thesabear
55a8410474
Several of these had drifted so far they were unrecognizable (Nextcloud was a bare minio stub, Ollama was missing the ollama service entirely, Immich was missing 2 of 4 services). Also removed a real, exposed Authentik OAuth client_id/secret that was sitting in Paperless-NGX's entry (confirmed stale/rotated already, but shouldn't have been public regardless) and stripped internal Caddy CA trust details from every file per the same rule applied to nocodb/dashy etc.
77 lines
2.1 KiB
YAML
77 lines
2.1 KiB
YAML
services:
|
|
broker:
|
|
image: docker.io/library/redis:7
|
|
container_name: paperless-redis
|
|
restart: unless-stopped
|
|
volumes:
|
|
- /path/to/paperless/redisdata:/data
|
|
networks:
|
|
- paperless-net
|
|
|
|
db:
|
|
image: docker.io/library/postgres:15
|
|
container_name: paperless-postgres
|
|
restart: unless-stopped
|
|
volumes:
|
|
- /path/to/paperless/pgdata:/var/lib/postgresql/data
|
|
environment:
|
|
POSTGRES_DB: ${POSTGRES_DB}
|
|
POSTGRES_USER: ${POSTGRES_USER}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
networks:
|
|
- paperless-net
|
|
|
|
webserver:
|
|
image: ghcr.io/paperless-ngx/paperless-ngx:latest
|
|
container_name: paperless
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- db
|
|
- broker
|
|
- gotenberg
|
|
- tika
|
|
ports:
|
|
- "${HTTP_PORT}:8000"
|
|
volumes:
|
|
- /path/to/paperless/data:/usr/src/paperless/data
|
|
- /path/to/paperless/media:/usr/src/paperless/media
|
|
- /path/to/paperless/export:/usr/src/paperless/export
|
|
- /path/to/paperless/consume:/usr/src/paperless/consume
|
|
env_file: .env
|
|
environment:
|
|
PAPERLESS_REDIS: redis://broker:6379
|
|
PAPERLESS_DBHOST: db
|
|
PAPERLESS_DBPASS: ${PAPERLESS_DBPASS}
|
|
PAPERLESS_TIKA_ENABLED: 1
|
|
PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
|
|
PAPERLESS_TIKA_ENDPOINT: http://tika:9998
|
|
PAPERLESS_URL: ${PAPERLESS_URL}
|
|
PAPERLESS_ADMIN_USER: ${PAPERLESS_ADMIN_USER}
|
|
PAPERLESS_ADMIN_PASSWORD: ${PAPERLESS_ADMIN_PASSWORD}
|
|
networks:
|
|
- paperless-net
|
|
|
|
gotenberg:
|
|
image: docker.io/gotenberg/gotenberg:7.10
|
|
container_name: paperless-gotenberg
|
|
restart: unless-stopped
|
|
# The gotenberg chromium route is used to convert .eml files. We do not
|
|
# want to allow external content like tracking pixels or even javascript.
|
|
command:
|
|
- "gotenberg"
|
|
- "--chromium-disable-javascript=true"
|
|
- "--chromium-allow-list=file:///tmp/.*"
|
|
networks:
|
|
- paperless-net
|
|
|
|
tika:
|
|
image: docker.io/apache/tika:latest
|
|
container_name: paperless-tika
|
|
restart: unless-stopped
|
|
networks:
|
|
- paperless-net
|
|
|
|
networks:
|
|
paperless-net:
|
|
external: true
|