fkrebs/ct104-stacks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auto: sync 2026-05-28

Browse Source
This commit is contained in:
Florian Krebs
2026-05-28 03:15:11 +02:00
parent 8ab6f699ae
commit 5d3187181d
3 changed files with 93 additions and 75 deletions
Download Patch File Download Diff File Expand all files Collapse all files
karakeep/docker-compose.yml
+36 -24
View File
@@ -30,33 +30,38 @@ services:
deploy:
resources:
limits:
cpus: "1.0"
cpus: '1.0'
memory: 2G
reservations:
cpus: "0.5"
cpus: '0.5'
memory: 1G
healthcheck:
# karakeep serves health at /api/health (/health is 404)
test: ["CMD", "curl", "-f", "http://localhost:3000/api/health"]
test:
- CMD
- curl
- -f
- http://localhost:3000/api/health
interval: 30s
timeout: 10s
retries: 3
start_period: 40s
networks:
- default
restart: unless-stopped
labels:
- "homepage.group=productivity"
- "homepage.name=Karakeep"
- "homepage.icon=sh-karakeep"
- "homepage.href=https://hoarder.nuclide.systems"
- "homepage.instance.internal.href=http://192.168.1.40:17001"
- "homepage.instance.public.href=https://hoarder.nuclide.systems"
- "homepage.widget.type=karakeep"
- "homepage.widget.url=http://192.168.1.40:17001"
- "homepage.widget.key=ak2_19817764ad2d3b7bc010_add146880ec70ee560cc8fbf87b46085"
- homepage.group=productivity
- homepage.name=Karakeep
- homepage.icon=sh-karakeep
- homepage.href=https://hoarder.nuclide.systems
- homepage.instance.internal.href=http://192.168.1.40:17001
- homepage.instance.public.href=https://hoarder.nuclide.systems
- homepage.widget.type=karakeep
- homepage.widget.url=http://192.168.1.40:17001
- homepage.widget.key=ak2_19817764ad2d3b7bc010_add146880ec70ee560cc8fbf87b46085
chrome:
image: gcr.io/zenika-hub/alpine-chrome:123
container_name: karakeep_chrome
shm_size: '512m'
shm_size: 512m
command:
- --no-sandbox
- --disable-gpu
@@ -67,15 +72,19 @@ services:
deploy:
resources:
limits:
cpus: "0.5"
cpus: '0.5'
memory: 1G
reservations:
cpus: "0.25"
cpus: '0.25'
memory: 512M
healthcheck:
# alpine-chrome has no curl; busybox wget is present. Use 127.0.0.1 NOT
# localhost — localhost resolves to ::1 but Chrome binds IPv4 only.
test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:9222/json/version"]
test:
- CMD
- wget
- -q
- -O
- /dev/null
- http://127.0.0.1:9222/json/version
interval: 30s
timeout: 10s
retries: 3
@@ -86,20 +95,23 @@ services:
container_name: karakeep_meilisearch
environment:
MEILI_MASTER_KEY: ${MEILI_MASTER_KEY}
MEILI_NO_ANALYTICS: "true"
MEILI_NO_ANALYTICS: 'true'
volumes:
# - meilisearch:/meili_data
- /opt/stacks/karakeep/localdata/meili:/meili_data
deploy:
resources:
limits:
cpus: "1.0"
cpus: '1.0'
memory: 2G
reservations:
cpus: "0.5"
cpus: '0.5'
memory: 1G
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:7700/health"]
test:
- CMD
- curl
- -f
- http://localhost:7700/health
interval: 30s
timeout: 10s
retries: 3
n8n/docker-compose.yml
+20 -14
View File
@@ -1,6 +1,6 @@
services:
n8n:
image: n8nio/n8n:2.20.11 # pinned 2026-05-19 — unpinned :latest drifted 2.7→2.20.11 and broke the OIDC hooks.js
image: n8nio/n8n:2.20.11
environment:
- N8N_HOST=${SUBDOMAIN}.${DOMAIN_NAME}
- N8N_PORT=5678
@@ -18,9 +18,7 @@ services:
- N8N_ENCRYPTION_KEY
- N8N_USER_MANAGEMENT_JWT_SECRET
- N8N_SECURE_COOKIE=false
# Trust proxy for rate limiting (fixes X-Forwarded-For header issue)
- N8N_TRUST_PROXY=true
# OIDC bolt-on re-enabled 2026-05-19: paths patched for 2.20.11 pnpm layout
- EXTERNAL_HOOK_FILES=/home/node/hooks.js
- OIDC_ISSUER_URL=https://id.nuclide.systems
- OIDC_CLIENT_ID=33135ad4-a3ed-45d3-938f-639abd2b9663
@@ -35,15 +33,17 @@ services:
deploy:
resources:
limits:
cpus: "1.0"
cpus: '1.0'
memory: 2G
reservations:
cpus: "0.5"
cpus: '0.5'
memory: 1G
ports:
- 16000:5678
healthcheck:
test: ['CMD-SHELL', 'wget --spider -q http://n8n:5678/healthz || exit 1']
test:
- CMD-SHELL
- wget --spider -q http://n8n:5678/healthz || exit 1
interval: 5s
timeout: 5s
retries: 10
@@ -51,15 +51,21 @@ services:
- /opt/stacks/n8n/data:/home/node/.n8n
- /opt/stacks/n8n/hooks.js:/home/node/hooks.js:ro
labels:
- "homepage.group=productivity"
- "homepage.name=n8n"
- "homepage.icon=sh-n8n"
- "homepage.href=https://n8n.nuclide.systems"
- "homepage.instance.internal.href=http://192.168.1.40:16000"
- "homepage.instance.public.href=https://n8n.nuclide.systems"
- "homepage.widget.type=n8n"
- "homepage.widget.url=http://n8n:5678"
- homepage.group=productivity
- homepage.name=n8n
- homepage.icon=sh-n8n
- homepage.href=https://n8n.nuclide.systems
- homepage.instance.internal.href=http://192.168.1.40:16000
- homepage.instance.public.href=https://n8n.nuclide.systems
- homepage.widget.type=n8n
- homepage.widget.url=http://n8n:5678
networks:
- default
- ai-internal
networks:
default:
external: true
name: shared_backend
ai-internal:
external: true
name: ai-internal
vaultwarden/docker-compose.yml
+1 -1
View File
@@ -33,7 +33,7 @@ services:
PUSH_IDENTITY_URI: https://identity.bitwarden.eu
DATABASE_URL: postgresql://vaultwarden:${VW_PG_PASSWORD}@192.168.1.6:5432/vaultwarden
volumes:
- /opt/stacks/vaultwarden/data:/data # attachments, rsa_key.pem, config.json
- /mnt/pve/unas/services/vaultwarden:/data # attachments, rsa_key.pem, config.json
- /etc/localtime:/etc/localtime:ro
- /etc/timezone:/etc/timezone:ro
ports: