124 lines
3.9 KiB
YAML
124 lines
3.9 KiB
YAML
# koopa-paivana — shared image/secrets/entrypoint for portal + app paywalls
|
||
# Live: /home/hernani/koopa-paivana/
|
||
#
|
||
# Public Caddy targets (unchanged):
|
||
# 9025 → portal (paivana.hacktivism.ch)
|
||
# 9028 → paywall silverbullet
|
||
# 9029 → paywall galene
|
||
# 9030 → paywall cryptpad
|
||
# 9031 → paywall meet (Jitsi web)
|
||
# App backends on pasta host IP (see app compose; not LAN 0.0.0.0):
|
||
# 172.17.0.1:19128 / 19129 / 19130 / 19131
|
||
|
||
x-paivana-common: &paivana-common
|
||
image: localhost/koopa-paivana:latest
|
||
restart: unless-stopped
|
||
user: "1000:1000"
|
||
userns_mode: keep-id
|
||
extra_hosts:
|
||
- "taler.hacktivism.ch:172.17.0.1"
|
||
- "bank.hacktivism.ch:172.17.0.1"
|
||
- "exchange.hacktivism.ch:172.17.0.1"
|
||
volumes:
|
||
- ./conf/paivana.conf.template:/etc/paivana/paivana.conf.template:ro
|
||
- ./entrypoint.sh:/usr/local/bin/paivana-entrypoint:ro
|
||
- ./secrets/merchant-access-token:/run/secrets/merchant-access-token:ro
|
||
- ./secrets/paivana-secret:/run/secrets/paivana-secret:ro
|
||
labels:
|
||
org.hacktivism.managed_by: koopa-admin
|
||
org.hacktivism.currency: multi
|
||
|
||
services:
|
||
paivana:
|
||
<<: *paivana-common
|
||
build:
|
||
context: .
|
||
dockerfile: Containerfile
|
||
container_name: koopa-paivana
|
||
ports:
|
||
- "9025:9967"
|
||
environment:
|
||
PAIVANA_BASE_URL: https://paivana.hacktivism.ch/
|
||
PAIVANA_DESTINATION_BASE_URL: http://upstream:8080/
|
||
depends_on:
|
||
- upstream
|
||
labels:
|
||
org.hacktivism.service: paivana
|
||
org.hacktivism.host_port: "9025"
|
||
org.hacktivism.site: paivana.hacktivism.ch
|
||
org.hacktivism.managed_by: koopa-admin
|
||
org.hacktivism.currency: multi
|
||
|
||
# App paywalls: same image/secrets; BASE/DEST via env. Caddy still hits 9028–9031.
|
||
paivana-silverbullet:
|
||
<<: *paivana-common
|
||
container_name: koopa-paivana-silverbullet
|
||
ports:
|
||
- "9028:9967"
|
||
environment:
|
||
PAIVANA_BASE_URL: https://silverbullet.hacktivism.ch/
|
||
PAIVANA_DESTINATION_BASE_URL: http://172.17.0.1:19128/
|
||
labels:
|
||
org.hacktivism.service: paivana-silverbullet
|
||
org.hacktivism.host_port: "9028"
|
||
org.hacktivism.site: silverbullet.hacktivism.ch
|
||
org.hacktivism.managed_by: koopa-admin
|
||
org.hacktivism.currency: multi
|
||
|
||
paivana-galene:
|
||
<<: *paivana-common
|
||
container_name: koopa-paivana-galene
|
||
ports:
|
||
- "9029:9967"
|
||
environment:
|
||
PAIVANA_BASE_URL: https://galene.hacktivism.ch/
|
||
PAIVANA_DESTINATION_BASE_URL: http://172.17.0.1:19129/
|
||
labels:
|
||
org.hacktivism.service: paivana-galene
|
||
org.hacktivism.host_port: "9029"
|
||
org.hacktivism.site: galene.hacktivism.ch
|
||
org.hacktivism.managed_by: koopa-admin
|
||
org.hacktivism.currency: multi
|
||
|
||
paivana-cryptpad:
|
||
<<: *paivana-common
|
||
container_name: koopa-paivana-cryptpad
|
||
ports:
|
||
- "9030:9967"
|
||
environment:
|
||
PAIVANA_BASE_URL: https://cryptpad.hacktivism.ch/
|
||
PAIVANA_DESTINATION_BASE_URL: http://172.17.0.1:19130/
|
||
labels:
|
||
org.hacktivism.service: paivana-cryptpad
|
||
org.hacktivism.host_port: "9030"
|
||
org.hacktivism.site: cryptpad.hacktivism.ch
|
||
org.hacktivism.managed_by: koopa-admin
|
||
org.hacktivism.currency: multi
|
||
|
||
paivana-meet:
|
||
<<: *paivana-common
|
||
container_name: koopa-paivana-meet
|
||
ports:
|
||
- "9031:9967"
|
||
environment:
|
||
PAIVANA_BASE_URL: https://meet.hacktivism.ch/
|
||
PAIVANA_DESTINATION_BASE_URL: http://172.17.0.1:19131/
|
||
labels:
|
||
org.hacktivism.service: paivana-meet
|
||
org.hacktivism.host_port: "9031"
|
||
org.hacktivism.site: meet.hacktivism.ch
|
||
org.hacktivism.managed_by: koopa-admin
|
||
org.hacktivism.currency: multi
|
||
|
||
upstream:
|
||
image: docker.io/nginxinc/nginx-unprivileged:1.27-alpine
|
||
container_name: koopa-paivana-upstream
|
||
restart: unless-stopped
|
||
volumes:
|
||
- ./upstream:/usr/share/nginx/html:ro
|
||
expose:
|
||
- "8080"
|
||
command: ["nginx", "-g", "daemon off;"]
|
||
labels:
|
||
org.hacktivism.service: paivana-upstream
|
||
org.hacktivism.managed_by: koopa-admin
|