
||||||
retries: 15
|
|
||||||
|
|
||||||
gerbil:
|
|
||||||
image: docker.io/fosrl/gerbil:latest
|
|
||||||
container_name: gerbil
|
|
||||||
restart: unless-stopped
|
|
||||||
depends_on:
|
|
||||||
pangolin:
|
|
||||||
condition: service_healthy
|
|
||||||
command:
|
|
||||||
- --reachableAt=http://gerbil:3004
|
|
||||||
- --generateAndSaveKeyTo=/var/config/key
|
|
||||||
- --remoteConfig=http://pangolin:3001/api/v1/
|
|
||||||
volumes:
|
|
||||||
- /opt/pangolin/config/:/var/config
|
|
||||||
cap_add:
|
|
||||||
- NET_ADMIN
|
|
||||||
- SYS_MODULE
|
|
||||||
ports:
|
ports:
|
||||||
- 51820:51820/udp
|
- 127.0.0.1:8000:80
|
||||||
- 21820:21820/udp
|
|
||||||
- 443:443
|
|
||||||
- 443:443/udp # For http3 QUIC if desired
|
|
||||||
- 80:80
|
|
||||||
|
|
||||||
traefik:
|
|
||||||
image: docker.io/traefik:latest
|
vaultwarden-backup:
|
||||||
container_name: traefik
|
image: ttionya/vaultwarden-backup:latest
|
||||||
restart: unless-stopped
|
container_name: vaultwarden-backup
|
||||||
network_mode: service:gerbil # Ports appear on the gerbil service
|
networks:
|
||||||
depends_on:
|
- hydra-local
|
||||||
pangolin:
|
restart: always
|
||||||
condition: service_healthy
|
|
||||||
command:
|
|
||||||
- --configFile=/etc/traefik/traefik_config.yml
|
|
||||||
volumes:
|
volumes:
|
||||||
- /opt/pangolin/config/traefik:/etc/traefik:ro # Volume to store the Traefik configuration
|
- /opt/90_Security/vw-data:/bitwarden/data
|
||||||
- /opt/pangolin/config/letsencrypt:/letsencrypt # Volume to store the Let's Encrypt certificates
|
- /home/tobias/.config:/config/
|
||||||
- /opt/pangolin/config/traefik/logs:/var/log/traefik # Volume to store Traefik logs
|
environment:
|
||||||
|
RCLONE_REMOTE_NAME: 'Backup'
|
||||||
|
RCLONE_REMOTE_DIR: 'hydra-vps-backup'
|
||||||
|
CRON: '0 * * * *'
|
||||||
|
ZIP_ENABLE: 'TRUE'
|
||||||
|
ZIP_PASSWORD: 'Pwn1sh3r_@'
|
||||||
|
ZIP_TYPE: 'zip'
|
||||||
|
BACKUP_FILE_SUFFIX: '%Y%m%d_%H'
|
||||||
|
BACKUP_KEEP_DAYS: 14
|
||||||
|
TIMEZONE: 'Europe/Berlin'
|
||||||
|
MAIL_SMTP_ENABLE: 'TRUE'
|
||||||
|
MAIL_SMTP_VARIABLES: >-
|
||||||
|
-S smtp-use-starttls
|
||||||
|
-S smtp=smtp://live.smtp.mailtrap.io:587
|
||||||
|
-S smtp-auth=login
|
||||||
|
-S smtp-auth-user=api
|
||||||
|
-S smtp-auth-password=f2149ea35ddb1c5f622f8253550e55e1
|
||||||
|
-S from=vaultwarden@doeringer.eu
|
||||||
|
MAIL_TO: 'tobias@doeringer.eu'
|
||||||
|
MAIL_WHEN_SUCCESS: 'FALSE'
|
||||||
|
MAIL_WHEN_FAILURE: 'TRUE'
|
||||||
|
MAIL_FORCE_THREAD: 'FALSE'
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
default:
|
hydra-local:
|
||||||
driver: bridge
|
external: true
|
||||||
name: pangolin
|
|
||||||
enable_ipv6: true
|
|
||||||
Reference in New Issue
Block a user