ginnoir
7aa95fa00a
Every service now reads stack.env via env_file with container-exact var
names — no ${VAR} parse-time interpolation, no Portainer UI env vars
(except stacks/dev, kept on UI-env interpolation as documented exception).
- media: drop PUID/PGID/TZ env lines (env_file covers); resolve ${ROOT}
- foundry: secrets via env_file; FOUNDRY_PATCH_URLS -> CONTAINER_PATCH_URLS
- monitoring: HOMARR_SECRET_ENCRYPTION_KEY -> SECRET_ENCRYPTION_KEY
- notify: FRESHRSS_USER composed in stack.env; TZ via env_file
- owncloud: container-exact OWNCLOUD_*/MYSQL_* keys; runtime $$ healthcheck
- resume/famapp: composites (DATABASE_URL etc.) written out in stack.env
- authentik: container-exact keys; image tag pinned in compose
- notes: couchdb creds via env_file
- remote: gains stack.env (no secrets; convention completeness)
- CLAUDE.md: env convention, valhalla-lab registration-only note, correct
on-host Portainer working-copy path (/config/portainer/compose/<id>)
Validated with docker compose config on valhalla for all 15 stacks.
33 lines
792 B
YAML
33 lines
792 B
YAML
# remote stack — RustDesk relay (hbbr) + signal/ID server (hbbs).
|
|
# Not proxied by Caddy (raw TCP/UDP ports); bind-mounted to /config/rustdesk.
|
|
# They use the project default network for the inter-container dependency.
|
|
|
|
services:
|
|
hbbr:
|
|
container_name: hbbr
|
|
image: rustdesk/rustdesk-server:latest
|
|
command: hbbr
|
|
restart: unless-stopped
|
|
env_file:
|
|
- stack.env
|
|
ports:
|
|
- "21117:21117"
|
|
volumes:
|
|
- /config/rustdesk/hbbr/data:/root
|
|
|
|
hbbs:
|
|
container_name: hbbs
|
|
image: rustdesk/rustdesk-server:latest
|
|
command: hbbs
|
|
restart: unless-stopped
|
|
env_file:
|
|
- stack.env
|
|
ports:
|
|
- "21115:21115"
|
|
- "21116:21116"
|
|
- "21116:21116/udp"
|
|
volumes:
|
|
- /config/rustdesk/hbbs/data:/root
|
|
depends_on:
|
|
- hbbr
|