urko
/
selfhosted-owncloud
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: owncloud stack

This commit is contained in:
Urko. 2023-12-25 18:48:42 +01:00
parent 96f7189efd
commit fd2d8cb17c
1 changed files with 33 additions and 33 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

66
docker-stack.yml
View File

@ -6,14 +6,14 @@ services:
networks: networks:
ocis-net: ocis-net:
aliases: aliases:
- ${OCIS_DOMAIN:-ocis.owncloud.test} - ${OCIS_DOMAIN}
- ${WOPISERVER_DOMAIN:-wopiserver.owncloud.test} - ${WOPISERVER_DOMAIN}
- ${COLLABORA_DOMAIN:-collabora.owncloud.test} - ${COLLABORA_DOMAIN}
- ${ONLYOFFICE_DOMAIN:-onlyoffice.owncloud.test} - ${ONLYOFFICE_DOMAIN}
command: command:
- "--log.level=${TRAEFIK_LOG_LEVEL:-ERROR}" - "--log.level=${TRAEFIK_LOG_LEVEL:-ERROR}"
# letsencrypt configuration # letsencrypt configuration
- "--certificatesResolvers.http.acme.email=${TRAEFIK_ACME_MAIL:-example@example.org}" - "--certificatesResolvers.http.acme.email=${TRAEFIK_ACME_MAIL}"
- "--certificatesResolvers.http.acme.storage=/certs/acme.json" - "--certificatesResolvers.http.acme.storage=/certs/acme.json"
- "--certificatesResolvers.http.acme.httpChallenge.entryPoint=http" - "--certificatesResolvers.http.acme.httpChallenge.entryPoint=http"
# enable dashboard # enable dashboard
@ -51,10 +51,10 @@ services:
driver: "local" driver: "local"
deploy: deploy:
labels: labels:
- "traefik.enable=${TRAEFIK_DASHBOARD:-false}" - "traefik.enable=${TRAEFIK_DASHBOARD}"
- "traefik.http.middlewares.traefik-auth.basicauth.users=${TRAEFIK_BASIC_AUTH_USERS:-admin:$$apr1$$4vqie50r$$YQAmQdtmz5n9rEALhxJ4l.}" # defaults to admin:admin - "traefik.http.middlewares.traefik-auth.basicauth.users=${TRAEFIK_BASIC_AUTH_USERS}" # defaults to admin:admin
- "traefik.http.routers.traefik.entrypoints=https" - "traefik.http.routers.traefik.entrypoints=https"
- "traefik.http.routers.traefik.rule=Host(`${TRAEFIK_DOMAIN:-traefik.owncloud.test}`)" - "traefik.http.routers.traefik.rule=Host(`${TRAEFIK_DOMAIN}`)"
- "traefik.http.routers.traefik.middlewares=traefik-auth" - "traefik.http.routers.traefik.middlewares=traefik-auth"
- "traefik.http.routers.traefik.tls.certresolver=http" - "traefik.http.routers.traefik.tls.certresolver=http"
- "traefik.http.routers.traefik.service=api@internal" - "traefik.http.routers.traefik.service=api@internal"
@ -94,7 +94,7 @@ services:
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.ocis.entrypoints=https" - "traefik.http.routers.ocis.entrypoints=https"
- "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN:-ocis.owncloud.test}`)" - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN}`)"
- "traefik.http.routers.ocis.tls.certresolver=http" - "traefik.http.routers.ocis.tls.certresolver=http"
- "traefik.http.routers.ocis.service=ocis" - "traefik.http.routers.ocis.service=ocis"
- "traefik.http.services.ocis.loadbalancer.server.port=9200" - "traefik.http.services.ocis.loadbalancer.server.port=9200"
@ -104,7 +104,7 @@ services:
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.ocis.entrypoints=https" - "traefik.http.routers.ocis.entrypoints=https"
- "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN:-ocis.owncloud.test}`)" - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN}`)"
- "traefik.http.routers.ocis.tls.certresolver=http" - "traefik.http.routers.ocis.tls.certresolver=http"
- "traefik.http.routers.ocis.service=ocis" - "traefik.http.routers.ocis.service=ocis"
- "traefik.http.services.ocis.loadbalancer.server.port=9200" - "traefik.http.services.ocis.loadbalancer.server.port=9200"
@ -118,7 +118,7 @@ services:
command: app-provider server command: app-provider server
environment: environment:
# use the internal service name of the gateway # use the internal service name of the gateway
REVA_GATEWAY: ${REVA_GATEWAY:-com.owncloud.api.gateway} REVA_GATEWAY: ${REVA_GATEWAY}
APP_PROVIDER_GRPC_ADDR: 0.0.0.0:9164 APP_PROVIDER_GRPC_ADDR: 0.0.0.0:9164
# configure the service name to avoid collision with onlyoffice # configure the service name to avoid collision with onlyoffice
APP_PROVIDER_SERVICE_NAME: app-provider-collabora APP_PROVIDER_SERVICE_NAME: app-provider-collabora
@ -126,12 +126,12 @@ services:
APP_PROVIDER_EXTERNAL_ADDR: com.owncloud.api.app-provider-collabora APP_PROVIDER_EXTERNAL_ADDR: com.owncloud.api.app-provider-collabora
APP_PROVIDER_DRIVER: wopi APP_PROVIDER_DRIVER: wopi
APP_PROVIDER_WOPI_APP_NAME: Collabora APP_PROVIDER_WOPI_APP_NAME: Collabora
APP_PROVIDER_WOPI_APP_ICON_URI: https://${COLLABORA_DOMAIN:-collabora.owncloud.test}/favicon.ico APP_PROVIDER_WOPI_APP_ICON_URI: https://${COLLABORA_DOMAIN}/favicon.ico
APP_PROVIDER_WOPI_APP_URL: https://${COLLABORA_DOMAIN:-collabora.owncloud.test} APP_PROVIDER_WOPI_APP_URL: https://${COLLABORA_DOMAIN}
APP_PROVIDER_WOPI_INSECURE: "${INSECURE:-false}" APP_PROVIDER_WOPI_INSECURE: "${INSECURE}"
APP_PROVIDER_WOPI_WOPI_SERVER_EXTERNAL_URL: https://${WOPISERVER_DOMAIN:-wopiserver.owncloud.test} APP_PROVIDER_WOPI_WOPI_SERVER_EXTERNAL_URL: https://${WOPISERVER_DOMAIN}
APP_PROVIDER_WOPI_FOLDER_URL_BASE_URL: https://${OCIS_DOMAIN:-ocis.owncloud.test} APP_PROVIDER_WOPI_FOLDER_URL_BASE_URL: https://${OCIS_DOMAIN}
JWT_SECRET: ${WOPI_JWT_SECRET:-somesec} # Add this line JWT_SECRET: ${WOPI_JWT_SECRET}
# share the registry with the ocis container # share the registry with the ocis container
MICRO_REGISTRY: "mdns" MICRO_REGISTRY: "mdns"
volumes: volumes:
@ -149,12 +149,12 @@ services:
- /bin/sh - /bin/sh
- /entrypoint-override.sh - /entrypoint-override.sh
environment: environment:
OCIS_URL: https://${OCIS_DOMAIN:-ocis.owncloud.test} OCIS_URL: https://${OCIS_DOMAIN}
OCIS_LOG_LEVEL: ${OCIS_LOG_LEVEL:-info} OCIS_LOG_LEVEL: ${OCIS_LOG_LEVEL:-info}
OCIS_LOG_COLOR: "${OCIS_LOG_COLOR:-false}" OCIS_LOG_COLOR: "${OCIS_LOG_COLOR:-false}"
PROXY_TLS: "false" # do not use SSL between Traefik and oCIS PROXY_TLS: "false" # do not use SSL between Traefik and oCIS
# use the internal service name of the gateway # use the internal service name of the gateway
REVA_GATEWAY: ${REVA_GATEWAY:-com.owncloud.api.gateway} REVA_GATEWAY: ${REVA_GATEWAY}
APP_PROVIDER_GRPC_ADDR: 0.0.0.0:9164 APP_PROVIDER_GRPC_ADDR: 0.0.0.0:9164
# configure the service name to avoid collision with collabora # configure the service name to avoid collision with collabora
APP_PROVIDER_SERVICE_NAME: app-provider-onlyoffice APP_PROVIDER_SERVICE_NAME: app-provider-onlyoffice
@ -162,11 +162,11 @@ services:
APP_PROVIDER_EXTERNAL_ADDR: com.owncloud.api.app-provider-onlyoffice APP_PROVIDER_EXTERNAL_ADDR: com.owncloud.api.app-provider-onlyoffice
APP_PROVIDER_DRIVER: wopi APP_PROVIDER_DRIVER: wopi
APP_PROVIDER_WOPI_APP_NAME: OnlyOffice APP_PROVIDER_WOPI_APP_NAME: OnlyOffice
APP_PROVIDER_WOPI_APP_ICON_URI: https://${ONLYOFFICE_DOMAIN:-onlyoffice.owncloud.test}/web-apps/apps/documenteditor/main/resources/img/favicon.ico APP_PROVIDER_WOPI_APP_ICON_URI: https://${ONLYOFFICE_DOMAIN}/web-apps/apps/documenteditor/main/resources/img/favicon.ico
APP_PROVIDER_WOPI_APP_URL: https://${ONLYOFFICE_DOMAIN:-onlyoffice.owncloud.test} APP_PROVIDER_WOPI_APP_URL: https://${ONLYOFFICE_DOMAIN}
APP_PROVIDER_WOPI_INSECURE: "${INSECURE:-false}" APP_PROVIDER_WOPI_INSECURE: "${INSECURE:-false}"
APP_PROVIDER_WOPI_WOPI_SERVER_EXTERNAL_URL: https://${WOPISERVER_DOMAIN:-wopiserver.owncloud.test} APP_PROVIDER_WOPI_WOPI_SERVER_EXTERNAL_URL: https://${WOPISERVER_DOMAIN}
APP_PROVIDER_WOPI_FOLDER_URL_BASE_URL: https://${OCIS_DOMAIN:-ocis.owncloud.test} APP_PROVIDER_WOPI_FOLDER_URL_BASE_URL: https://${OCIS_DOMAIN}
# share the registry with the ocis container # share the registry with the ocis container
MICRO_REGISTRY: "mdns" MICRO_REGISTRY: "mdns"
volumes: volumes:
@ -184,9 +184,9 @@ services:
- /bin/sh - /bin/sh
- /entrypoint-override.sh - /entrypoint-override.sh
environment: environment:
WOPISERVER_INSECURE: "${INSECURE:-false}" WOPISERVER_INSECURE: "${INSECURE}"
WOPISECRET: ${WOPI_JWT_SECRET:-LoremIpsum567} WOPISECRET: ${WOPI_JWT_SECRET}
WOPISERVER_DOMAIN: ${WOPISERVER_DOMAIN:-wopiserver.owncloud.test} WOPISERVER_DOMAIN: ${WOPISERVER_DOMAIN}
volumes: volumes:
- ./config/wopiserver/entrypoint-override.sh:/entrypoint-override.sh - ./config/wopiserver/entrypoint-override.sh:/entrypoint-override.sh
- ./config/wopiserver/wopiserver.conf.dist:/etc/wopi/wopiserver.conf.dist - ./config/wopiserver/wopiserver.conf.dist:/etc/wopi/wopiserver.conf.dist
@ -194,7 +194,7 @@ services:
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.wopiserver.entrypoints=https" - "traefik.http.routers.wopiserver.entrypoints=https"
- "traefik.http.routers.wopiserver.rule=Host(`${WOPISERVER_DOMAIN:-wopiserver.owncloud.test}`)" - "traefik.http.routers.wopiserver.rule=Host(`${WOPISERVER_DOMAIN}`)"
- "traefik.http.routers.wopiserver.tls.certresolver=http" - "traefik.http.routers.wopiserver.tls.certresolver=http"
- "traefik.http.routers.wopiserver.service=wopiserver" - "traefik.http.routers.wopiserver.service=wopiserver"
- "traefik.http.services.wopiserver.loadbalancer.server.port=8880" - "traefik.http.services.wopiserver.loadbalancer.server.port=8880"
@ -207,9 +207,9 @@ services:
networks: networks:
- ocis-net - ocis-net
environment: environment:
aliasgroup1: https://${WOPISERVER_DOMAIN:-wopiserver.owncloud.test}:443 aliasgroup1: https://${WOPISERVER_DOMAIN}:443
DONT_GEN_SSL_CERT: "YES" DONT_GEN_SSL_CERT: "YES"
extra_params: --o:ssl.enable=false --o:ssl.termination=true --o:welcome.enable=false --o:net.frame_ancestors=${OCIS_DOMAIN:-ocis.owncloud.test} extra_params: --o:ssl.enable=false --o:ssl.termination=true --o:welcome.enable=false --o:net.frame_ancestors=${OCIS_DOMAIN}
username: ${COLLABORA_ADMIN_USER} username: ${COLLABORA_ADMIN_USER}
password: ${COLLABORA_ADMIN_PASSWORD} password: ${COLLABORA_ADMIN_PASSWORD}
cap_add: cap_add:
@ -217,7 +217,7 @@ services:
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.collabora.entrypoints=https" - "traefik.http.routers.collabora.entrypoints=https"
- "traefik.http.routers.collabora.rule=Host(`${COLLABORA_DOMAIN:-collabora.owncloud.test}`)" - "traefik.http.routers.collabora.rule=Host(`${COLLABORA_DOMAIN}`)"
- "traefik.http.routers.collabora.tls.certresolver=http" - "traefik.http.routers.collabora.tls.certresolver=http"
- "traefik.http.routers.collabora.service=collabora" - "traefik.http.routers.collabora.service=collabora"
- "traefik.http.services.collabora.loadbalancer.server.port=9980" - "traefik.http.services.collabora.loadbalancer.server.port=9980"
@ -234,14 +234,14 @@ services:
- /entrypoint-override.sh - /entrypoint-override.sh
environment: environment:
WOPI_ENABLED: "true" WOPI_ENABLED: "true"
USE_UNAUTHORIZED_STORAGE: "${INSECURE:-false}" # self signed certificates USE_UNAUTHORIZED_STORAGE: "${INSECURE}" # self signed certificates
volumes: volumes:
- ./config/onlyoffice/entrypoint-override.sh:/entrypoint-override.sh - ./config/onlyoffice/entrypoint-override.sh:/entrypoint-override.sh
- ./config/onlyoffice/local.json:/etc/onlyoffice/documentserver/local.dist.json - ./config/onlyoffice/local.json:/etc/onlyoffice/documentserver/local.dist.json
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.onlyoffice.entrypoints=https" - "traefik.http.routers.onlyoffice.entrypoints=https"
- "traefik.http.routers.onlyoffice.rule=Host(`${ONLYOFFICE_DOMAIN:-onlyoffice.owncloud.test}`)" - "traefik.http.routers.onlyoffice.rule=Host(`${ONLYOFFICE_DOMAIN}`)"
- "traefik.http.routers.onlyoffice.tls.certresolver=http" - "traefik.http.routers.onlyoffice.tls.certresolver=http"
- "traefik.http.routers.onlyoffice.service=onlyoffice" - "traefik.http.routers.onlyoffice.service=onlyoffice"
- "traefik.http.services.onlyoffice.loadbalancer.server.port=80" - "traefik.http.services.onlyoffice.loadbalancer.server.port=80"
@ -273,7 +273,7 @@ services:
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.inbucket.entrypoints=https" - "traefik.http.routers.inbucket.entrypoints=https"
- "traefik.http.routers.inbucket.rule=Host(`${INBUCKET_DOMAIN:-mail.owncloud.test}`)" - "traefik.http.routers.inbucket.rule=Host(`${INBUCKET_DOMAIN}`)"
- "traefik.http.routers.inbucket.tls.certresolver=http" - "traefik.http.routers.inbucket.tls.certresolver=http"
- "traefik.http.routers.inbucket.service=inbucket" - "traefik.http.routers.inbucket.service=inbucket"
- "traefik.http.services.inbucket.loadbalancer.server.port=9000" - "traefik.http.services.inbucket.loadbalancer.server.port=9000"