Add linkstack and privatebin

Signed-off-by: Bensuperpc <bensuperpc@gmail.com>

infrastructure/caddy/config/bensuperpc.org/Caddyfile

@@ -93,6 +93,22 @@ tools.bensuperpc.org {
 	redir https://it-tools.bensuperpc.org permanent
 }
 
+privatebin.bensuperpc.org {
+	reverse_proxy privatebin:8080
+}
+
+pastebin.bensuperpc.org {
+	redir https://privatebin.bensuperpc.org permanent
+}
+
+linkstack.bensuperpc.org {
+	reverse_proxy linkstack:443 {
+		transport http {
+			tls_insecure_skip_verify
+		}
+	}
+}
+
 link.bensuperpc.org {
 	# TODO: Use service with database
 	# Friendly links

infrastructure/it-tools/docker-compose.it-tools.yml

@@ -8,12 +8,11 @@ services:
     restart: on-failure:5
     depends_on:
       - caddy
-    env_file:
-      - ./it-tools/env/it-tools.env
     networks:
       - infra-network
     security_opt:
       - no-new-privileges:true
+    read_only: true
     deploy:
       resources:
         limits:

infrastructure/it-tools/env/it-tools.env

@@ -1,2 +0,0 @@
-PSITRANSFER_ADMIN_PASS=n9jLVNT9QUotTJTT91JqH4GyBTg9pvEn
-#PSITRANSFER_PORT=3000

infrastructure/linkstack/docker-compose.linkstack.yml

@@ -0,0 +1,30 @@
+services:
+  # linkstack
+  linkstack:
+    image: linkstackorg/linkstack:latest
+    container_name: linkstack
+    profiles:
+      - linkstack
+    restart: on-failure:5
+    depends_on:
+      - caddy
+    env_file:
+      - ./linkstack/env/linkstack.env
+    volumes:
+      - linkstack_data:/htdocs
+    networks:
+      - infra-network
+    security_opt:
+      - no-new-privileges:true
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 512M
+        reservations:
+          cpus: '0.001'
+          memory: 20M
+
+volumes:
+  linkstack_data:
+    name: linkstack_data

infrastructure/linkstack/env/linkstack.env

@@ -0,0 +1,7 @@
+HTTP_SERVER_NAME="linkstack.bensuperpc.org"
+HTTPS_SERVER_NAME="linkstack.bensuperpc.org"
+TZ="Europe/Paris"
+PHP_MEMORY_LIMIT="512M"
+UPLOAD_MAX_FILESIZE="8M"
+LOG_LEVEL="info"
+SERVER_ADMIN="bensuperpc@gmail.com"

infrastructure/privatebin/docker-compose.privatebin.yml

@@ -0,0 +1,29 @@
+services:
+  # privatebin
+  privatebin:
+    image: privatebin/nginx-fpm-alpine:latest
+    container_name: privatebin
+    profiles:
+      - privatebin
+    restart: on-failure:5
+    depends_on:
+      - caddy
+    volumes:
+      - privatebin_data:/srv/data
+    networks:
+      - infra-network
+    security_opt:
+      - no-new-privileges:true
+    read_only: true
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 512M
+        reservations:
+          cpus: '0.001'
+          memory: 20M
+
+volumes:
+  privatebin_data:
+    name: privatebin_data