ginnoir
7aa95fa00a
Every service now reads stack.env via env_file with container-exact var
names — no ${VAR} parse-time interpolation, no Portainer UI env vars
(except stacks/dev, kept on UI-env interpolation as documented exception).
- media: drop PUID/PGID/TZ env lines (env_file covers); resolve ${ROOT}
- foundry: secrets via env_file; FOUNDRY_PATCH_URLS -> CONTAINER_PATCH_URLS
- monitoring: HOMARR_SECRET_ENCRYPTION_KEY -> SECRET_ENCRYPTION_KEY
- notify: FRESHRSS_USER composed in stack.env; TZ via env_file
- owncloud: container-exact OWNCLOUD_*/MYSQL_* keys; runtime $$ healthcheck
- resume/famapp: composites (DATABASE_URL etc.) written out in stack.env
- authentik: container-exact keys; image tag pinned in compose
- notes: couchdb creds via env_file
- remote: gains stack.env (no secrets; convention completeness)
- CLAUDE.md: env convention, valhalla-lab registration-only note, correct
on-host Portainer working-copy path (/config/portainer/compose/<id>)
Validated with docker compose config on valhalla for all 15 stacks.
66 lines
1.7 KiB
YAML
66 lines
1.7 KiB
YAML
# foundry stack — Foundry VTT instances + 5etools mirror.
|
|
# Tabletop services; bind-mounted to /storage1/foundry*. They don't talk to each
|
|
# other, so they only need `edge` for Caddy to proxy them.
|
|
|
|
services:
|
|
foundry:
|
|
container_name: foundry
|
|
image: felddy/foundryvtt:latest
|
|
hostname: valhalla-primary
|
|
init: true
|
|
restart: unless-stopped
|
|
networks: [edge]
|
|
volumes:
|
|
- /storage1/foundry:/data
|
|
- /storage1/foundry/updatemain.bash:/home/foundry/updatemain.bash
|
|
- /storage1/Books/Tabletop:/data/Data/storage
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
- CONTAINER_VERBOSE=true
|
|
- FOUNDRY_HOSTNAME=foundry.ginnoir.com
|
|
- FOUNDRY_PROXY_PORT=443
|
|
- FOUNDRY_PROXY_SSL=true
|
|
- CONTAINER_PRESERVE_OWNER=/data/Data/storage
|
|
- FOUNDRY_UID=1000
|
|
- FOUNDRY_GID=1000
|
|
ports:
|
|
- "30000:30000"
|
|
|
|
foundry2:
|
|
container_name: foundry2
|
|
image: felddy/foundryvtt:latest
|
|
hostname: valhalla-secondary
|
|
init: true
|
|
restart: unless-stopped
|
|
networks: [edge]
|
|
volumes:
|
|
- /storage1/foundry2:/data
|
|
- /storage1/foundry/updatemain.bash:/home/foundry/updatemain.bash
|
|
- /storage1/Books/Tabletop:/data/Data/storage
|
|
env_file:
|
|
- stack.env
|
|
environment:
|
|
- CONTAINER_VERBOSE=true
|
|
- FOUNDRY_HOSTNAME=foundry2.ginnoir.com
|
|
- FOUNDRY_PROXY_PORT=443
|
|
- FOUNDRY_PROXY_SSL=true
|
|
- CONTAINER_PRESERVE_OWNER=/data/Data/storage
|
|
- FOUNDRY_UID=1000
|
|
- FOUNDRY_GID=1000
|
|
ports:
|
|
- "30001:30000"
|
|
|
|
5etools:
|
|
container_name: 5etools
|
|
image: ghcr.io/5etools-mirror-3/5etools-src:latest
|
|
restart: unless-stopped
|
|
networks: [edge]
|
|
ports:
|
|
- "9009:80"
|
|
|
|
networks:
|
|
edge:
|
|
name: edge
|
|
external: true
|