matrix-synapse/compose.yml

123 lines
3.4 KiB
YAML
Raw Normal View History

2021-12-12 18:22:49 +00:00
---
2020-09-08 16:38:35 +00:00
version: "3.8"
2021-12-12 18:22:49 +00:00
2020-09-08 16:38:35 +00:00
services:
2020-10-27 07:47:59 +00:00
app:
2022-09-05 23:05:11 +00:00
image: "matrixdotorg/synapse:v1.66.0"
2020-09-08 16:38:35 +00:00
volumes:
- "data:/data"
depends_on:
- db
secrets:
- db_password
2021-12-13 11:16:23 +00:00
- registration_shared_secret
- macaroon_secret_key
- form_secret
2020-09-08 16:38:35 +00:00
environment:
- ENCRYPTED_BY_DEFAULT
2022-01-12 10:27:43 +00:00
- AUTO_JOIN_ROOM
- AUTO_JOIN_ROOM_ENABLED
- DISABLE_FEDERATION
2021-12-13 09:56:36 +00:00
- DOMAIN
- ENABLE_3PID_LOOKUP
- ENABLE_ALLOWLIST
- ENABLE_REGISTRATION
- FEDERATION_ALLOWLIST
2020-09-08 16:38:35 +00:00
- LETSENCRYPT_HOST=${DOMAIN}
- PASSWORD_LOGIN_ENABLED
- REDACTION_RETENTION_PERIOD
- ROOT_LOG_LEVEL
- SERVE_SERVER_WELLKNOWN
- SQL_LOG_LEVEL
2021-12-13 11:54:09 +00:00
- STACK_NAME
2021-12-12 22:25:24 +00:00
- SYNAPSE_ADMIN_EMAIL
- SYNAPSE_REPORT_STATS=no
- SYNAPSE_SERVER_NAME=${DOMAIN}
- USER_IPS_MAX_AGE
2021-12-12 22:25:24 +00:00
- VIRTUAL_HOST=${DOMAIN}
- VIRTUAL_PORT=8008
- RETENTION_MAX_LIFETIME
2020-10-27 07:48:06 +00:00
networks:
- proxy
- internal
2021-12-12 18:22:49 +00:00
entrypoint: /docker-entrypoint.sh
configs:
- source: homeserver_yaml
target: /data/homeserver.yaml
2021-12-13 11:39:19 +00:00
- source: log_config
target: /data/log.config
2021-12-12 18:22:49 +00:00
- source: entrypoint_conf
target: /docker-entrypoint.sh
mode: 0555
deploy:
restart_policy:
condition: on-failure
labels:
- "traefik.enable=true"
- "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=8008"
- "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`)"
- "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
- "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
2022-09-05 23:05:11 +00:00
- "coop-cloud.${STACK_NAME}.version=2.2.0+v1.66.0"
2021-12-12 18:22:49 +00:00
db:
image: postgres:13-alpine
secrets:
- db_password
environment:
- LC_COLLATE=C
- LC_CTYPE=C
2021-12-13 11:52:48 +00:00
- POSTGRES_DB=synapse
- POSTGRES_INITDB_ARGS="-E \"UTF8\""
2021-12-13 11:52:48 +00:00
- POSTGRES_PASSWORD_FILE=/run/secrets/db_password
- POSTGRES_USER=synapse
networks:
- internal
healthcheck:
test: ["CMD", "pg_isready", "-U", "synapse"]
volumes:
- postgres:/var/lib/postgresql/data
2022-04-12 13:29:56 +00:00
deploy:
labels:
backupbot.backup: "true"
backupbot.backup.pre-hook: "mkdir -p /tmp/backup/ && PGPASSWORD=$$(cat $${POSTGRES_PASSWORD_FILE}) pg_dump -U $${POSTGRES_USER} $${POSTGRES_DB} > /tmp/backup/backup.sql"
backupbot.backup.post-hook: "rm -rf /tmp/backup"
backupbot.backup.path: "/tmp/backup/"
2020-09-08 16:38:35 +00:00
volumes:
data:
postgres:
2021-12-12 18:22:49 +00:00
2020-09-08 16:38:35 +00:00
networks:
proxy:
external: true
internal:
2021-12-12 18:22:49 +00:00
2020-09-08 16:38:35 +00:00
configs:
entrypoint_conf:
name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_CONF_VERSION}
file: entrypoint.sh.tmpl
template_driver: golang
homeserver_yaml:
name: ${STACK_NAME}_homserver_yaml_${HOMESERVER_YAML_VERSION}
file: homeserver.yaml.tmpl
template_driver: golang
2021-12-13 11:39:19 +00:00
log_config:
name: ${STACK_NAME}_log_config_${LOG_CONFIG_VERSION}
file: log.config.tmpl
template_driver: golang
secrets:
db_password:
external: true
name: ${STACK_NAME}_db_password_${SECRET_DB_PASSWORD_VERSION}
2021-12-13 11:16:23 +00:00
registration_shared_secret:
external: true
name: ${STACK_NAME}_db_password_${SECRET_REGISTRATION_SHARED_SECRET_VERSION}
macaroon_secret_key:
external: true
name: ${STACK_NAME}_db_password_${SECRET_MACAROON_SECRET_KEY_VERSION}
form_secret:
external: true
name: ${STACK_NAME}_db_password_${SECRET_FORM_SECRET_VERSION}