rust-codebase/docker-compose.yml at main · nxdun/rust-codebase · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70

# Production docker-compose file: refer to infra/common/cloud-init.template

name: nadzu
services:
  warp:
    image: nxdun/cloudflare-warp-proxy:latest
    restart: unless-stopped

    # ADD NET_ADMIN capability and mount /dev/net/tun for WireGuard support

    # cap_add:
    #   - NET_ADMIN
    # devices:
    #   - /dev/net/tun:/dev/net/tun

  app:
    image: ${GHCR_IMAGE}
    restart: unless-stopped
    depends_on:
      - warp
    volumes:
      - "./production/downloads:/home/app/downloads"
    env_file:
      - .env
    environment:
      - HTTP_PROXY=socks5h://warp:40000
      - HTTPS_PROXY=socks5h://warp:40000
      - ALL_PROXY=socks5h://warp:40000
      - NO_PROXY=localhost,127.0.0.1,app,warp,caddy,prometheus,grafana

  caddy:
    image: caddy:2-alpine
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - Caddyfile:/etc/caddy/Caddyfile:ro
      - ./infra/common/certs:/etc/caddy/certs:ro
      - ./infra/common/browse.html:/etc/caddy/browse.html:ro
      - "./production/downloads:/home/app/downloads:ro"
    depends_on:
      - app

  prometheus:
    image: prom/prometheus:latest
    restart: unless-stopped
    volumes:
      - <prometheus.yml-path>:/etc/prometheus/prometheus.yml

  grafana:
    image: grafana/grafana:latest
    restart: unless-stopped
    environment:
      - GF_AUTH_ANONYMOUS_ENABLED=true
      - GF_AUTH_ANONYMOUS_ORG_ROLE=Viewer
      - GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER}
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD}
      - GF_USERS_ALLOW_SIGN_UP=false
      - GF_SERVER_SERVE_FROM_SUB_PATH=true
      - GF_SERVER_ROOT_URL=https://${PRODUCTION_DOMAIN}/nadun/grafana/
      - GF_ANALYTICS_REPORTING_ENABLED=false
      - GF_ANALYTICS_CHECK_FOR_UPDATES=false
      - GF_DASHBOARDS_NEWS_FEED_ENABLED=false
    volumes:
      - <grafana-provisioning-folder>:/etc/grafana/provisioning
    depends_on:
      - prometheus