1815beadf4
- Add compose stacks for apps already proxied by Caddy: bento-pdf,
it-tools, paperless-ngx, and beszel-hub (with Makefile targets)
- Remove the unused Vault stack and the drawio Caddyfile block
- Fix Caddyfile gramps upstream to port 80 to match the compose file
- Bring immich and gramps-web up to the shared template pattern
(no-new-privileges, log rotation, memory limits, healthchecks)
- Single-quote vaultwarden SSO_AUDIENCE_TRUSTED so regex values like
^\d{18}$ render as valid YAML
- Move root docs into kebab-case topic folders, rebuild the docs index
to cover every doc, and fix all broken links
104 lines
2.8 KiB
YAML
104 lines
2.8 KiB
YAML
services:
|
|
grampsweb: &grampsweb
|
|
image: ghcr.io/gramps-project/grampsweb:latest
|
|
restart: unless-stopped
|
|
ports:
|
|
- "80:5000"
|
|
networks:
|
|
- gramps_network
|
|
environment:
|
|
TZ: "{{TZ}}"
|
|
GRAMPSWEB_SECRET_KEY: "{{SECRET_KEY}}"
|
|
GRAMPSWEB_USER_DB_URI: "{{USER_DB_URI}}"
|
|
GRAMPSWEB_BASE_URL: "{{BASE_URL}}"
|
|
GRAMPSWEB_CELERY_CONFIG__broker_url: "redis://grampsweb_redis:6379/0"
|
|
GRAMPSWEB_CELERY_CONFIG__result_backend: "redis://grampsweb_redis:6379/0"
|
|
GRAMPSWEB_RATELIMIT_STORAGE_URI: redis://grampsweb_redis:6379/1
|
|
depends_on:
|
|
- grampsweb_redis
|
|
volumes:
|
|
- /etc/localtime:/etc/localtime:ro
|
|
- gramps_users:/app/users
|
|
- gramps_index:/app/indexdir
|
|
- gramps_thumb_cache:/app/thumbnail_cache
|
|
- gramps_cache:/app/cache
|
|
- gramps_secret:/app/secret
|
|
- gramps_db:/root/.gramps/grampsdb
|
|
- /mnt/gramps_media:/app/media # persist media files
|
|
- ./gramps_config/config.cfg:/app/config/config.cfg:ro
|
|
- gramps_data:/var/lib/gramps
|
|
tmpfs:
|
|
- /tmp
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "python3 -c \"import urllib.request; urllib.request.urlopen('http://localhost:5000/')\" || exit 1"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 60s
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 2G
|
|
reservations:
|
|
memory: 512M
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-file: "{{DOCKERLOGGING_MAXFILE}}"
|
|
max-size: "{{DOCKERLOGGING_MAXSIZE}}"
|
|
|
|
grampsweb_celery:
|
|
!!merge <<: *grampsweb # YAML merge key copying the entire grampsweb service config
|
|
ports: []
|
|
container_name: grampsweb_celery
|
|
depends_on:
|
|
- grampsweb
|
|
- grampsweb_redis
|
|
command: celery -A gramps_webapi.celery worker --loglevel=INFO --concurrency=2
|
|
# The web healthcheck inherited from the anchor does not apply to a worker.
|
|
healthcheck:
|
|
disable: true
|
|
|
|
grampsweb_redis:
|
|
image: docker.io/library/redis:7.2.4-alpine
|
|
container_name: grampsweb_redis
|
|
restart: unless-stopped
|
|
networks:
|
|
- gramps_network
|
|
volumes:
|
|
- /etc/localtime:/etc/localtime:ro
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "redis-cli ping || exit 1"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 256M
|
|
reservations:
|
|
memory: 32M
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-file: "{{DOCKERLOGGING_MAXFILE}}"
|
|
max-size: "{{DOCKERLOGGING_MAXSIZE}}"
|
|
|
|
networks:
|
|
gramps_network:
|
|
driver: bridge
|
|
name: gramps_network
|
|
|
|
volumes:
|
|
gramps_users:
|
|
gramps_index:
|
|
gramps_thumb_cache:
|
|
gramps_cache:
|
|
gramps_secret:
|
|
gramps_db:
|
|
gramps_data:
|