🔧 updated running passbolt
This commit is contained in:
parent
102caf200d
commit
8de71e5114
1 changed files with 37 additions and 14 deletions
|
|
@ -39,18 +39,30 @@ services:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
environment:
|
environment:
|
||||||
- APP_FULL_BASE_URL=https://${SUBDOMAIN}.${DOMAIN}
|
- APP_FULL_BASE_URL=https://${SUBDOMAIN}.${DOMAIN}
|
||||||
- DB_HOST=passbolt-db
|
- DATASOURCES_DEFAULT_HOST=passbolt-db
|
||||||
- DB_USER=${DB_USER}
|
- DATASOURCES_DEFAULT_PORT=3306
|
||||||
- DB_PASSWORD=${DB_PASSWORD}
|
- DATASOURCES_DEFAULT_DATABASE=${DB_DATABASE}
|
||||||
- DB_DATABASE=${DB_DATABASE}
|
- DATASOURCES_DEFAULT_USERNAME=${DB_USER}
|
||||||
- EMAIL_DEFAULT_TRANSPORT=${EMAIL_TRANSPORT}
|
- DATASOURCES_DEFAULT_PASSWORD=${DB_PASSWORD}
|
||||||
- PASSBOLT_SSL_FORCE=true
|
|
||||||
- PASSBOLT_SECURITY_SSL_PROXY=true
|
- PASSBOLT_SSL_FORCE=false
|
||||||
- PASSBOLT_EMAIL_VALIDATE_MX=false
|
- PASSBOLT_SECURITY_SSL_PROXY=HTTP_X_FORWARDED_PROTO
|
||||||
- PASSBOLT_FORCE_BASE_URL=https://${SUBDOMAIN}.${DOMAIN}
|
# GPG settings
|
||||||
|
- PASSBOLT_GPG_SERVER_KEY_FINGERPRINT=${GPG_FINGERPRINT}
|
||||||
|
|
||||||
|
- PASSBOLT_KEY_EMAIL=markus.tabler@tutanota.com
|
||||||
|
|
||||||
|
#- EMAIL_DEFAULT_TRANSPORT=${EMAIL_TRANSPORT}
|
||||||
|
#- EMAIL_TRANSPORT_DEFAULT_HOST=smtp.example.com
|
||||||
|
#- EMAIL_TRANSPORT_DEFAULT_PORT=587
|
||||||
|
#- EMAIL_TRANSPORT_DEFAULT_USERNAME=user
|
||||||
|
#- EMAIL_TRANSPORT_DEFAULT_PASSWORD=password
|
||||||
|
#- EMAIL_TRANSPORT_DEFAULT_TLS=true
|
||||||
|
extra_hosts:
|
||||||
|
- "passwords.bybenji.de:172.17.0.1"
|
||||||
volumes:
|
volumes:
|
||||||
- type: bind
|
- type: bind
|
||||||
source: ${PGP_PATH}
|
source: ${GPG_PATH}
|
||||||
target: /etc/passbolt/gpg
|
target: /etc/passbolt/gpg
|
||||||
bind:
|
bind:
|
||||||
create_host_path: true
|
create_host_path: true
|
||||||
|
|
@ -59,6 +71,13 @@ services:
|
||||||
target: /etc/passbolt/jwt
|
target: /etc/passbolt/jwt
|
||||||
bind:
|
bind:
|
||||||
create_host_path: true
|
create_host_path: true
|
||||||
|
#- type: bind
|
||||||
|
# source: ${GPG_DOT_PATH}
|
||||||
|
# target: /var/lib/passbolt/.gnupg
|
||||||
|
# bind:
|
||||||
|
# create_host_path: true
|
||||||
|
# selinux: z
|
||||||
|
- passbolt_gnupg:/var/lib/passbolt/.gnupg
|
||||||
logging:
|
logging:
|
||||||
driver: "json-file"
|
driver: "json-file"
|
||||||
options:
|
options:
|
||||||
|
|
@ -75,11 +94,15 @@ services:
|
||||||
- "traefik.http.routers.${ROUTER_NAME}.tls.certresolver=${CERTIFICATE_RESOLVER}"
|
- "traefik.http.routers.${ROUTER_NAME}.tls.certresolver=${CERTIFICATE_RESOLVER}"
|
||||||
- "traefik.http.services.${ROUTER_NAME}.loadbalancer.server.port=80"
|
- "traefik.http.services.${ROUTER_NAME}.loadbalancer.server.port=80"
|
||||||
- "traefik.docker.network=${TRAEFIK_NETWORK}"
|
- "traefik.docker.network=${TRAEFIK_NETWORK}"
|
||||||
- "traefik.http.routers.${ROUTER_NAME}.middlewares=passbolt-headers@docker"
|
|
||||||
- "traefik.http.middlewares.passbolt-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
|
|
||||||
|
|
||||||
|
# Define the middleware that adds the header
|
||||||
|
- "traefik.http.middlewares.passbolt-proxy.headers.customrequestheaders.X-Forwarded-Proto=https"
|
||||||
|
# Apply that middleware to your router
|
||||||
|
- "traefik.http.routers.${ROUTER_NAME}.middlewares=passbolt-proxy@docker"
|
||||||
networks:
|
networks:
|
||||||
traefik:
|
traefik:
|
||||||
external: true
|
external: true
|
||||||
internal_net:
|
internal_net:
|
||||||
driver: bridge
|
driver: bridge
|
||||||
|
volumes:
|
||||||
|
passbolt_gnupg:
|
||||||
Loading…
Reference in a new issue