Apfelwurm
c952020194
Some checks failed
continuous-integration/drone/push Build is failing
This implements the high performance backend for Nextcloud Talk, which is nessecary if it needs to handle more people (video) calling. More Details about it: https://nextcloud-talk.readthedocs.io/en/latest/quick-install/ The current implementation is sadly limited to be used once per host, so this might need some additional love in the future, if someone needs it more flexible. The related traefik pr: coop-cloud/traefik#66 Reviewed-on: #56 Co-authored-by: Apfelwurm <Alexander@volzit.de> Co-committed-by: Apfelwurm <Alexander@volzit.de>
70 lines
2.5 KiB
YAML
70 lines
2.5 KiB
YAML
version: "3.8"
|
|
|
|
services:
|
|
talk:
|
|
image: "nextcloud/aio-talk:20251128_084214"
|
|
environment:
|
|
- NC_DOMAIN=${DOMAIN}
|
|
- TALK_HOST=${TALK_DOMAIN}
|
|
- TZ
|
|
- TALK_PORT=3478
|
|
- INTERNAL_SECRET_FILE=/run/secrets/talk_internal_secret
|
|
- TURN_SECRET_FILE=/run/secrets/talk_turn_secret
|
|
- SIGNALING_SECRET_FILE=/run/secrets/talk_signaling_secret
|
|
deploy:
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.docker.network=proxy
|
|
- traefik.http.services.${STACK_NAME}_talk.loadbalancer.server.port=8081
|
|
- traefik.http.routers.${STACK_NAME}_talk.rule=Host(`${TALK_DOMAIN}`)
|
|
- traefik.http.routers.${STACK_NAME}_talk.entrypoints=web-secure
|
|
- traefik.http.routers.${STACK_NAME}_talk.tls.certresolver=${LETS_ENCRYPT_ENV}
|
|
- traefik.tcp.routers.${STACK_NAME}_nextcloud-talk-hpb.rule=HostSNI(`*`)
|
|
- traefik.tcp.routers.${STACK_NAME}_nextcloud-talk-hpb.entrypoints=nextcloud-talk-hpb
|
|
- traefik.tcp.routers.${STACK_NAME}_nextcloud-talk-hpb.service=${STACK_NAME}_nextcloud-talk-hpb-svc
|
|
- traefik.tcp.services.${STACK_NAME}_nextcloud-talk-hpb-svc.loadbalancer.server.port=3478
|
|
- traefik.udp.routers.${STACK_NAME}_nextcloud-talk-hpb-udp.entrypoints=nextcloud-talk-hpb-udp
|
|
- traefik.udp.routers.${STACK_NAME}_nextcloud-talk-hpb-udp.service=${STACK_NAME}_nextcloud-talk-hpb-udp-svc
|
|
- traefik.udp.services.${STACK_NAME}_nextcloud-talk-hpb-udp-svc.loadbalancer.server.port=3478
|
|
networks:
|
|
- proxy
|
|
configs:
|
|
- source: entrypoint_talk
|
|
target: /custom-entrypoint.sh
|
|
mode: 775
|
|
entrypoint: /custom-entrypoint.sh
|
|
secrets:
|
|
- source: talk_internal_secret
|
|
uid: "1000"
|
|
gid: "122"
|
|
mode: 0600
|
|
- source: talk_turn_secret
|
|
uid: "1000"
|
|
gid: "122"
|
|
mode: 0600
|
|
- source: talk_signaling_secret
|
|
uid: "1000"
|
|
gid: "122"
|
|
mode: 0600
|
|
|
|
app:
|
|
secrets:
|
|
- talk_turn_secret
|
|
- talk_signaling_secret
|
|
|
|
secrets:
|
|
talk_internal_secret:
|
|
external: true
|
|
name: ${STACK_NAME}_talk_internal_secret_${SECRET_TALK_INTERNAL_SECRET_VERSION}
|
|
talk_turn_secret:
|
|
external: true
|
|
name: ${STACK_NAME}_talk_turn_secret_${SECRET_TALK_TURN_SECRET_VERSION}
|
|
talk_signaling_secret:
|
|
external: true
|
|
name: ${STACK_NAME}_talk_signaling_secret_${SECRET_TALK_SIGNALING_SECRET_VERSION}
|
|
|
|
configs:
|
|
entrypoint_talk:
|
|
name: ${STACK_NAME}_entrypoint_talk_${ENTRYPOINT_TALK_VERSION}
|
|
file: entrypoint.talk.sh.tmpl
|
|
template_driver: golang |