Compare commits

...

3 Commits

Author SHA1 Message Date
b101480a01
Improve restart en failure
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-05-12 12:00:12 +02:00
f11ca40a94
Use json format
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-05-12 11:45:44 +02:00
340c1a1438
Improve security
Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
2024-05-12 11:11:53 +02:00
14 changed files with 41 additions and 31 deletions

View File

@ -13,7 +13,7 @@
DOCKER := docker DOCKER := docker
PROFILES := caddy wordpress adminer uptime-kuma qbittorrent gitea jellyfin watchtower backup syncthing openssh PROFILES := caddy wordpress gitea adminer uptime-kuma qbittorrent jellyfin watchtower backup syncthing openssh
PROFILE_CMD := $(addprefix --profile ,$(PROFILES)) PROFILE_CMD := $(addprefix --profile ,$(PROFILES))
COMPOSE_FILES := $(shell find docker-compose*.yml | sed -e 's/^/--file /') COMPOSE_FILES := $(shell find docker-compose*.yml | sed -e 's/^/--file /')

View File

@ -4,12 +4,12 @@
log { log {
output file /data/logs/access.log output file /data/logs/access.log
format console format json
} }
} }
import bensuperpc.org/Caddyfile import bensuperpc.org/*
import bensuperpc.com/Caddyfile import bensuperpc.com/*
import bensuperpc.net/Caddyfile import bensuperpc.net/*
import bensuperpc.ovh/Caddyfile import bensuperpc.ovh/*
import bensuperpc.fr/Caddyfile import bensuperpc.fr/*

View File

@ -5,3 +5,15 @@ bensuperpc.net {
www.bensuperpc.net { www.bensuperpc.net {
redir https://www.bensuperpc.org{uri} permanent redir https://www.bensuperpc.org{uri} permanent
} }
git.bensuperpc.net {
redir https://git.bensuperpc.org{uri} permanent
}
jellyfin.bensuperpc.net {
redir https://jellyfin.bensuperpc.org{uri} permanent
}
uptimekuma.bensuperpc.net {
redir https://uptimekuma.bensuperpc.org{uri} permanent
}

View File

@ -7,7 +7,7 @@ services:
container_name: adminer container_name: adminer
profiles: profiles:
- adminer - adminer
restart: on-failure restart: on-failure:5
env_file: env_file:
- env/adminer.env - env/adminer.env
depends_on: depends_on:

View File

@ -7,7 +7,7 @@ services:
container_name: backup container_name: backup
profiles: profiles:
- backup - backup
restart: on-failure restart: on-failure:5
env_file: env_file:
- env/backup.env - env/backup.env
volumes: volumes:

View File

@ -7,7 +7,7 @@ services:
container_name: caddy container_name: caddy
profiles: profiles:
- caddy - caddy
restart: on-failure restart: on-failure:5
ports: ports:
- 80:80 - 80:80
- 443:443 - 443:443
@ -20,19 +20,17 @@ services:
- infra-network - infra-network
env_file: env_file:
- env/caddy.env - env/caddy.env
cap_add:
- NET_ADMIN
security_opt: security_opt:
- no-new-privileges:true - no-new-privileges:true
# cap_drop: cap_drop:
# - ALL - ALL
# cap_add: cap_add:
# - CHOWN # - CHOWN
# - FOWNER # - FOWNER
# - DAC_OVERRIDE # - DAC_OVERRIDE
# - SETGID # - SETGID
# - SETUID # - SETUID
# - NET_BIND_SERVICE - NET_BIND_SERVICE
healthcheck: healthcheck:
test: pidof caddy || exit 1 test: pidof caddy || exit 1
interval: 120s interval: 120s

View File

@ -7,7 +7,7 @@ services:
container_name: gitea container_name: gitea
profiles: profiles:
- gitea - gitea
restart: on-failure restart: on-failure:5
depends_on: depends_on:
- caddy - caddy
env_file: env_file:
@ -31,7 +31,7 @@ services:
- gitea - gitea
depends_on: depends_on:
- gitea - gitea
restart: on-failure restart: on-failure:5
volumes: volumes:
- gitea_db:/var/lib/mysql:rw - gitea_db:/var/lib/mysql:rw
env_file: env_file:

View File

@ -7,7 +7,7 @@ services:
container_name: jellyfin container_name: jellyfin
profiles: profiles:
- jellyfin - jellyfin
restart: on-failure restart: on-failure:5
depends_on: depends_on:
- caddy - caddy
volumes: volumes:

View File

@ -7,7 +7,7 @@ services:
container_name: openssh container_name: openssh
profiles: profiles:
- openssh - openssh
restart: on-failure restart: on-failure:5
env_file: env_file:
- env/openssh.env - env/openssh.env
volumes: volumes:

View File

@ -7,7 +7,7 @@ services:
container_name: qbittorrent container_name: qbittorrent
profiles: profiles:
- qbittorrent - qbittorrent
restart: on-failure restart: on-failure:5
depends_on: depends_on:
- caddy - caddy
env_file: env_file:

View File

@ -7,7 +7,7 @@ services:
container_name: syncthing container_name: syncthing
profiles: profiles:
- syncthing - syncthing
restart: on-failure restart: on-failure:5
env_file: env_file:
- env/syncthing.env - env/syncthing.env
volumes: volumes:

View File

@ -9,7 +9,7 @@ services:
- uptime-kuma - uptime-kuma
volumes: volumes:
- uptimekuma_data:/app/data - uptimekuma_data:/app/data
restart: on-failure restart: on-failure:5
networks: networks:
- infra-network - infra-network
security_opt: security_opt:

View File

@ -7,7 +7,7 @@ services:
container_name: watchtower container_name: watchtower
profiles: profiles:
- watchtower - watchtower
restart: on-failure restart: on-failure:5
networks: networks:
- infra-network - infra-network
volumes: volumes:

View File

@ -7,7 +7,7 @@ services:
container_name: wordpress container_name: wordpress
profiles: profiles:
- wordpress - wordpress
restart: on-failure restart: on-failure:5
depends_on: depends_on:
- wordpress_db - wordpress_db
- caddy - caddy
@ -30,7 +30,7 @@ services:
- wordpress - wordpress
depends_on: depends_on:
- caddy - caddy
restart: on-failure restart: on-failure:5
volumes: volumes:
- wordpress_db:/var/lib/mysql:rw - wordpress_db:/var/lib/mysql:rw
env_file: env_file: