parent
44e1fca7c4
commit
b504737ccd
@ -9,20 +9,20 @@ services:
|
||||
volumes:
|
||||
- ${VOLUME_DIR:-./.volumes}/db:/var/lib/postgresql/data
|
||||
# ports:
|
||||
# - "5432:5432"
|
||||
# - "5432:5432"
|
||||
|
||||
caddy: # [PROXY]
|
||||
image: caddy:2.7-alpine # [PROXY]
|
||||
restart: unless-stopped # [PROXY]
|
||||
volumes: # [PROXY]
|
||||
- ${VOLUME_DIR:-./.volumes}/caddy/data:/data # [PROXY]
|
||||
- ${VOLUME_DIR:-./.volumes}/caddy/config:/config # [PROXY]
|
||||
- ${VOLUME_DIR:-./.volumes}/caddy/Caddyfile:/etc/caddy/Caddyfile # [PROXY]
|
||||
ports: # [PROXY]
|
||||
#http
|
||||
- "8002:80" # [PROXY]
|
||||
#https
|
||||
- "6443:443" # [PROXY]
|
||||
# caddy: # [PROXY]
|
||||
# image: caddy:2.7-alpine # [PROXY]
|
||||
# restart: unless-stopped # [PROXY]
|
||||
# volumes: # [PROXY]
|
||||
# - ${VOLUME_DIR:-./.volumes}/caddy/data:/data # [PROXY]
|
||||
# - ${VOLUME_DIR:-./.volumes}/caddy/config:/config # [PROXY]
|
||||
# - ${VOLUME_DIR:-./.volumes}/caddy/Caddyfile:/etc/caddy/Caddyfile # [PROXY]
|
||||
# ports: # [PROXY]
|
||||
# # http # [PROXY]
|
||||
# - "80:80" # [PROXY]
|
||||
# # https # [PROXY]
|
||||
# - "443:443" # [PROXY]
|
||||
|
||||
core:
|
||||
image: ghcr.io/defguard/defguard:${CORE_IMAGE_TAG:-latest}
|
||||
@ -40,13 +40,13 @@ services:
|
||||
DEFGUARD_DB_NAME: defguard
|
||||
DEFGUARD_URL: ${DEFGUARD_URL}
|
||||
DEFGUARD_LOG_LEVEL: info
|
||||
DEFGUARD_WEBAUTHN_RP_ID: ${DEFGUARD_WEBAUTHN_RP_ID}
|
||||
# DEFGUARD_WEBAUTHN_RP_ID: ${DEFGUARD_WEBAUTHN_RP_ID}
|
||||
DEFGUARD_COOKIE_INSECURE: ${DEFGUARD_COOKIE_INSECURE:-false}
|
||||
DEFGUARD_ENROLLMENT_URL: ${DEFGUARD_ENROLLMENT_URL} # [ENROLLMENT]
|
||||
DEFGUARD_PROXY_URL: https://proxy:50052 # [ENROLLMENT]
|
||||
DEFGUARD_PROXY_GRPC_CA: /ssl/defguard-ca.pem # [ENROLLMENT]
|
||||
DEFGUARD_GRPC_CERT: /ssl/defguard-grpc.crt
|
||||
DEFGUARD_GRPC_KEY: /ssl/defguard-grpc.key
|
||||
# DEFGUARD_PROXY_URL: https://proxy:50052 # [ENROLLMENT]
|
||||
# DEFGUARD_PROXY_GRPC_CA: /ssl/defguard-ca.pem # [ENROLLMENT]
|
||||
#DEFGUARD_GRPC_CERT: /ssl/defguard-grpc.crt
|
||||
#DEFGUARD_GRPC_KEY: /ssl/defguard-grpc.key
|
||||
## RSA setup guide: https://defguard.gitbook.io/defguard/community-features/setting-up-your-instance/docker-compose#openid-rsa-setup
|
||||
DEFGUARD_OPENID_KEY: /keys/rsakey.pem
|
||||
## LDAP setup guide: https://defguard.gitbook.io/defguard/features/ldap-synchronization-setup
|
||||
@ -55,7 +55,7 @@ services:
|
||||
# DEFGUARD_LDAP_BIND_PASSWORD: password # [LDAP]
|
||||
ports:
|
||||
# web
|
||||
- "9876:8000"
|
||||
- "8850:8000"
|
||||
# grpc
|
||||
- "50055:50055"
|
||||
depends_on:
|
||||
@ -65,32 +65,34 @@ services:
|
||||
- ${VOLUME_DIR:-./.volumes}/ssl:/ssl
|
||||
## RSA setup guide: https://defguard.gitbook.io/defguard/community-features/setting-up-your-instance/docker-compose#openid-rsa-setup
|
||||
- ${VOLUME_DIR:-./.volumes}/core/rsakey.pem:/keys/rsakey.pem
|
||||
proxy: # [ENROLLMENT]
|
||||
image: ghcr.io/defguard/defguard-proxy:${PROXY_IMAGE_TAG:-latest} # [ENROLLMENT]
|
||||
restart: unless-stopped # [ENROLLMENT]
|
||||
environment: # [ENROLLMENT]
|
||||
DEFGUARD_PROXY_GRPC_PORT: 50052 # [ENROLLMENT]
|
||||
DEFGUARD_PROXY_GRPC_CERT: /ssl/defguard-proxy-grpc.crt # [ENROLLMENT]
|
||||
DEFGUARD_PROXY_GRPC_KEY: /ssl/defguard-proxy-grpc.key # [ENROLLMENT]
|
||||
volumes: # [ENROLLMENT]
|
||||
#SSL setup guide: https://defguard.gitbook.io/defguard/features/setting-up-your-instance/docker-compose#ssl-setup
|
||||
- ${VOLUME_DIR:-./.volumes}/ssl:/ssl # [ENROLLMENT]
|
||||
ports:
|
||||
# web
|
||||
- "8588:8080"
|
||||
depends_on: # [ENROLLMENT]
|
||||
- core # [ENROLLMENT]
|
||||
|
||||
gateway: # [VPN]
|
||||
image: ghcr.io/defguard/gateway:${GATEWAY_IMAGE_TAG:-latest} # [VPN]
|
||||
restart: unless-stopped # [VPN]
|
||||
network_mode: "host" # [VPN]
|
||||
environment: # [VPN]
|
||||
DEFGUARD_GRPC_URL: https://localhost:50055 # [VPN]
|
||||
DEFGUARD_GRPC_CA: /ssl/defguard-ca.pem # [VPN]
|
||||
DEFGUARD_STATS_PERIOD: 30 # [VPN]
|
||||
DEFGUARD_TOKEN: ${DEFGUARD_TOKEN} # [VPN]
|
||||
volumes: # [VPN]
|
||||
- ${VOLUME_DIR:-./.volumes}/ssl:/ssl # [VPN]
|
||||
cap_add: # [VPN]
|
||||
- NET_ADMIN # [VPN]
|
||||
# proxy: # [ENROLLMENT]
|
||||
# image: ghcr.io/defguard/defguard-proxy:${PROXY_IMAGE_TAG:-latest} # [ENROLLMENT]
|
||||
# restart: unless-stopped # [ENROLLMENT]
|
||||
# environment: # [ENROLLMENT]
|
||||
# DEFGUARD_PROXY_GRPC_PORT: 50052 # [ENROLLMENT]
|
||||
# DEFGUARD_PROXY_GRPC_CERT: /ssl/defguard-proxy-grpc.crt # [ENROLLMENT]
|
||||
# DEFGUARD_PROXY_GRPC_KEY: /ssl/defguard-proxy-grpc.key # [ENROLLMENT]
|
||||
# volumes: # [ENROLLMENT]
|
||||
# SSL setup guide: https://defguard.gitbook.io/defguard/features/setting-up-your-instance/docker-compose#ssl-setup
|
||||
# - ${VOLUME_DIR:-./.volumes}/ssl:/ssl # [ENROLLMENT]
|
||||
# ports:
|
||||
# # web
|
||||
# - "8080:8080"
|
||||
# depends_on: # [ENROLLMENT]
|
||||
# - core # [ENROLLMENT]
|
||||
|
||||
# gateway: # [VPN]
|
||||
# image: ghcr.io/defguard/gateway:${GATEWAY_IMAGE_TAG:-latest} # [VPN]
|
||||
# restart: unless-stopped # [VPN]
|
||||
# network_mode: "host" # [VPN]
|
||||
# environment: # [VPN]
|
||||
# DEFGUARD_GRPC_URL: https://localhost:50055 # [VPN]
|
||||
# DEFGUARD_GRPC_CA: /ssl/defguard-ca.pem # [VPN]
|
||||
# DEFGUARD_STATS_PERIOD: 30 # [VPN]
|
||||
# DEFGUARD_TOKEN: ${DEFGUARD_TOKEN} # [VPN]
|
||||
# volumes: # [VPN]
|
||||
# SSL setup guide: https://defguard.gitbook.io/defguard/features/setting-up-your-instance/docker-compose#ssl-setup
|
||||
# - ${VOLUME_DIR:-./.volumes}/ssl:/ssl # [VPN]
|
||||
# cap_add: # [VPN]
|
||||
# - NET_ADMIN # [VPN]
|
||||
|
||||
@ -1 +0,0 @@
|
||||
Subproject commit 1901755b0badcf0d4f41fb67f5bd112468395ee5
|
||||
71
reasume/.env
71
reasume/.env
@ -1,71 +0,0 @@
|
||||
# Environment
|
||||
NODE_ENV=development
|
||||
|
||||
# Ports
|
||||
PORT=3000
|
||||
|
||||
# URLs
|
||||
# These URLs must reference a publicly accessible domain or IP address, not a docker container ID (depending on your compose setup)
|
||||
PUBLIC_URL=http://localhost:3000
|
||||
PUBLIC_SERVER_URL=http://localhost:3000/
|
||||
STORAGE_URL=http://localhost:9000/default # default is the bucket name specified in the STORAGE_BUCKET variable
|
||||
|
||||
# Database (Prisma/PostgreSQL)
|
||||
# This can be swapped out to use any other database, like MySQL
|
||||
# Note: This is used only in the compose.yml file
|
||||
POSTGRES_PORT=5437
|
||||
POSTGRES_DB=postgres
|
||||
POSTGRES_USER=Zakaria
|
||||
POSTGRES_PASSWORD=thamed-original
|
||||
|
||||
# Database (Prisma/PostgreSQL)
|
||||
DATABASE_URL=postgresql://postgres:postgres@localhost:5437/postgres?schema=public
|
||||
|
||||
# Authentication Secrets
|
||||
# generated with `openssl rand -base64 64`
|
||||
ACCESS_TOKEN_SECRET=2431754516ca6dfc7d512446237d429b40dc7f4a73208cbfb2d22c4cb6afbb98b49ebb2791e4a7c8955cdadc985568a281cdfe673d5e223568803039412fa725
|
||||
REFRESH_TOKEN_SECRET=c4fc4c102c3590e7017dbbd82e511d5bf3b48748bfb66ed31d1bf3ea3a675731c4fc4c102c3590e7017dbbd82e511d5bf3b48748bfb66ed31d1bf3ea3a675731
|
||||
|
||||
# Chrome Browser (for printing)
|
||||
# generated with `openssl rand -hex 32`
|
||||
CHROME_PORT=8180
|
||||
CHROME_TOKEN=c4fc4c102c3590e7017dbbd82e511d5bf3b48748bfb66ed31d1bf3ea3a675731
|
||||
CHROME_URL=wss://localhost:8180
|
||||
# Launch puppeteer with flag to ignore https errors
|
||||
CHROME_IGNORE_HTTPS_ERRORS=true
|
||||
|
||||
# Mail Server (for e-mails)
|
||||
# For testing, you can use https://ethereal.email/create
|
||||
MAIL_FROM=noreply@localhost
|
||||
# SMTP_URL=smtp://username:password@smtp.ethereal.email:587
|
||||
|
||||
# Storage
|
||||
STORAGE_ENDPOINT=localhost
|
||||
STORAGE_PORT=9050
|
||||
STORAGE_REGION=us-east-1
|
||||
STORAGE_BUCKET=default
|
||||
STORAGE_ACCESS_KEY=minioadmin
|
||||
STORAGE_SECRET_KEY=minioadmin
|
||||
STORAGE_USE_SSL=false
|
||||
STORAGE_SKIP_BUCKET_CHECK=false
|
||||
|
||||
# Nx Cloud (Optional)
|
||||
# NX_CLOUD_ACCESS_TOKEN=
|
||||
|
||||
# Crowdin (Optional)
|
||||
# CROWDIN_PROJECT_ID=
|
||||
# CROWDIN_PERSONAL_TOKEN=
|
||||
|
||||
# Feature Flags (Optional)
|
||||
# DISABLE_SIGNUPS=false
|
||||
# DISABLE_EMAIL_AUTH=false
|
||||
|
||||
# GitHub (OAuth, Optional)
|
||||
# GITHUB_CLIENT_ID=
|
||||
# GITHUB_CLIENT_SECRET=
|
||||
# GITHUB_CALLBACK_URL=http://localhost:5173/api/auth/github/callback
|
||||
|
||||
# Google (OAuth, Optional)
|
||||
# GOOGLE_CLIENT_ID=
|
||||
# GOOGLE_CLIENT_SECRET=
|
||||
# GOOGLE_CALLBACK_URL=http://localhost:5173/api/auth/google/callback
|
||||
@ -1,107 +0,0 @@
|
||||
# In this Docker Compose example, it assumes that you maintain a reverse proxy externally (or chose not to).
|
||||
# The only two exposed ports here are from minio (:9000) and the app itself (:3000).
|
||||
# If these ports are changed, ensure that the env vars passed to the app are also changed accordingly.
|
||||
|
||||
services:
|
||||
# Database (Postgres)
|
||||
postgres:
|
||||
image: postgres:16.4-alpine3.20
|
||||
restart: unless-stopped
|
||||
volumes:
|
||||
- ./postgres_data:/var/lib/postgresql/data
|
||||
environment:
|
||||
POSTGRES_DB: dataBase
|
||||
POSTGRES_USER: Zakaria
|
||||
POSTGRES_PASSWORD: thamed-cream-love
|
||||
|
||||
# Storage (for image uploads)
|
||||
minio:
|
||||
image: minio/minio
|
||||
restart: unless-stopped
|
||||
command: server /data
|
||||
ports:
|
||||
- "9000:9000"
|
||||
volumes:
|
||||
- minio_data:/data
|
||||
environment:
|
||||
MINIO_ROOT_USER: minioadmin
|
||||
MINIO_ROOT_PASSWORD: minioadmin
|
||||
|
||||
# Chrome Browser (for printing and previews)
|
||||
chrome:
|
||||
image: lscr.io/linuxserver/chromium:latest
|
||||
restart: unless-stopped
|
||||
extra_hosts:
|
||||
- "host.docker.internal:host-gateway"
|
||||
environment:
|
||||
TIMEOUT: 50000
|
||||
CONCURRENT: 10
|
||||
TOKEN: chrome_token
|
||||
EXIT_ON_HEALTH_FAILURE: true
|
||||
PRE_REQUEST_HEALTH_CHECK: true
|
||||
|
||||
app:
|
||||
image: amruthpillai/reactive-resume:latest
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- "3000:3000"
|
||||
depends_on:
|
||||
- postgres
|
||||
- minio
|
||||
- chrome
|
||||
environment:
|
||||
# -- Environment Variables --
|
||||
PORT: 3000
|
||||
NODE_ENV: production
|
||||
|
||||
# -- Database (Postgres) --
|
||||
DATABASE_URL: postgresql://Zakaria:thamed-cream-love@postgres:5432/dataBase?schema=public
|
||||
|
||||
# -- URLs --
|
||||
PUBLIC_URL: http://localhost:3000
|
||||
STORAGE_URL: http://localhost:9000/default
|
||||
|
||||
# -- Printer (Chrome) --
|
||||
CHROME_TOKEN: chrome_token
|
||||
CHROME_URL: ws://chrome:3000
|
||||
|
||||
# -- Auth --
|
||||
ACCESS_TOKEN_SECRET: 34dd5592342c3cb6f53e8f27cf805b1ff974a05e4bbae47b35cc79bcea268f3529e572635f36a305
|
||||
REFRESH_TOKEN_SECRET: 34dd5592342c3cb6f53e8f27cf805b1ff974a05e4bbae47b35cc79bcea268f3529e572635f36a305
|
||||
|
||||
# -- Emails --
|
||||
MAIL_FROM: noreply@localhost
|
||||
# SMTP_URL: smtp://user:pass@smtp:587 # Optional
|
||||
|
||||
# -- Storage (Minio) --
|
||||
STORAGE_ENDPOINT: minio
|
||||
STORAGE_PORT: 9000
|
||||
STORAGE_REGION: us-east-1 # Optional
|
||||
STORAGE_BUCKET: default
|
||||
STORAGE_ACCESS_KEY: minioadmin
|
||||
STORAGE_SECRET_KEY: minioadmin
|
||||
STORAGE_USE_SSL: false
|
||||
STORAGE_SKIP_BUCKET_CHECK: false
|
||||
|
||||
# -- Crowdin (Optional) --
|
||||
# CROWDIN_PROJECT_ID:
|
||||
# CROWDIN_PERSONAL_TOKEN:
|
||||
|
||||
# -- Email (Optional) --
|
||||
# DISABLE_SIGNUPS: false
|
||||
# DISABLE_EMAIL_AUTH: false
|
||||
|
||||
# -- GitHub (Optional) --
|
||||
# GITHUB_CLIENT_ID: github_client_id
|
||||
# GITHUB_CLIENT_SECRET: github_client_secret
|
||||
# GITHUB_CALLBACK_URL: http://localhost:3000/api/auth/github/callback
|
||||
|
||||
# -- Google (Optional) --
|
||||
# GOOGLE_CLIENT_ID: google_client_id
|
||||
# GOOGLE_CLIENT_SECRET: google_client_secret
|
||||
# GOOGLE_CALLBACK_URL: http://localhost:3000/api/auth/google/callback
|
||||
|
||||
volumes:
|
||||
minio_data:
|
||||
postgres_data:
|
||||
|
||||
@ -1 +0,0 @@
|
||||
16
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue
Block a user