refactor(mealie): parameterize domain, LDAP, and DB connection values
ci/woodpecker/push/woodpecker Pipeline was canceled
ci/woodpecker/push/woodpecker Pipeline was canceled
This commit is contained in:
+10
-11
@@ -10,7 +10,6 @@ services:
|
|||||||
- postgresql_db-backend
|
- postgresql_db-backend
|
||||||
volumes:
|
volumes:
|
||||||
- /volume1/docker/Mealie/app/data:/app/data/
|
- /volume1/docker/Mealie/app/data:/app/data/
|
||||||
# - /volume1/docker/letsencrypt/certs/certs/homehub.bryanmail.net.crt:/app/cert/homehub.bryanmail.net.crt
|
|
||||||
environment:
|
environment:
|
||||||
# Set Backend ENV Variables Here
|
# Set Backend ENV Variables Here
|
||||||
- ALLOW_SIGNUP=true
|
- ALLOW_SIGNUP=true
|
||||||
@@ -19,27 +18,27 @@ services:
|
|||||||
- TZ=America/Anchorage
|
- TZ=America/Anchorage
|
||||||
- MAX_WORKERS=1
|
- MAX_WORKERS=1
|
||||||
- WEB_CONCURRENCY=1
|
- WEB_CONCURRENCY=1
|
||||||
- BASE_URL=https://mealie.bryanmail.net
|
- BASE_URL=https://food.${DOMAIN}
|
||||||
|
|
||||||
# Database Settings
|
# Database Settings
|
||||||
- DB_ENGINE=postgres
|
- DB_ENGINE=postgres
|
||||||
- POSTGRES_USER=mealie
|
- POSTGRES_USER=mealie
|
||||||
- POSTGRES_PASSWORD_FILE=/run/secrets/mealie_db_password
|
- POSTGRES_PASSWORD_FILE=/run/secrets/mealie_db_password
|
||||||
- POSTGRES_SERVER=postgresql
|
- POSTGRES_SERVER=${POSTGRES_HOST}
|
||||||
- POSTGRES_PORT=5432
|
- POSTGRES_PORT=${POSTGRES_PORT}
|
||||||
- POSTGRES_DB=mealie-v1
|
- POSTGRES_DB=mealie-v1
|
||||||
|
|
||||||
#LDAP Settings
|
#LDAP Settings
|
||||||
- LDAP_AUTH_ENABLED=TRUE
|
- LDAP_AUTH_ENABLED=TRUE
|
||||||
- LDAP_SERVER_URL=ldap://homehub.bryanmail.net
|
- LDAP_SERVER_URL=ldap://${LDAP_HOST}
|
||||||
- LDAP_TLS_INSECURE=TRUE
|
- LDAP_TLS_INSECURE=TRUE
|
||||||
# - LDAP_TLS_CACERTFILE=/app/cert/homehub.bryanmail.net.crt
|
# - LDAP_TLS_CACERTFILE=/app/cert/${LDAP_HOST}.crt
|
||||||
- LDAP_ENABLE_STARTTLS=TRUE
|
- LDAP_ENABLE_STARTTLS=TRUE
|
||||||
- LDAP_BASE_DN=DC=bryanmail,DC=net
|
- LDAP_BASE_DN=${LDAP_BASE_DN}
|
||||||
- LDAP_QUERY_BIND=CN=AVB,OU=AAD Sync,OU=House Members,OU=Topside Pinnacle,DC=bryanmail,DC=net
|
- LDAP_QUERY_BIND=${LDAP_QUERY_BIND}
|
||||||
- LDAP_QUERY_PASSWORD_FILE=/run/secrets/mealie_ldap_query_password
|
- LDAP_QUERY_PASSWORD_FILE=/run/secrets/mealie_ldap_query_password
|
||||||
# - LDAP_USER_FILTER=(memberOf=OU=AAD Sync,OU=House Members,OU=Topside Pinnacle,DC=bryanmail,DC=net)
|
# - LDAP_USER_FILTER=(memberOf=${LDAP_ADMIN_GROUP})
|
||||||
- LDAP_ADMIN_FILTER=(memberOf=OU=AAD Sync,OU=House Members,OU=Topside Pinnacle,DC=bryanmail,DC=net)
|
- LDAP_ADMIN_FILTER=(memberOf=${LDAP_ADMIN_GROUP})
|
||||||
- LDAP_ID_ATTRIBUTE=sAMAccountName
|
- LDAP_ID_ATTRIBUTE=sAMAccountName
|
||||||
- LDAP_NAME_ATTRIBUTE=displayName
|
- LDAP_NAME_ATTRIBUTE=displayName
|
||||||
- LDAP_MAIL_ATTRIBUTE=mail
|
- LDAP_MAIL_ATTRIBUTE=mail
|
||||||
@@ -51,7 +50,7 @@ services:
|
|||||||
deploy:
|
deploy:
|
||||||
labels:
|
labels:
|
||||||
- traefik.enable=true
|
- traefik.enable=true
|
||||||
- traefik.http.routers.mealie.rule=Host(`food.bryanmail.net`)
|
- traefik.http.routers.mealie.rule=Host(`food.${DOMAIN}`)
|
||||||
- traefik.http.routers.mealie.tls=true
|
- traefik.http.routers.mealie.tls=true
|
||||||
- traefik.http.routers.mealie.tls.certresolver=letsencrypt
|
- traefik.http.routers.mealie.tls.certresolver=letsencrypt
|
||||||
- traefik.http.routers.mealie.entrypoints=websecure
|
- traefik.http.routers.mealie.entrypoints=websecure
|
||||||
|
|||||||
Reference in New Issue
Block a user