From f190abf85e6fb18fe9653969e7b019865cb437ef Mon Sep 17 00:00:00 2001 From: "Radu C. Martin" Date: Wed, 21 May 2025 09:48:48 +0200 Subject: [PATCH] feat: initial commit --- docker-compose.yml | 39 +++++++++++++++++++++++++++++++++++++++ renovate.json | 5 +++++ 2 files changed, 44 insertions(+) create mode 100644 docker-compose.yml create mode 100644 renovate.json diff --git a/docker-compose.yml b/docker-compose.yml new file mode 100644 index 0000000..49c42c5 --- /dev/null +++ b/docker-compose.yml @@ -0,0 +1,39 @@ +services: + linkstack: + # The version tags are not really friendly, unfortunately... so might as well follow latest + image: 'linkstackorg/linkstack:latest@sha256:abd691b4293b020a317de8794737671e0315159efcb868e8a4124d6f0611f7ae' + environment: + TZ: 'Europe/Zurich' + SERVER_ADMIN: '${DC_LINKSTACK_ADMIN_EMAIL:?}' + HTTP_SERVER_NAME: '${DC_LINKSTACK_HOSTNAME:?}' + LOG_LEVEL: 'info' + PHP_MEMORY_LIMIT: '256M' + UPLOAD_MAX_FILESIZE: '8M' + volumes: + - data:/htdocs + restart: unless-stopped + + labels: + - "traefik.enable=true" + - "traefik.http.routers.linkstack-ui.rule=Host(`${DC_LINKSTACK_HOSTNAME:?}`) || Host(`www.${DC_LINKSTACK_HOSTNAME:?}`)" + - "traefik.http.routers.linkstack-ui.entrypoints=websecure" + - "traefik.http.routers.linkstack-ui.tls=true" + - "traefik.http.routers.linkstack-ui.tls.certresolver=le" + - "traefik.http.routers.linkstack-ui.service=linkstack-ui" + - "traefik.http.services.linkstack-ui.loadBalancer.server.port=443" + - "traefik.http.services.linkstack-ui.loadbalancer.server.scheme=https" + - "traefik.http.routers.linkstack-ui.middlewares=linkstack-head" + - "traefik.http.middlewares.linkstack-head.headers.customrequestheaders.X-Forwarded-Proto=https" + - "traefik.http.middlewares.linkstack-head.headers.customResponseHeaders.X-Robots-Tag=none" + - "traefik.http.middlewares.linkstack-head.headers.customResponseHeaders.Strict-Transport-Security=max-age=63072000" + - "traefik.http.middlewares.linkstack-head.headers.stsSeconds=31536000" + - "traefik.http.middlewares.linkstack-head.headers.accesscontrolalloworiginlist=*" + networks: + - traefik + +volumes: + data: + +networks: + traefik: + external: true diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..bb37008 --- /dev/null +++ b/renovate.json @@ -0,0 +1,5 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": ["local>renovate/renovate"], + "ignoreTests": true +}