70 lines
2.3 KiB
Django/Jinja

services:
{% include 'roles/docker-central-database/templates/services/' + database_type + '.yml.j2' %}
application:
{% include 'roles/docker-compose/templates/services/base.yml.j2' %}
image: "gitea/gitea:{{applications.gitea.version}}"
ports:
- "127.0.0.1:{{ports.localhost.http[application_id]}}:3000"
- "{{ports.public.ssh[application_id]}}:22"
volumes:
- data:/data
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
healthcheck:
test: ["CMD", "curl", "-f", "http://127.0.0.1:3000"]
interval: 1m
timeout: 10s
retries: 3
{% include 'templates/docker/container/networks.yml.j2' %}
{% include 'templates/docker/container/depends-on-just-database.yml.j2' %}
{% include 'templates/docker/compose/volumes.yml.j2' %}
data:
{% include 'templates/docker/compose/networks.yml.j2' %}
coturn:
image: coturn/coturn
restart: always
network_mode: "host" # Nutzt die Host-IP für externe Erreichbarkeit (optional)
ports:
- "3478:3478/udp"
- "3478:3478/tcp"
- "5349:5349/tcp"
- "5349:5349/udp"
- "49152-65535:49152-65535/udp" # TURN-Relay-Ports (wichtig!)
#volumes: # In case customized config is required
# - coturn-config:/etc/coturn
environment:
- TURN_PORT=3478
- TURN_PORT_TLS=5349
- TURN_SECRET=my-secret-key
- TURN_USER=turnuser
- TURN_PASSWORD=turnpassword
command: >
--log-file=stdout
--external-ip=$(detect-external-ip)
--lt-cred-mech
--user=turnuser:turnpassword
--realm=nextcloud
--total-quota=100
--stale-nonce
--no-multicast-peers
--denied-peer-ip=0.0.0.0-0.255.255.255
--denied-peer-ip=10.0.0.0-10.255.255.255
--denied-peer-ip=100.64.0.0-100.127.255.255
--denied-peer-ip=169.254.0.0-169.254.255.255
--denied-peer-ip=172.16.0.0-172.31.255.255
--denied-peer-ip=192.0.0.0-192.0.0.255
--denied-peer-ip=192.88.99.0-192.88.99.255
--denied-peer-ip=192.168.0.0-192.168.255.255
--denied-peer-ip=198.18.0.0-198.19.255.255
--denied-peer-ip=198.51.100.0-198.51.100.255
--denied-peer-ip=203.0.113.0-203.0.113.255
--denied-peer-ip=240.0.0.0-255.255.255.255
volumes:
nextcloud:
coturn-config: