thesabear
bebcd714af
Replaces rocky-docker-lxc/, caddy-vm/, monitoring-vm/, and automation/ with a single stacks/ tree grouped by function (identity-and-security, platform, media, productivity, dev-tools) - 55 stacks total, every one a real directory in the private repos today. Resolves all outstanding drift: adds Wazuh (previously entirely missing), Firefly III and Postiz (never mirrored), the internal-zone Caddy instance and the Cron Scheduler's separate NocoDB instance (both previously conflated with their counterparts under one shared folder); renames Calibre-Web to calibre-web-automated and splits Kodi-MariaDB into kodi + mariadb-latest to match what the private repos actually run now; drops the decommissioned NetBox stack. Also removes automation/iac/old-content/ and automation/ansible/old-playbooks/ in the same pass - both folders were entirely stale content describing a superseded architecture (GitLab instead of Gitea, HAProxy+mTLS SSO instead of the current Caddy+Authentik setup), now replaced by docs/iac-pipeline.md.
77 lines
2.1 KiB
YAML
77 lines
2.1 KiB
YAML
services:
|
|
broker:
|
|
image: docker.io/library/redis:7
|
|
container_name: paperless-redis
|
|
restart: unless-stopped
|
|
volumes:
|
|
- /path/to/paperless/redisdata:/data
|
|
networks:
|
|
- paperless-net
|
|
|
|
db:
|
|
image: docker.io/library/postgres:15
|
|
container_name: paperless-postgres
|
|
restart: unless-stopped
|
|
volumes:
|
|
- /path/to/paperless/pgdata:/var/lib/postgresql/data
|
|
environment:
|
|
POSTGRES_DB: ${POSTGRES_DB}
|
|
POSTGRES_USER: ${POSTGRES_USER}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
networks:
|
|
- paperless-net
|
|
|
|
webserver:
|
|
image: ghcr.io/paperless-ngx/paperless-ngx:latest
|
|
container_name: paperless
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- db
|
|
- broker
|
|
- gotenberg
|
|
- tika
|
|
ports:
|
|
- "${HTTP_PORT}:8000"
|
|
volumes:
|
|
- /path/to/paperless/data:/usr/src/paperless/data
|
|
- /path/to/paperless/media:/usr/src/paperless/media
|
|
- /path/to/paperless/export:/usr/src/paperless/export
|
|
- /path/to/paperless/consume:/usr/src/paperless/consume
|
|
env_file: .env
|
|
environment:
|
|
PAPERLESS_REDIS: redis://broker:6379
|
|
PAPERLESS_DBHOST: db
|
|
PAPERLESS_DBPASS: ${PAPERLESS_DBPASS}
|
|
PAPERLESS_TIKA_ENABLED: 1
|
|
PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
|
|
PAPERLESS_TIKA_ENDPOINT: http://tika:9998
|
|
PAPERLESS_URL: ${PAPERLESS_URL}
|
|
PAPERLESS_ADMIN_USER: ${PAPERLESS_ADMIN_USER}
|
|
PAPERLESS_ADMIN_PASSWORD: ${PAPERLESS_ADMIN_PASSWORD}
|
|
networks:
|
|
- paperless-net
|
|
|
|
gotenberg:
|
|
image: docker.io/gotenberg/gotenberg:7.10
|
|
container_name: paperless-gotenberg
|
|
restart: unless-stopped
|
|
# The gotenberg chromium route is used to convert .eml files. We do not
|
|
# want to allow external content like tracking pixels or even javascript.
|
|
command:
|
|
- "gotenberg"
|
|
- "--chromium-disable-javascript=true"
|
|
- "--chromium-allow-list=file:///tmp/.*"
|
|
networks:
|
|
- paperless-net
|
|
|
|
tika:
|
|
image: docker.io/apache/tika:latest
|
|
container_name: paperless-tika
|
|
restart: unless-stopped
|
|
networks:
|
|
- paperless-net
|
|
|
|
networks:
|
|
paperless-net:
|
|
external: true
|