mirror of
https://github.com/bunkerity/bunkerweb
synced 2026-05-24 09:28:37 +00:00
129 lines
3.9 KiB
YAML
129 lines
3.9 KiB
YAML
services:
|
|
bunkerweb:
|
|
image: bunkerity/bunkerweb:1.6.11-rc1
|
|
container_name: bunkerweb
|
|
ports:
|
|
- "80:8080/tcp"
|
|
- "443:8443/tcp"
|
|
- "443:8443/udp" # for QUIC
|
|
environment:
|
|
API_WHITELIST_IP: "127.0.0.0/8 10.20.30.0/24"
|
|
restart: "unless-stopped"
|
|
networks:
|
|
- bw-universe
|
|
- bw-services
|
|
|
|
bw-scheduler:
|
|
image: bunkerity/bunkerweb-scheduler:1.6.11-rc1
|
|
container_name: bw-scheduler
|
|
depends_on:
|
|
- bunkerweb
|
|
volumes:
|
|
- bw-storage:/data
|
|
environment:
|
|
BUNKERWEB_INSTANCES: "bunkerweb"
|
|
SERVER_NAME: "www.example.com" # replace with your domain
|
|
API_WHITELIST_IP: "127.0.0.0/8 10.20.30.0/24"
|
|
AUTO_LETS_ENCRYPT: "yes"
|
|
DISABLE_DEFAULT_SERVER: "yes"
|
|
USE_CLIENT_CACHE: "yes"
|
|
SERVE_FILES: "no"
|
|
MAX_CLIENT_SIZE: "50m"
|
|
USE_GZIP: "yes"
|
|
# Methods used to query the api
|
|
# more info at https://api.mattermost.com/
|
|
ALLOWED_METHODS: "GET|POST|HEAD|DELETE|PUT"
|
|
# Reverse proxy to Mattermost
|
|
# second endpoint needs websocket enabled
|
|
# more info at https://docs.mattermost.com/install/config-proxy-nginx.html
|
|
USE_REVERSE_PROXY: "yes"
|
|
REVERSE_PROXY_INTERCEPT_ERRORS: "no"
|
|
REVERSE_PROXY_URL_1: "/"
|
|
REVERSE_PROXY_HOST_1: "http://mattermost:8065"
|
|
REVERSE_PROXY_URL_2: "~ /api/v[0-9]+/(users/)?websocket$$"
|
|
REVERSE_PROXY_HOST_2: "http://mattermost:8065"
|
|
REVERSE_PROXY_WS_2: "yes"
|
|
# Default limit rate for URLs
|
|
LIMIT_REQ_URL_1: "/"
|
|
LIMIT_REQ_RATE_1: "3r/s"
|
|
# Limit rate for api endpoints
|
|
LIMIT_REQ_URL_2: "^/api/"
|
|
LIMIT_REQ_RATE_2: "10r/s"
|
|
# Limit rate for static resources
|
|
LIMIT_REQ_URL_3: "^/static/"
|
|
LIMIT_REQ_RATE_3: "10r/s"
|
|
restart: "unless-stopped"
|
|
networks:
|
|
- bw-universe
|
|
|
|
mattermost:
|
|
depends_on:
|
|
- postgres
|
|
image: mattermost/${MATTERMOST_IMAGE}:${MATTERMOST_IMAGE_TAG}
|
|
restart: ${RESTART_POLICY}
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
pids_limit: 200
|
|
read_only: ${MATTERMOST_CONTAINER_READONLY}
|
|
tmpfs:
|
|
- /tmp
|
|
volumes:
|
|
- ${MATTERMOST_CONFIG_PATH}:/mattermost/config:rw
|
|
- ${MATTERMOST_DATA_PATH}:/mattermost/data:rw
|
|
- ${MATTERMOST_LOGS_PATH}:/mattermost/logs:rw
|
|
- ${MATTERMOST_PLUGINS_PATH}:/mattermost/plugins:rw
|
|
- ${MATTERMOST_CLIENT_PLUGINS_PATH}:/mattermost/client/plugins:rw
|
|
- ${MATTERMOST_BLEVE_INDEXES_PATH}:/mattermost/bleve-indexes:rw
|
|
# When you want to use SSO with GitLab, you have to add the cert pki chain of GitLab inside Alpine
|
|
# to avoid Token request failed: certificate signed by unknown authority
|
|
# (link: https://github.com/mattermost/mattermost-server/issues/13059 and https://github.com/mattermost/docker/issues/34)
|
|
# - ${GITLAB_PKI_CHAIN_PATH}:/etc/ssl/certs/pki_chain.pem:ro
|
|
environment:
|
|
# timezone inside container
|
|
- TZ
|
|
# necessary Mattermost options/variables (see env.example)
|
|
- MM_SQLSETTINGS_DRIVERNAME
|
|
- MM_SQLSETTINGS_DATASOURCE
|
|
# necessary for bleve
|
|
- MM_BLEVESETTINGS_INDEXDIR
|
|
# additional settings
|
|
- MM_SERVICESETTINGS_SITEURL
|
|
networks:
|
|
- bw-services
|
|
|
|
postgres:
|
|
image: postgres:${POSTGRES_IMAGE_TAG}
|
|
restart: ${RESTART_POLICY}
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
pids_limit: 100
|
|
read_only: true
|
|
tmpfs:
|
|
- /tmp
|
|
- /var/run/postgresql
|
|
volumes:
|
|
- ${POSTGRES_DATA_PATH}:/var/lib/postgresql/data
|
|
environment:
|
|
# timezone inside container
|
|
- TZ
|
|
# necessary Postgres options/variables
|
|
- POSTGRES_USER
|
|
- POSTGRES_PASSWORD
|
|
- POSTGRES_DB
|
|
- PGDATA=/var/lib/postgresql/data/pgdata
|
|
networks:
|
|
- bw-services
|
|
|
|
volumes:
|
|
bw-storage:
|
|
|
|
|
|
networks:
|
|
bw-universe:
|
|
name: bw-universe
|
|
ipam:
|
|
driver: default
|
|
config:
|
|
- subnet: 10.20.30.0/24
|
|
bw-services:
|
|
name: bw-services
|