Forgejo config

servers/containers/conduwuit.Containerfile

@@ -92,7 +92,6 @@ EOF
 
 # Apply CPU-specific optimizations if TARGET_CPU is provided
 ARG TARGET_CPU=
-ARG TARGET_CPU
 RUN <<EOF
   set -o allexport
   . /etc/environment

servers/containers/forgejo.container

@@ -0,0 +1,49 @@
+[Unit]
+Description=Forgejo
+Wants=network-online.target
+After=network-online.target
+
+[Container]
+ContainerName=forgejo
+Environment=USER_UID=1000
+Environment=USER_GID=1000
+Image=codeberg.org/forgejo-experimental/forgejo:11
+AutoUpdate=registry
+Network=web.network
+# PublishPort=222:22
+PublishPort=22:22
+Volume=/var/opt/forgejo_data:/data
+
+Label="traefik.enable=true"
+Label="traefik.http.routers.forgejo.rule=Host(`forgejo.ellis.link`)"
+
+Label="traefik.http.routers.forgejo.entrypoints=https"
+Label="traefik.http.services.forgejo.loadbalancer.server.port=3000"
+
+
+Label="traefik.http.middlewares.cross-origin-embedder.headers.customResponseHeaders.Cross-Origin-Embedder-Policy=credentialless"
+
+Label="traefik.http.routers.forgejo.middlewares=cross-origin-embedder,default@file"
+
+Label="homepage.group=Public"
+Label="homepage.name=Forgejo"
+Label="homepage.href=https://forgejo.ellis.link/"
+# Label="homepage.siteMonitor=https://matrix.ellis.link/client/server.json" 
+Label="homepage.description=Git host"
+Label=kuma.__monitor=''
+
+StopTimeout=100
+
+[Service]
+
+Restart=always
+RestartSec=5
+
+TimeoutStopSec=2m
+TimeoutStartSec=2m
+
+# StartLimitInterval=1m
+StartLimitBurst=5
+
+[Install]
+WantedBy=default.target

servers/containers/image-camo.container

@@ -0,0 +1,41 @@
+[Unit]
+Description=Image Camo
+Wants=network-online.target
+After=network-online.target
+
+[Container]
+ContainerName=image-camo
+NoNewPrivileges=true
+Image=ghcr.io/cactus/go-camo:latest
+AutoUpdate=registry
+
+Environment="GOCAMO_HMAC=woR9L9z6GszksKzRLfWkYVGvqW0hAyqUp8ZRUM8n"
+
+Label="traefik.enable=true"
+Label="traefik.http.routers.image-camo.rule=Host(`image-camo.ellis.link`)"
+
+Label="traefik.http.middlewares.cross-origin.headers.customResponseHeaders.Cross-Origin-Resource-Policy=cross-origin"
+
+Label="traefik.http.routers.image-camo.middlewares=default@file,cross-origin"
+
+Label="homepage.group=Services"
+Label="homepage.name=Go Camo"
+Label="homepage.siteMonitor=https://image-camo.ellis.link/healthcheck"
+Label="homepage.description=Image proxy"
+Label=kuma.__monitor=''
+
+StopTimeout=100
+
+[Service]
+
+Restart=always
+RestartSec=5
+
+TimeoutStopSec=2m
+TimeoutStartSec=2m
+
+# StartLimitInterval=1m
+StartLimitBurst=5
+
+[Install]
+WantedBy=default.target

servers/containers/kanidm.container

@@ -10,7 +10,7 @@ After=network-online.target
 ContainerName=kanidm
 
 NoNewPrivileges=true
-Image=docker.io/kanidm/server:latest
+Image=docker.io/jadedblueeyes/kanidmd:latest
 
 ReadOnly=true
 # Volume=/run/podman/podman.sock:/var/run/docker.sock:z
@@ -20,7 +20,7 @@ Volume=traefik-certs.volume:/data/certs:ro
 Volume=/etc/kanidm/entrypoint.sh:/entrypoint.sh:ro,z
 Volume=/etc/kanidm/data/server.toml:/data/server.toml:ro,z
 
-Exec="/entrypoint.sh"
+# Exec="/entrypoint.sh"
 
 AutoUpdate=registry
 Network=web.network