feat: initial commit

docker-compose.yml

@@ -0,0 +1,39 @@
+services:
+  linkstack:
+    # The version tags are not really friendly, unfortunately... so might as well follow latest
+    image: 'linkstackorg/linkstack:latest@sha256:abd691b4293b020a317de8794737671e0315159efcb868e8a4124d6f0611f7ae'
+    environment:
+      TZ: 'Europe/Zurich'
+      SERVER_ADMIN: '${DC_LINKSTACK_ADMIN_EMAIL:?}'
+      HTTP_SERVER_NAME: '${DC_LINKSTACK_HOSTNAME:?}'
+      LOG_LEVEL: 'info'
+      PHP_MEMORY_LIMIT: '256M'
+      UPLOAD_MAX_FILESIZE: '8M'
+    volumes:
+      - data:/htdocs
+    restart: unless-stopped
+
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.linkstack-ui.rule=Host(`${DC_LINKSTACK_HOSTNAME:?}`) || Host(`www.${DC_LINKSTACK_HOSTNAME:?}`)"
+      - "traefik.http.routers.linkstack-ui.entrypoints=websecure"
+      - "traefik.http.routers.linkstack-ui.tls=true"
+      - "traefik.http.routers.linkstack-ui.tls.certresolver=le"
+      - "traefik.http.routers.linkstack-ui.service=linkstack-ui"
+      - "traefik.http.services.linkstack-ui.loadBalancer.server.port=443"
+      - "traefik.http.services.linkstack-ui.loadbalancer.server.scheme=https"
+      - "traefik.http.routers.linkstack-ui.middlewares=linkstack-head"
+      - "traefik.http.middlewares.linkstack-head.headers.customrequestheaders.X-Forwarded-Proto=https"
+      - "traefik.http.middlewares.linkstack-head.headers.customResponseHeaders.X-Robots-Tag=none"
+      - "traefik.http.middlewares.linkstack-head.headers.customResponseHeaders.Strict-Transport-Security=max-age=63072000"
+      - "traefik.http.middlewares.linkstack-head.headers.stsSeconds=31536000"
+      - "traefik.http.middlewares.linkstack-head.headers.accesscontrolalloworiginlist=*"
+    networks:
+      - traefik
+
+volumes:
+  data:
+
+networks:
+  traefik:
+    external: true

renovate.json

@@ -0,0 +1,5 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>renovate/renovate"],
+  "ignoreTests": true
+}