66 lines
1.6 KiB
YAML
66 lines
1.6 KiB
YAML
services:
|
|
companion:
|
|
image: quay.io/invidious/invidious-companion:latest
|
|
restart: unless-stopped
|
|
cap_drop:
|
|
- ALL
|
|
read_only: true
|
|
volumes:
|
|
- ./config.toml:/app/config/config.toml:ro
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
environment:
|
|
SERVER_SECRET_KEY: "${COMPANION_SECRET_KEY}"
|
|
# Uncomment if using gluetun
|
|
# network_mode: "service:gluetun"
|
|
# depends_on: [gluetun]
|
|
|
|
acme:
|
|
image: neilpang/acme.sh:latest # https://github.com/acmesh-official/acme.sh/wiki/Run-acme.sh-in-docker
|
|
restart: unless-stopped
|
|
volumes:
|
|
- acme-data:/acme.sh
|
|
- ssl-certs:/etc/ssl
|
|
- ./html:/var/www/html
|
|
command: daemon
|
|
|
|
nginx:
|
|
image: nginx:alpine-slim # https://hub.docker.com/_/nginx
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./nginx:/etc/nginx
|
|
- ./html:/var/www/html:ro
|
|
- ssl-certs:/etc/ssl:ro
|
|
ports: # IPs that accept client (HTTP) connections
|
|
- "${NGINX_IPV4}:80:80"
|
|
- "[${NGINX_IPV6}]:80:80"
|
|
- "${NGINX_IPV4}:443:443"
|
|
- "[${NGINX_IPV6}]:443:443"
|
|
- "${NGINX_IPV4}:443:443/udp"
|
|
- "[${NGINX_IPV6}]:443:443/udp"
|
|
|
|
# Uncomment to use gluetun
|
|
# gluetun:
|
|
# image: qmcgaw/gluetun
|
|
# cap_add:
|
|
# - NET_ADMIN
|
|
# devices:
|
|
# - /dev/net/tun:/dev/net/tun
|
|
# volumes:
|
|
# - ./wg0.conf:/gluetun/wireguard/wg0.conf:ro
|
|
# environment:
|
|
# - VPN_SERVICE_PROVIDER=custom
|
|
# - VPN_TYPE=wireguard
|
|
|
|
volumes:
|
|
acme-data:
|
|
ssl-certs:
|
|
|
|
# Comment all that if you don't use IPv6
|
|
networks:
|
|
default:
|
|
enable_ipv6: true
|
|
ipam:
|
|
config:
|
|
- subnet: 2001:db9::/112
|
|
gateway: 2001:db9::1
|