docker-compose environment for the entire v.st system
https://v.st/
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
130 lines
3.0 KiB
130 lines
3.0 KiB
MODULES += nginx
|
|
MODULES += keycloak
|
|
MODULES += hedgedoc
|
|
MODULES += grafana
|
|
MODULES += prometheus
|
|
MODULES += mastodon
|
|
MODULES += matrix
|
|
MODULES += nextcloud
|
|
MODULES += mobilizon
|
|
MODULES += gitea
|
|
MODULES += nitter
|
|
MODULES += pixelfed
|
|
MODULES += bookwyrm
|
|
|
|
include env.production
|
|
domain_name := $(DOMAIN_NAME)
|
|
|
|
|
|
help:
|
|
@echo "usage: make run"
|
|
UC = $(shell echo '$1' | tr '[:lower:]' '[:upper:]')
|
|
|
|
DOCKER = \
|
|
$(foreach m,$(MODULES),. secrets/$m && ) \
|
|
docker-compose \
|
|
--env-file env.production \
|
|
$(foreach m,$(MODULES),--file ./$m.yaml) \
|
|
|
|
run:
|
|
$(DOCKER) up
|
|
down:
|
|
$(DOCKER) down
|
|
nginx-shell:
|
|
$(DOCKER) exec nginx sh
|
|
nginx-logs:
|
|
$(DOCKER) logs -f --tail 1000 nginx
|
|
mastodon-logs:
|
|
$(DOCKER) logs -f --tail 1000 mastodon
|
|
grafana-shell:
|
|
$(DOCKER) exec grafana bash
|
|
hedgedoc-shell:
|
|
$(DOCKER) exec hedgedoc sh
|
|
keycloak-shell:
|
|
$(DOCKER) exec keycloak sh
|
|
keycloak-rebuild:
|
|
$(DOCKER) create keycloak
|
|
$(DOCKER) restart keycloak
|
|
mastodon-es-rebuild:
|
|
$(DOCKER) create mastodon-es
|
|
$(DOCKER) restart mastodon-es
|
|
mastodon-shell:
|
|
$(DOCKER) exec mastodon bash
|
|
mastodon-streaming-shell:
|
|
$(DOCKER) exec mastodon-streaming bash
|
|
matrix-shell:
|
|
$(DOCKER) exec matrix-synapse bash
|
|
nextcloud-shell:
|
|
$(DOCKER) exec nextcloud bash
|
|
matrix-logs:
|
|
$(DOCKER) logs --tail 100 -f matrix-synapse
|
|
nextcloud-logs:
|
|
$(DOCKER) logs -f nextcloud
|
|
nginx-build: secrets/nginx
|
|
$(DOCKER) build nginx
|
|
|
|
certdir = ./data/certbot/conf/live/${DOMAIN_NAME}
|
|
|
|
run: secrets-setup
|
|
|
|
secrets-setup: $(foreach m,$(MODULES),secrets/$m)
|
|
|
|
# Create the per-subdomain secrets if they don't exist
|
|
# not every service requires all of these features, but create them anyway
|
|
GET_MODULE = $(call UC,$(word 2,$(subst /, ,$@)))
|
|
RAND = $$(openssl rand -hex $1)
|
|
|
|
secrets/%:
|
|
mkdir -p $(dir $@)
|
|
echo >$@ "# DO NOT CHECK IN"
|
|
echo >>$@ "export $(GET_MODULE)_ADMIN_PASSWORD=$(call RAND,8)"
|
|
echo >>$@ "export $(GET_MODULE)_CLIENT_SECRET=$(call RAND,20)"
|
|
echo >>$@ "export $(GET_MODULE)_SESSION_SECRET=$(call RAND,20)"
|
|
|
|
secrets/gitea: data/gitea/host-setup.done
|
|
data/gitea/host-setup.done:
|
|
sudo ./gitea/host-setup.sh
|
|
mkdir -p $(dir $@)
|
|
touch $@
|
|
|
|
secrets/pixelfed: secrets/pixelfed.app
|
|
secrets/pixelfed.app:
|
|
echo 'APP_KEY=base64:$(shell openssl rand -base64 32)' > $@
|
|
|
|
keycloak-setup: secrets-setup
|
|
docker exec keycloak /setup.sh
|
|
|
|
# Determine the extra hostnames that need to be included in the SSL cert
|
|
# see sites/README.md for an explanation of how to add additional sites
|
|
EXTRA_HOSTNAMES=$(foreach f,$(wildcard sites/*.conf),$(notdir $(f:.conf=)))
|
|
|
|
certbot:
|
|
$(DOCKER) \
|
|
run --entrypoint '/bin/sh -c "\
|
|
rm -rf /etc/letsencrypt ; \
|
|
certbot certonly \
|
|
--webroot \
|
|
--webroot-path /var/www/certbot \
|
|
--email "admin@$(DOMAIN_NAME)" \
|
|
--rsa-key-size "2048" \
|
|
--agree-tos \
|
|
--no-eff-email \
|
|
--force-renewal \
|
|
-d $(DOMAIN_NAME) \
|
|
$(foreach m,$(MODULES),\
|
|
-d $($(call UC,$m)_HOSTNAME).$(DOMAIN_NAME)) \
|
|
$(foreach m,$(EXTRA_HOSTNAMES),\
|
|
-d $m) \
|
|
"' certbot
|
|
|
|
|
|
nginx-reload:
|
|
$(DOCKER) restart nginx
|
|
nextcloud-restart:
|
|
$(DOCKER) restart nextcloud
|
|
|
|
|
|
config:
|
|
$(DOCKER) config
|
|
|
|
FORCE:
|
|
|