🔧 updated running passbolt

This commit is contained in:
Markus Benjamin Tabler 2026-06-28 11:56:35 +02:00
parent 102caf200d
commit 8de71e5114

View file

@ -39,18 +39,30 @@ services:
condition: service_healthy condition: service_healthy
environment: environment:
- APP_FULL_BASE_URL=https://${SUBDOMAIN}.${DOMAIN} - APP_FULL_BASE_URL=https://${SUBDOMAIN}.${DOMAIN}
- DB_HOST=passbolt-db - DATASOURCES_DEFAULT_HOST=passbolt-db
- DB_USER=${DB_USER} - DATASOURCES_DEFAULT_PORT=3306
- DB_PASSWORD=${DB_PASSWORD} - DATASOURCES_DEFAULT_DATABASE=${DB_DATABASE}
- DB_DATABASE=${DB_DATABASE} - DATASOURCES_DEFAULT_USERNAME=${DB_USER}
- EMAIL_DEFAULT_TRANSPORT=${EMAIL_TRANSPORT} - DATASOURCES_DEFAULT_PASSWORD=${DB_PASSWORD}
- PASSBOLT_SSL_FORCE=true
- PASSBOLT_SECURITY_SSL_PROXY=true - PASSBOLT_SSL_FORCE=false
- PASSBOLT_EMAIL_VALIDATE_MX=false - PASSBOLT_SECURITY_SSL_PROXY=HTTP_X_FORWARDED_PROTO
- PASSBOLT_FORCE_BASE_URL=https://${SUBDOMAIN}.${DOMAIN} # GPG settings
- PASSBOLT_GPG_SERVER_KEY_FINGERPRINT=${GPG_FINGERPRINT}
- PASSBOLT_KEY_EMAIL=markus.tabler@tutanota.com
#- EMAIL_DEFAULT_TRANSPORT=${EMAIL_TRANSPORT}
#- EMAIL_TRANSPORT_DEFAULT_HOST=smtp.example.com
#- EMAIL_TRANSPORT_DEFAULT_PORT=587
#- EMAIL_TRANSPORT_DEFAULT_USERNAME=user
#- EMAIL_TRANSPORT_DEFAULT_PASSWORD=password
#- EMAIL_TRANSPORT_DEFAULT_TLS=true
extra_hosts:
- "passwords.bybenji.de:172.17.0.1"
volumes: volumes:
- type: bind - type: bind
source: ${PGP_PATH} source: ${GPG_PATH}
target: /etc/passbolt/gpg target: /etc/passbolt/gpg
bind: bind:
create_host_path: true create_host_path: true
@ -59,6 +71,13 @@ services:
target: /etc/passbolt/jwt target: /etc/passbolt/jwt
bind: bind:
create_host_path: true create_host_path: true
#- type: bind
# source: ${GPG_DOT_PATH}
# target: /var/lib/passbolt/.gnupg
# bind:
# create_host_path: true
# selinux: z
- passbolt_gnupg:/var/lib/passbolt/.gnupg
logging: logging:
driver: "json-file" driver: "json-file"
options: options:
@ -75,11 +94,15 @@ services:
- "traefik.http.routers.${ROUTER_NAME}.tls.certresolver=${CERTIFICATE_RESOLVER}" - "traefik.http.routers.${ROUTER_NAME}.tls.certresolver=${CERTIFICATE_RESOLVER}"
- "traefik.http.services.${ROUTER_NAME}.loadbalancer.server.port=80" - "traefik.http.services.${ROUTER_NAME}.loadbalancer.server.port=80"
- "traefik.docker.network=${TRAEFIK_NETWORK}" - "traefik.docker.network=${TRAEFIK_NETWORK}"
- "traefik.http.routers.${ROUTER_NAME}.middlewares=passbolt-headers@docker"
- "traefik.http.middlewares.passbolt-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
# Define the middleware that adds the header
- "traefik.http.middlewares.passbolt-proxy.headers.customrequestheaders.X-Forwarded-Proto=https"
# Apply that middleware to your router
- "traefik.http.routers.${ROUTER_NAME}.middlewares=passbolt-proxy@docker"
networks: networks:
traefik: traefik:
external: true external: true
internal_net: internal_net:
driver: bridge driver: bridge
volumes:
passbolt_gnupg: