ginnoir
7aa95fa00a
Every service now reads stack.env via env_file with container-exact var
names — no ${VAR} parse-time interpolation, no Portainer UI env vars
(except stacks/dev, kept on UI-env interpolation as documented exception).
- media: drop PUID/PGID/TZ env lines (env_file covers); resolve ${ROOT}
- foundry: secrets via env_file; FOUNDRY_PATCH_URLS -> CONTAINER_PATCH_URLS
- monitoring: HOMARR_SECRET_ENCRYPTION_KEY -> SECRET_ENCRYPTION_KEY
- notify: FRESHRSS_USER composed in stack.env; TZ via env_file
- owncloud: container-exact OWNCLOUD_*/MYSQL_* keys; runtime $$ healthcheck
- resume/famapp: composites (DATABASE_URL etc.) written out in stack.env
- authentik: container-exact keys; image tag pinned in compose
- notes: couchdb creds via env_file
- remote: gains stack.env (no secrets; convention completeness)
- CLAUDE.md: env convention, valhalla-lab registration-only note, correct
on-host Portainer working-copy path (/config/portainer/compose/<id>)
Validated with docker compose config on valhalla for all 15 stacks.
72 lines
1.8 KiB
YAML
72 lines
1.8 KiB
YAML
# famapp stack — family app + its Postgres and MinIO (plant/container images).
|
|
#
|
|
# Volume -> bind-mount conversions:
|
|
# db data -> /config/famapp/postgres (SSD; DB)
|
|
# minio data -> /storage1/labdata/famapp/minio (ZFS; uploaded images)
|
|
# Only famapp joins edge (fam.ginnoir.com); db + minio stay private.
|
|
# famapp reaches Authentik (OIDC) and ntfy over their public URLs through Caddy,
|
|
# so there is no cross-stack container dependency.
|
|
|
|
services:
|
|
famapp:
|
|
container_name: famapp
|
|
image: ghcr.io/ginnoir/famapp:latest
|
|
pull_policy: always
|
|
restart: unless-stopped
|
|
networks: [famapp, edge]
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
NODE_ENV: production
|
|
MINIO_ENDPOINT: http://famapp-minio:9000
|
|
ports:
|
|
- "3010:3000"
|
|
depends_on:
|
|
famapp-db:
|
|
condition: service_healthy
|
|
famapp-minio:
|
|
condition: service_healthy
|
|
|
|
famapp-db:
|
|
container_name: postgres_famapp
|
|
image: postgres:16-alpine
|
|
restart: unless-stopped
|
|
networks: [famapp]
|
|
env_file:
|
|
- stack.env
|
|
volumes:
|
|
- /config/famapp/postgres:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U famapp -d famapp"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
famapp-minio:
|
|
container_name: minio_famapp
|
|
image: minio/minio:latest
|
|
command: server /data --console-address ":9003"
|
|
restart: unless-stopped
|
|
networks: [famapp]
|
|
env_file:
|
|
- stack.env
|
|
volumes:
|
|
- /storage1/labdata/famapp/minio:/data
|
|
ports:
|
|
- "9002:9000"
|
|
- "9003:9003"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "curl -sf http://localhost:9000/minio/health/live || exit 1"]
|
|
interval: 30s
|
|
timeout: 20s
|
|
retries: 3
|
|
start_period: 30s
|
|
|
|
networks:
|
|
famapp:
|
|
name: famapp
|
|
driver: bridge
|
|
edge:
|
|
name: edge
|
|
external: true
|