Switch to nginx-proxy

docker-compose.yml

@@ -1,10 +1,3 @@
-# Options for building certificates
-x-certs: &certs
-  image: paulczar/omgwtfssl
-  restart: "no"
-  volumes:
-    - /opt/ssl:/certs
-
 x-logging: &logging
   logging:
     driver: "local"
@@ -13,19 +6,24 @@ x-logging: &logging
       max-file: "2"
 
 services:
-  change:
-    <<: *logging
-    container_name: change
-    image: node:alpine
-    build: ./change-game
-    environment:
-      - PORT=9000
-    networks:
-      - nginx
-    volumes:
-      - change:/change/public
+  # change:
+  #   <<: *logging
+  #   profiles: ["prod"]
+  #   container_name: change
+  #   image: node:alpine
+  #   build: ./change-game
+  #   environment:
+  #     - PORT=9000
+  #     - VIRTUAL_HOST=rec.${DOMAIN}
+  #     - CERT_NAME=${DOMAIN}
+  #     - VIRTUAL_PORT=9000
+  #   networks:
+  #     - nginx
+  #   volumes:
+  #     - change:/change/public
 
   foundry:
+    profiles: ["prod"]
     <<: *logging
     image: felddy/foundryvtt:release
     volumes:
@@ -45,13 +43,18 @@ services:
       - CONTAINER_PATCHES=/data/patches
       - FOUNDRY_UID=1000
       - FOUNDRY_GID=1000
+      - VIRTUAL_HOST=rec.${DOMAIN}
+      - CERT_NAME=${DOMAIN}
+      - VIRTUAL_PORT=30000
+      - VIRTUAL_PATH=/foundry
     networks:
       - nginx
 
   nextcloud:
+    profiles: ["prod"]
     <<: *logging
     build: ./nextcloud
-    image: nextcloud
+    image: nextcloud:31-fpm-alpine
     restart: unless-stopped
     user: 1000:1000
     volumes:
@@ -59,6 +62,10 @@ services:
       - /mnt/tower/stardust:/var/www/html/data
       - /mnt/tower/foundry:/var/www/foundry
     environment:
+      - VIRTUAL_HOST=tower.${DOMAIN}
+      - CERT_NAME=${DOMAIN}
+      - VIRTUAL_PORT=9000
+      - VIRTUAL_PROTO=fastcgi
       - REDIS_HOST=redis
       - MYSQL_HOST=db
       - MYSQL_PASSWORD=${DB_PASSWORD}
@@ -88,12 +95,16 @@ services:
       - "office.${DOMAIN}:${LOCAL_IP}" 
 
   collabora:
+    profiles: ["prod", "dev"]
     <<: *logging
     image: collabora/code
     restart: unless-stopped
     cap_add:
       - MKNOD
     environment:
+      - VIRTUAL_HOST=office.${DOMAIN}
+      - CERT_NAME=${DOMAIN}
+      - VIRTUAL_PORT=9980
       - "DONT_GEN_SSL_CERT=True"
       - domain=tower.${DOMAIN}
       - cert_domain=office.${DOMAIN}
@@ -108,28 +119,14 @@ services:
       - "tower.${DOMAIN}:${LOCAL_IP}"
       - "office.${DOMAIN}:${LOCAL_IP}"
 
-  homebox:
-    <<: *logging
-    image: ghcr.io/hay-kot/homebox:latest
-    restart: unless-stopped
-    environment:
-      - HBOX_LOG_LEVEL=info
-      - HBOX_LOG_FORMAT=text
-      - HBOX_WEB_MAX_UPLOAD_SIZE=10
-      - HBOX_OPTIONS_ALLOW_REGISTRATION=false
-      - HBOX_MAILER_HOST=${MAIL_HOST}
-      - HBOX_MAILER_PORT=${MAIL_PORT}
-      - HBOX_MAILER_USERNAME=${MAIL_USER}
-      - HBOX_MAILER_PASSWORD=${MAIL_PASSWORD}
-    volumes:
-      - homebox:/data/
-    networks:
-      - nginx
-
   gitea:
+    profiles: ["prod", "dev"]
     <<: *logging
     image: gitea/gitea:1
     environment:
+      - VIRTUAL_HOST=labs.${DOMAIN}
+      - CERT_NAME=${DOMAIN}
+      - VIRTUAL_PORT=3000
       - "APP_NAME=Labs: Where the good stuff happens"
       - RUN_MODE=prod
       - DOMAIN=labs.${DOMAIN}
@@ -158,6 +155,7 @@ services:
       - db
 
   minecraft:
+    profiles: ["prod"]
     <<: *logging
     image: itzg/minecraft-server
     tty: true
@@ -176,6 +174,7 @@ services:
       - minecraft:/data
 
   mc-backup:
+    profiles: ["prod"]
     <<: *logging
     image: itzg/mc-backup
     depends_on:
@@ -193,53 +192,15 @@ services:
       - minecraft:/data:ro
       - /mnt/tower/backups/minecraft:/backups
 
-  tt-rss:
-    <<: *logging
-    image: cthulhoo/ttrss-fpm-pgsql-static:latest
-    restart: unless-stopped
-    environment:
-      - TTRSS_SELF_URL_PATH=https://intel.${DOMAIN}
-      - TTRSS_DB_USER=${DB_USER}
-      - TTRSS_DB_NAME=scarif
-      - TTRSS_DB_PASS=${DB_PASSWORD}
-      - TTRSS_DB_HOST=psqldb
-        #- AUTO_CREATE_USER=${TTRSS_USER}
-        #- AUTO_CREATE_USER_PASS=${TTRSS_USER_PASS}
-        #- ADMIN_USER_ACCESS_LEVEL=-2
-    volumes:
-      - tt-rss:/var/www/html
-      - ./tt-rss/config.d:/opt/tt-rss/config.d:ro
-    depends_on:
-      - psqldb
-    networks:
-      - db
-      - nginx
-
-  tt-rss-updater:
-    <<: *logging
-    image: cthulhoo/ttrss-fpm-pgsql-static:latest
-    restart: unless-stopped
-    environment:
-      - TTRSS_SELF_URL_PATH=https://intel.${DOMAIN}
-      - TTRSS_DB_USER=${DB_USER}
-      - TTRSS_DB_NAME=scarif
-      - TTRSS_DB_PASS=${DB_PASSWORD}
-      - TTRSS_DB_HOST=psqldb
-    volumes:
-      - tt-rss:/var/www/html
-      - ./tt-rss/config.d:/opt/tt-rss/config.d:ro
-    depends_on:
-      - tt-rss
-      - psqldb
-    command: /opt/tt-rss/updater.sh
-    networks:
-      - db
-
   navidrome:
+    profiles: ["prod"]
     <<: *logging
     image: deluan/navidrome:latest
     restart: unless-stopped
     environment:
+      - VIRTUAL_HOST=radio.${DOMAIN}
+      - CERT_NAME=${DOMAIN}
+      - VIRTUAL_PORT=4533
       - ND_SCANSCHEDULE=1h
       - ND_LOGLEVEL=info
       - ND_SESSIONTIMEOUT=24h
@@ -251,15 +212,17 @@ services:
       - nginx
 
   pihole:
+    profiles: ["prod"]
     <<: *logging
     image: pihole/pihole:latest
     ports:
       - "53:53/tcp"
       - "53:53/udp"
     environment:
-      TZ: "Europe/London"
-      WEBPASSWORD: ${PIHOLE_PASSWORD}
-      VIRTUAL_HOST: net.${DOMAIN}
+      - VIRTUAL_HOST=net.${DOMAIN}
+      - CERT_NAME=${DOMAIN}
+      - TZ="Europe/London"
+      - WEBPASSWORD=${PIHOLE_PASSWORD}
     volumes:
       - "/docker/pihole/etc-pihole:/etc/pihole"
       - "/docker/pihole/etc-dnsmasq.d:/etc/dnsmasq.d"
@@ -267,22 +230,8 @@ services:
     networks:
       - nginx
 
-  pdf2audiobook:
-    <<: *logging
-    build: ./pdf-to-audiobook
-    image: pdf2audiobook:latest
-    container_name: pdf2audiobook
-    working_dir: /app
-    volumes:
-      - ./pdf-to-audiobook:/app
-      - /mnt/tower/stardust/chris/files/Library:/books:ro
-      - /mnt/tower/stardust/chris/files/Audiobooks:/audio
-    environment:
-      - OPENAI_API_KEY=${OPENAI_API_KEY}
-      - OPENAI_API_BASE=${OPENAI_API_BASE:-https://aihubmix.com/v1}
-      - OPENAI_MODEL=${OPENAI_MODEL:-aihubmix-Llama-3-3-70B-Instruct}
-
   jitsi:
+    profiles: ["prod"]
     <<: *logging
     image: jitsi/web:stable
     restart: unless-stopped
@@ -291,6 +240,9 @@ services:
       - ${CONFIG}/web/crontabs:/var/spool/cron/crontabs:Z
       - ${CONFIG}/transcripts:/usr/share/jitsi-meet/transcripts:Z
     environment:
+      - VIRTUAL_HOST=comms.${DOMAIN}
+      - VIRTUAL_PORT=80
+      - CERT_NAME=${DOMAIN}
       - AMPLITUDE_ID
       - ANALYTICS_SCRIPT_URLS
       - ANALYTICS_WHITELISTED_EVENTS
@@ -435,6 +387,7 @@ services:
 
   # XMPP server
   prosody:
+    profiles: ["prod"]
     <<: *logging
     image: jitsi/prosody:stable
     restart: unless-stopped
@@ -532,6 +485,7 @@ services:
 
   # Focus component
   jicofo:
+    profiles: ["prod"]
     <<: *logging
     image: jitsi/jicofo:stable
     restart: unless-stopped
@@ -581,6 +535,7 @@ services:
 
   # Video bridge
   jvb:
+    profiles: ["prod"]
     <<: *logging
     image: jitsi/jvb:stable
     restart: unless-stopped
@@ -627,6 +582,7 @@ services:
 
 
   db:
+    profiles: ["prod", "dev"]
     <<: *logging
     image: mariadb
     command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW --skip-innodb-read-only-compressed
@@ -642,41 +598,40 @@ services:
       - db
 
   redis:
+    profiles: ["prod", "dev"]
     image: redis:alpine
     restart: always
     networks:
       - redis
 
   nginx:
-    <<: *logging
-    image: nginx:alpine
+    profiles: ["prod", "dev"]
+    image: nginxproxy/nginx-proxy
     restart: always
+    ports:
+      - "80:80"
+      - "443:443"
     volumes:
+      - /var/run/docker.sock:/tmp/docker.sock:ro
       - /opt/ssl:/etc/nginx/certs:ro
-      - ./nginx/nginx.conf.template:/etc/nginx/conf.d/nginx.conf.template
-      - ./nginx/generate_conf.sh:/docker-entrypoint.d/generate_conf.sh
+      - ./nginx-proxy/vhost.d/labs_location:/etc/nginx/vhost.d/labs.${DOMAIN}_location:ro
+      - ./nginx-proxy/vhost.d/office:/etc/nginx/vhost.d/office.${DOMAIN}:ro
+      - ./nginx-proxy/vhost.d/rec:/etc/nginx/vhost.d/rec.${DOMAIN}:ro
+      - ./nginx-proxy/vhost.d/tower_location_override:/etc/nginx/vhost.d/tower.${DOMAIN}_location_override:ro
+      - ./nginx-proxy/vhost.d/tower:/etc/nginx/vhost.d/tower.${DOMAIN}:ro
+      - ./nginx-proxy/conf.d/custom_proxy.conf:/etc/nginx/conf.d/custom_proxy.conf:ro
       - nextcloud:/var/www/html/nextcloud:ro
       - ./christmas:/var/www/html/christmas:ro
       - tt-rss:/var/www/html/tt-rss:ro
-      - change:/var/www/html/change:ro
-    environment:
-      - DOMAIN=${DOMAIN}
-    depends_on:
-      - nextcloud
-      - gitea
-      - collabora
-      - pihole
-      - foundry
-      - tt-rss
-      - homebox
-      - navidrome
-    ports:
-      - 443:443
     networks:
       - nginx
 
   certs:
-    <<: *certs
+    profiles: ["dev"]
+    image: paulczar/omgwtfssl
+    restart: "no"
+    volumes:
+      - /opt/ssl:/certs
     environment:
       - SSL_SUBJECT=${DOMAIN}
       - CA_SUBJECT=chris@${DOMAIN}
@@ -684,27 +639,11 @@ services:
       - SSL_CSR=/certs/${DOMAIN}.csr
       - SSL_CERT=/certs/${DOMAIN}.crt
 
-  psqldb:
-    <<: *logging
-    image: postgres:12-alpine
-    restart: unless-stopped
-    environment:
-      - POSTGRES_USER=${DB_USER}
-      - POSTGRES_PASSWORD=${DB_PASSWORD}
-      - POSTGRES_DB=scarif
-    volumes:
-      - psqldb:/var/lib/postgresql/data
-    networks:
-      - db
-
 volumes:
   db:
-  psqldb:
-  tt-rss:
   gitea:
   nextcloud:
   foundry:
-  homebox:
   navidrome:
   minecraft:
   change: