repos / pico

docker-compose.prod-irc.yml

 1services:
 2  auth-caddy:
 3    image: ghcr.io/picosh/pico/caddy:latest
 4    restart: always
 5    networks:
 6      - auth
 7    env_file:
 8      - .env.prod
 9    environment:
10      APP_EMAIL: hello@pico.sh
11    volumes:
12      - ./caddy/Caddyfile.auth:/etc/caddy/Caddyfile
13      - ./data/auth-caddy/data:/data
14      - ./data/auth-caddy/config:/config
15    ports:
16      - "${AUTH_V4:-0.0.0.0}:443:443"
17      - "${AUTH_V4:-0.0.0.0}:80:80"
18      - "[${AUTH_V6:-::1}]:443:443"
19      - "[${AUTH_V6:-::1}]:80:80"
20      - "${BOUNCER_V4:-0.0.0.0}:443:443"
21      - "${BOUNCER_V4:-0.0.0.0}:80:80"
22      - "[${BOUNCER_V6:-::1}]:443:443"
23      - "[${BOUNCER_V6:-::1}]:80:80"
24  auth-web:
25    dns: 1.1.1.1
26    volumes:
27      - ./data/auth-web/data:/app/ssh_data
28    networks:
29      - auth
30    env_file:
31      - .env.prod
32  bouncer-prom-proxy:
33    network_mode: service:bouncer
34    environment:
35      - PROXY_URL=http://localhost:9000
36    image: schmailzl/simple-reverse-proxy
37    profiles:
38      - bouncer
39      - services
40      - all
41  bouncer:
42    networks:
43      - auth
44    env_file:
45      - .env.prod
46    ports:
47      - "${BOUNCER_IRCS_V4:-6697}:6697"
48      - "${BOUNCER_IRCS_V6:-[::1]:6697}:6697"
49      - "${BOUNCER_IDENTD_V4:-113}:113"
50      - "${BOUNCER_IDENTD_V6:-[::1]:113}:113"
51    volumes:
52      - ./data/run:/run/soju
53      - ./data/bouncer:/app/db
54      - ./data/certs:/certs
55      - ${AUTH_REAL_CERT_MOUNT}
56networks:
57  auth:
58    enable_ipv6: true
59    driver_opts:
60      com.docker.network.bridge.name: auth
61    ipam:
62      config:
63        - subnet: 172.24.0.0/16
64        - subnet: fd00:dead:beef:24::/112