From fd2d8cb17c11e1e2df3ba6bac964fc3e902a9daa Mon Sep 17 00:00:00 2001 From: "Urko." Date: Mon, 25 Dec 2023 18:48:42 +0100 Subject: [PATCH] feat: owncloud stack --- docker-stack.yml | 66 ++++++++++++++++++++++++------------------------ 1 file changed, 33 insertions(+), 33 deletions(-) diff --git a/docker-stack.yml b/docker-stack.yml index 0615517..f583da5 100644 --- a/docker-stack.yml +++ b/docker-stack.yml @@ -6,14 +6,14 @@ services: networks: ocis-net: aliases: - - ${OCIS_DOMAIN:-ocis.owncloud.test} - - ${WOPISERVER_DOMAIN:-wopiserver.owncloud.test} - - ${COLLABORA_DOMAIN:-collabora.owncloud.test} - - ${ONLYOFFICE_DOMAIN:-onlyoffice.owncloud.test} + - ${OCIS_DOMAIN} + - ${WOPISERVER_DOMAIN} + - ${COLLABORA_DOMAIN} + - ${ONLYOFFICE_DOMAIN} command: - "--log.level=${TRAEFIK_LOG_LEVEL:-ERROR}" # letsencrypt configuration - - "--certificatesResolvers.http.acme.email=${TRAEFIK_ACME_MAIL:-example@example.org}" + - "--certificatesResolvers.http.acme.email=${TRAEFIK_ACME_MAIL}" - "--certificatesResolvers.http.acme.storage=/certs/acme.json" - "--certificatesResolvers.http.acme.httpChallenge.entryPoint=http" # enable dashboard @@ -51,10 +51,10 @@ services: driver: "local" deploy: labels: - - "traefik.enable=${TRAEFIK_DASHBOARD:-false}" - - "traefik.http.middlewares.traefik-auth.basicauth.users=${TRAEFIK_BASIC_AUTH_USERS:-admin:$$apr1$$4vqie50r$$YQAmQdtmz5n9rEALhxJ4l.}" # defaults to admin:admin + - "traefik.enable=${TRAEFIK_DASHBOARD}" + - "traefik.http.middlewares.traefik-auth.basicauth.users=${TRAEFIK_BASIC_AUTH_USERS}" # defaults to admin:admin - "traefik.http.routers.traefik.entrypoints=https" - - "traefik.http.routers.traefik.rule=Host(`${TRAEFIK_DOMAIN:-traefik.owncloud.test}`)" + - "traefik.http.routers.traefik.rule=Host(`${TRAEFIK_DOMAIN}`)" - "traefik.http.routers.traefik.middlewares=traefik-auth" - "traefik.http.routers.traefik.tls.certresolver=http" - "traefik.http.routers.traefik.service=api@internal" @@ -94,7 +94,7 @@ services: labels: - "traefik.enable=true" - "traefik.http.routers.ocis.entrypoints=https" - - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN:-ocis.owncloud.test}`)" + - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN}`)" - "traefik.http.routers.ocis.tls.certresolver=http" - "traefik.http.routers.ocis.service=ocis" - "traefik.http.services.ocis.loadbalancer.server.port=9200" @@ -104,7 +104,7 @@ services: labels: - "traefik.enable=true" - "traefik.http.routers.ocis.entrypoints=https" - - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN:-ocis.owncloud.test}`)" + - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN}`)" - "traefik.http.routers.ocis.tls.certresolver=http" - "traefik.http.routers.ocis.service=ocis" - "traefik.http.services.ocis.loadbalancer.server.port=9200" @@ -118,7 +118,7 @@ services: command: app-provider server environment: # use the internal service name of the gateway - REVA_GATEWAY: ${REVA_GATEWAY:-com.owncloud.api.gateway} + REVA_GATEWAY: ${REVA_GATEWAY} APP_PROVIDER_GRPC_ADDR: 0.0.0.0:9164 # configure the service name to avoid collision with onlyoffice APP_PROVIDER_SERVICE_NAME: app-provider-collabora @@ -126,12 +126,12 @@ services: APP_PROVIDER_EXTERNAL_ADDR: com.owncloud.api.app-provider-collabora APP_PROVIDER_DRIVER: wopi APP_PROVIDER_WOPI_APP_NAME: Collabora - APP_PROVIDER_WOPI_APP_ICON_URI: https://${COLLABORA_DOMAIN:-collabora.owncloud.test}/favicon.ico - APP_PROVIDER_WOPI_APP_URL: https://${COLLABORA_DOMAIN:-collabora.owncloud.test} - APP_PROVIDER_WOPI_INSECURE: "${INSECURE:-false}" - APP_PROVIDER_WOPI_WOPI_SERVER_EXTERNAL_URL: https://${WOPISERVER_DOMAIN:-wopiserver.owncloud.test} - APP_PROVIDER_WOPI_FOLDER_URL_BASE_URL: https://${OCIS_DOMAIN:-ocis.owncloud.test} - JWT_SECRET: ${WOPI_JWT_SECRET:-somesec} # Add this line + APP_PROVIDER_WOPI_APP_ICON_URI: https://${COLLABORA_DOMAIN}/favicon.ico + APP_PROVIDER_WOPI_APP_URL: https://${COLLABORA_DOMAIN} + APP_PROVIDER_WOPI_INSECURE: "${INSECURE}" + APP_PROVIDER_WOPI_WOPI_SERVER_EXTERNAL_URL: https://${WOPISERVER_DOMAIN} + APP_PROVIDER_WOPI_FOLDER_URL_BASE_URL: https://${OCIS_DOMAIN} + JWT_SECRET: ${WOPI_JWT_SECRET} # share the registry with the ocis container MICRO_REGISTRY: "mdns" volumes: @@ -149,12 +149,12 @@ services: - /bin/sh - /entrypoint-override.sh environment: - OCIS_URL: https://${OCIS_DOMAIN:-ocis.owncloud.test} + OCIS_URL: https://${OCIS_DOMAIN} OCIS_LOG_LEVEL: ${OCIS_LOG_LEVEL:-info} OCIS_LOG_COLOR: "${OCIS_LOG_COLOR:-false}" PROXY_TLS: "false" # do not use SSL between Traefik and oCIS # use the internal service name of the gateway - REVA_GATEWAY: ${REVA_GATEWAY:-com.owncloud.api.gateway} + REVA_GATEWAY: ${REVA_GATEWAY} APP_PROVIDER_GRPC_ADDR: 0.0.0.0:9164 # configure the service name to avoid collision with collabora APP_PROVIDER_SERVICE_NAME: app-provider-onlyoffice @@ -162,11 +162,11 @@ services: APP_PROVIDER_EXTERNAL_ADDR: com.owncloud.api.app-provider-onlyoffice APP_PROVIDER_DRIVER: wopi APP_PROVIDER_WOPI_APP_NAME: OnlyOffice - APP_PROVIDER_WOPI_APP_ICON_URI: https://${ONLYOFFICE_DOMAIN:-onlyoffice.owncloud.test}/web-apps/apps/documenteditor/main/resources/img/favicon.ico - APP_PROVIDER_WOPI_APP_URL: https://${ONLYOFFICE_DOMAIN:-onlyoffice.owncloud.test} + APP_PROVIDER_WOPI_APP_ICON_URI: https://${ONLYOFFICE_DOMAIN}/web-apps/apps/documenteditor/main/resources/img/favicon.ico + APP_PROVIDER_WOPI_APP_URL: https://${ONLYOFFICE_DOMAIN} APP_PROVIDER_WOPI_INSECURE: "${INSECURE:-false}" - APP_PROVIDER_WOPI_WOPI_SERVER_EXTERNAL_URL: https://${WOPISERVER_DOMAIN:-wopiserver.owncloud.test} - APP_PROVIDER_WOPI_FOLDER_URL_BASE_URL: https://${OCIS_DOMAIN:-ocis.owncloud.test} + APP_PROVIDER_WOPI_WOPI_SERVER_EXTERNAL_URL: https://${WOPISERVER_DOMAIN} + APP_PROVIDER_WOPI_FOLDER_URL_BASE_URL: https://${OCIS_DOMAIN} # share the registry with the ocis container MICRO_REGISTRY: "mdns" volumes: @@ -184,9 +184,9 @@ services: - /bin/sh - /entrypoint-override.sh environment: - WOPISERVER_INSECURE: "${INSECURE:-false}" - WOPISECRET: ${WOPI_JWT_SECRET:-LoremIpsum567} - WOPISERVER_DOMAIN: ${WOPISERVER_DOMAIN:-wopiserver.owncloud.test} + WOPISERVER_INSECURE: "${INSECURE}" + WOPISECRET: ${WOPI_JWT_SECRET} + WOPISERVER_DOMAIN: ${WOPISERVER_DOMAIN} volumes: - ./config/wopiserver/entrypoint-override.sh:/entrypoint-override.sh - ./config/wopiserver/wopiserver.conf.dist:/etc/wopi/wopiserver.conf.dist @@ -194,7 +194,7 @@ services: labels: - "traefik.enable=true" - "traefik.http.routers.wopiserver.entrypoints=https" - - "traefik.http.routers.wopiserver.rule=Host(`${WOPISERVER_DOMAIN:-wopiserver.owncloud.test}`)" + - "traefik.http.routers.wopiserver.rule=Host(`${WOPISERVER_DOMAIN}`)" - "traefik.http.routers.wopiserver.tls.certresolver=http" - "traefik.http.routers.wopiserver.service=wopiserver" - "traefik.http.services.wopiserver.loadbalancer.server.port=8880" @@ -207,9 +207,9 @@ services: networks: - ocis-net environment: - aliasgroup1: https://${WOPISERVER_DOMAIN:-wopiserver.owncloud.test}:443 + aliasgroup1: https://${WOPISERVER_DOMAIN}:443 DONT_GEN_SSL_CERT: "YES" - extra_params: --o:ssl.enable=false --o:ssl.termination=true --o:welcome.enable=false --o:net.frame_ancestors=${OCIS_DOMAIN:-ocis.owncloud.test} + extra_params: --o:ssl.enable=false --o:ssl.termination=true --o:welcome.enable=false --o:net.frame_ancestors=${OCIS_DOMAIN} username: ${COLLABORA_ADMIN_USER} password: ${COLLABORA_ADMIN_PASSWORD} cap_add: @@ -217,7 +217,7 @@ services: labels: - "traefik.enable=true" - "traefik.http.routers.collabora.entrypoints=https" - - "traefik.http.routers.collabora.rule=Host(`${COLLABORA_DOMAIN:-collabora.owncloud.test}`)" + - "traefik.http.routers.collabora.rule=Host(`${COLLABORA_DOMAIN}`)" - "traefik.http.routers.collabora.tls.certresolver=http" - "traefik.http.routers.collabora.service=collabora" - "traefik.http.services.collabora.loadbalancer.server.port=9980" @@ -234,14 +234,14 @@ services: - /entrypoint-override.sh environment: WOPI_ENABLED: "true" - USE_UNAUTHORIZED_STORAGE: "${INSECURE:-false}" # self signed certificates + USE_UNAUTHORIZED_STORAGE: "${INSECURE}" # self signed certificates volumes: - ./config/onlyoffice/entrypoint-override.sh:/entrypoint-override.sh - ./config/onlyoffice/local.json:/etc/onlyoffice/documentserver/local.dist.json labels: - "traefik.enable=true" - "traefik.http.routers.onlyoffice.entrypoints=https" - - "traefik.http.routers.onlyoffice.rule=Host(`${ONLYOFFICE_DOMAIN:-onlyoffice.owncloud.test}`)" + - "traefik.http.routers.onlyoffice.rule=Host(`${ONLYOFFICE_DOMAIN}`)" - "traefik.http.routers.onlyoffice.tls.certresolver=http" - "traefik.http.routers.onlyoffice.service=onlyoffice" - "traefik.http.services.onlyoffice.loadbalancer.server.port=80" @@ -273,7 +273,7 @@ services: labels: - "traefik.enable=true" - "traefik.http.routers.inbucket.entrypoints=https" - - "traefik.http.routers.inbucket.rule=Host(`${INBUCKET_DOMAIN:-mail.owncloud.test}`)" + - "traefik.http.routers.inbucket.rule=Host(`${INBUCKET_DOMAIN}`)" - "traefik.http.routers.inbucket.tls.certresolver=http" - "traefik.http.routers.inbucket.service=inbucket" - "traefik.http.services.inbucket.loadbalancer.server.port=9000"