mirror of
https://forgejo.ellis.link/continuwuation/continuwuity.git
synced 2026-05-26 20:49:55 +00:00
stratself
dccf1b97c8
Instead of /etc/resolv.conf on host. This works around the systemd-resolved footgunning issue and provide an inline way to configure resolvers, separate from that of the host system.
59 lines
2.4 KiB
YAML
59 lines
2.4 KiB
YAML
# Continuwuity - Behind Traefik Reverse Proxy
|
|
|
|
services:
|
|
homeserver:
|
|
image: forgejo.ellis.link/continuwuation/continuwuity:latest
|
|
restart: unless-stopped
|
|
command: /sbin/conduwuit
|
|
volumes:
|
|
- db:/var/lib/continuwuity
|
|
#- ./continuwuity.toml:/etc/continuwuity.toml
|
|
networks:
|
|
- proxy
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.continuwuity.rule=(Host(`matrix.example.com`) || (Host(`example.com`) && PathPrefix(`/.well-known/matrix`)))"
|
|
- "traefik.http.routers.continuwuity.entrypoints=websecure" # your HTTPS entry point
|
|
- "traefik.http.routers.continuwuity.tls=true"
|
|
- "traefik.http.routers.continuwuity.service=continuwuity"
|
|
- "traefik.http.services.continuwuity.loadbalancer.server.port=8008"
|
|
# possibly, depending on your config:
|
|
# - "traefik.http.routers.continuwuity.tls.certresolver=letsencrypt"
|
|
environment:
|
|
CONTINUWUITY_SERVER_NAME: example.com # EDIT THIS
|
|
CONTINUWUITY_DATABASE_PATH: /var/lib/continuwuity
|
|
CONTINUWUITY_ADDRESS: 0.0.0.0
|
|
CONTINUWUITY_PORT: 8008 # This must match with traefik's loadbalancer label
|
|
#CONTINUWUITY_CONFIG: '/etc/continuwuity.toml' # Uncomment if you mapped config toml above
|
|
|
|
# We need some way to serve the client and server .well-known json. The simplest way is via the CONTINUWUITY_WELL_KNOWN
|
|
# variable / config option, there are multiple ways to do this, e.g. in the continuwuity.toml file, and in a separate
|
|
# see the override file for more information about delegation
|
|
CONTINUWUITY_WELL_KNOWN: |
|
|
{
|
|
client=https://matrix.example.com,
|
|
server=matrix.example.com:443
|
|
}
|
|
#cpuset: "0-4" # Uncomment to limit to specific CPU cores
|
|
ulimits: # Continuwuity uses quite a few file descriptors, and on some systems it defaults to 1024, so you can tell docker to increase it
|
|
nofile:
|
|
soft: 1048567
|
|
hard: 1048567
|
|
configs: # using custom resolver instead of Docker's
|
|
- source: continuwuity-resolv.conf
|
|
target: /etc/resolv.conf
|
|
|
|
volumes:
|
|
db:
|
|
|
|
networks:
|
|
# This is the network Traefik listens to, if your network has a different
|
|
# name, don't forget to change it here and in the docker-compose.override.yml
|
|
proxy:
|
|
external: true
|
|
|
|
configs:
|
|
continuwuity-resolv.conf:
|
|
content: |
|
|
nameserver 1.0.0.1
|
|
nameserver 1.1.1.1 |