-refactor file names .yml

-update gitignore for all .env -segment docker-compose.ymls in folders for each app instead of one mega .yml
2026-02-10 14:55:12 +00:00 · 2023-10-31 10:56:05 -07:00
parent 47b19d5e33
commit 4b0279c689
14 changed files with 175 additions and 351 deletions
--- a/nextcloud/Dockerfile
+++ b/nextcloud/Dockerfile
@@ -0,0 +1,60 @@
+FROM nextcloud:apache
+
+RUN set -ex; \
+    \
+    apt-get update; \
+    apt-get install -y --no-install-recommends \
+        ffmpeg \
+        ghostscript \
+        libmagickcore-6.q16-6-extra \
+        procps \
+        smbclient \
+        supervisor \
+#       libreoffice \
+    ; \
+    rm -rf /var/lib/apt/lists/*
+
+RUN set -ex; \
+    \
+    savedAptMark="$(apt-mark showmanual)"; \
+    \
+    apt-get update; \
+    apt-get install -y --no-install-recommends \
+        libbz2-dev \
+        libc-client-dev \
+        libkrb5-dev \
+        libsmbclient-dev \
+    ; \
+    \
+    docker-php-ext-configure imap --with-kerberos --with-imap-ssl; \
+    docker-php-ext-install \
+        bz2 \
+        imap \
+    ; \
+    pecl install smbclient; \
+    docker-php-ext-enable smbclient; \
+    \
+# reset apt-mark's "manual" list so that "purge --auto-remove" will remove all build dependencies
+    apt-mark auto '.*' > /dev/null; \
+    apt-mark manual $savedAptMark; \
+    ldd "$(php -r 'echo ini_get("extension_dir");')"/*.so \
+        | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' \
+        | sort -u \
+        | xargs -r dpkg-query --search \
+        | cut -d: -f1 \
+        | sort -u \
+        | xargs -rt apt-mark manual; \
+    \
+    apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
+    rm -rf /var/lib/apt/lists/*
+
+RUN mkdir -p \
+    /var/log/supervisord \
+    /var/run/supervisord \
+;
+
+COPY supervisord.conf /
+
+ENV NEXTCLOUD_UPDATE=1
+
+CMD ["/usr/bin/supervisord", "-c", "/supervisord.conf"]
--- a/nextcloud/docker-compose.yml
+++ b/nextcloud/docker-compose.yml
@@ -0,0 +1,75 @@
+version: '3'
+
+services:
+   # MySQL service for Nextcloud
+  mysql-nextcloud:
+    image: mysql:latest
+    restart: always
+    environment:
+      MYSQL_DATABASE: ${NEXTCLOUD_DB_NAME} # Set Nextcloud database name
+      MYSQL_USER: ${NEXTCLOUD_DB_USER} # Set Nextcloud database user
+      MYSQL_ROOT_PASSWORD: ${NEXTCLOUD_DB_ROOT_PASSWORD} # Set MySQL root password
+      MYSQL_PASSWORD: ${NEXTCLOUD_DB_PASSWORD} # Set Nextcloud database password
+    hostname: mysql-nextcloud # Set hostname for MySQL container
+    volumes:
+      - /opt/storagemysql-nextcloud:/var/lib/mysql # Mount MySQL data directory
+    networks:
+      - traefik # Use external network named "traefik"
+
+  # Nextcloud service
+  nextcloud:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: nextcloud-full:latest
+    # image: nextcloud:latest
+    restart: always
+    hostname: nextcloud # Set hostname for Nextcloud container
+    environment:
+      VIRTUAL_HOST: ${NEXTCLOUD_HOST} # Set virtual host for Nextcloud
+      MYSQL_HOST: mysql-nextcloud # Set MySQL host for Nextcloud
+      MYSQL_DATABASE: ${NEXTCLOUD_DB_NAME} # Set Nextcloud database name
+      MYSQL_USER: ${NEXTCLOUD_DB_USER} # Set Nextcloud database user
+      MYSQL_PASSWORD: ${NEXTCLOUD_DB_PASSWORD} # Set Nextcloud database password
+      NEXTCLOUD_ADMIN_USER: ${NEXTCLOUD_ADMIN_USER} # Set Nextcloud admin user
+      NEXTCLOUD_ADMIN_PASSWORD: ${NEXTCLOUD_ADMIN_PASSWORD} # Set Nextcloud admin password
+      NEXTCLOUD_TRUSTED_DOMAINS: ${NEXTCLOUD_HOST} # Set trusted domains for Nextcloud
+    volumes:
+      - /opt/storagenextcloud/data:/var/www/html # Mount Nextcloud data directory
+      - /opt/storagenextcloud/config:/var/www/html/config # Mount Nextcloud config directory
+    labels:
+      - "traefik.enable=true" # Enable Traefik for this service
+      - "traefik.http.routers.nextcloud.rule=Host(`${NEXTCLOUD_HOST}`)" # Route Nextcloud to specified host
+      - "traefik.http.routers.nextcloud.entrypoints=websecure" # Use HTTPS entrypoint for Nextcloud
+      - "traefik.http.routers.nextcloud.tls=true" # Enable TLS for Nextcloud
+      - "traefik.http.services.ghost.loadbalancer.server.port=80" # Set load balancer port for Nextcloud
+      - "traefik.http.routers.nextcloud.tls.certresolver=myresolver" # Use Let's Encrypt resolver for Nextcloud
+      - "traefik.http.routers.nextcloud.middlewares=nc-rep,nc-header" # Use redirect and header middlewares for Nextcloud
+      - "traefik.http.middlewares.nc-rep.redirectregex.regex=https://(.*)/.well-known/(card|cal)dav" # Set regex for redirect middleware
+      - "traefik.http.middlewares.nc-rep.redirectregex.replacement=https://$$1/remote.php/dav/" # Set replacement for redirect middleware
+      - "traefik.http.middlewares.nc-rep.redirectregex.permanent=true" # Set redirect as permanent
+      - "traefik.http.middlewares.nc-header.headers.frameDeny=true" # Set header for frame deny
+      - "traefik.http.middlewares.nc-header.headers.sslRedirect=true" # Set header for SSL redirect
+      - "traefik.http.middlewares.nc-header.headers.contentTypeNosniff=true" # Set header for content type nosniff
+      - "traefik.http.middlewares.nc-header.headers.stsIncludeSubdomains=true" # Set header for STS include subdomains
+      - "traefik.http.middlewares.nc-header.headers.stsPreload=true" # Set header for STS preload
+      - "traefik.http.middlewares.nc-header.headers.stsSeconds=31536000" # Set header for STS seconds
+      - "traefik.http.middlewares.nc-header.headers.referrerPolicy=same-origin" # Set header for referrer policy
+      - "traefik.http.middlewares.nc-header.headers.browserXssFilter=true" # Set header for browser XSS filter
+      - "traefik.http.middlewares.nc-header.headers.customRequestHeaders.X-Forwarded-Proto=https" # Set custom request header for X-Forwarded-Proto
+      - "traefik.http.middlewares.nc-header.headers.customRequestHeaders.X-Forwarded-Proto=websecure" # Set custom request header for X-Forwarded-Proto
+      - "traefik.http.middlewares.nc-header.headers.customResponseHeaders.X-Robots-Tag=noindex, nofollow" # Set custom response header for X-Robots-Tag
+      - "traefik.http.middlewares.nc-header.headers.customFrameOptionsValue=SAMEORIGIN" # Set custom frame options value
+      # - "traefik.http.routers.nextcloud.middlewares: 'nextcloud_redirectregex'"
+      # - "traefik.http.middlewares.nextcloud_redirectregex.redirectregex.permanent: true"
+
+    networks:
+      - traefik # Use external network named "traefik"
+
+
+
+networks:
+  traefik:
+    external: true # Use external network named "traefik"
+
+
--- a/nextcloud/docker-env.env.example
+++ b/nextcloud/docker-env.env.example
@@ -0,0 +1,14 @@
+<!-- This file contains environment variables for configuring Traefik, Nextcloud, and Ghost services. The variables include domain names, passwords, and database names. The commented out sections include configuration for Prometheus and Grafana services. -->
+
+
+# Nextcloud configuration
+NEXTCLOUD_DOMAIN=cloud.example.com
+NEXTCLOUD_ADMIN_USER=admin
+NEXTCLOUD_ADMIN_PASSWORD=Password123!
+NEXTCLOUD_TRUSTED_DOMAINS=cloud.example.com
+NEXTCLOUD_DB_NAME=nextcloud_db
+NEXTCLOUD_DB_USER=nextcloud_user
+NEXTCLOUD_DB_ROOT_PASSWORD=nextcloud_mysql
+NEXTCLOUD_DB_PASSWORD=nextcloud_mysql
+NEXTCLOUD_HOST=cloud.example.com
+
--- a/nextcloud/supervisord.conf
+++ b/nextcloud/supervisord.conf
@@ -0,0 +1,22 @@
+[supervisord]
+nodaemon=true
+logfile=/var/log/supervisord/supervisord.log
+pidfile=/var/run/supervisord/supervisord.pid
+childlogdir=/var/log/supervisord/
+logfile_maxbytes=50MB                           ; maximum size of logfile before rotation
+logfile_backups=10                              ; number of backed up logfiles
+loglevel=error
+
+[program:apache2]
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+command=apache2-foreground
+
+[program:cron]
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+command=/cron.sh