Commit graph

173 commits

Author SHA1 Message Date
Simon L 382593d553 imaginary - add tmpfs in /tmp
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-07-10 16:30:39 +02:00
Simon L 443fb67465 adjust detail
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-27 11:56:54 +02:00
Simon L dedc25dc51 some more adjustments
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-27 11:53:06 +02:00
Simon L 2dfab2941b adjust a few things
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-27 11:51:53 +02:00
Simon L 5189f0cd51 make talk-recording read-only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-26 18:18:26 +02:00
Simon L ab5449f835 make talk container read-only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-26 18:11:00 +02:00
Simon L 671edeb1d1 make collabora container read-only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-26 17:43:14 +02:00
Simon L 9fddad59b5 make postgresql container read-only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-26 16:51:10 +02:00
Simon L cc9dbc9590 make domaincheck container read-only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-26 16:06:14 +02:00
Simon L 9777f70294 apache - expose udp for http3 to work
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-20 21:30:56 +02:00
Simon L 2e87b41672 make clamav read-only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-19 15:29:13 +02:00
Simon L 7b7e3fdc04 another attempt to fix backup restore
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-19 14:28:51 +02:00
Simon L 7a85532755 Make borg read-only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-19 13:07:54 +02:00
Simon L 4ff9d1b136 make imaginary read-only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-16 14:24:44 +02:00
Simon L 421d329e35 fix notify-push container startup
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-16 12:10:12 +02:00
Simon L 20167ab914 change starting order of notify-push to start after nextcloud container
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-15 17:03:20 +02:00
Simon L 276a85421a fix internal_port of notify-push
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-15 16:11:48 +02:00
Simon L ec9e4d4dc3
Revert "make borgbackup read-only" 2023-06-15 16:01:07 +02:00
Simon L b011c47abe
Merge pull request #2705 from nextcloud/enh/noid/borgbackup-read-only
make borgbackup read-only
2023-06-15 15:26:22 +02:00
Simon L 541fad9bab
Merge pull request #2703 from nextcloud/enh/2695/notify-push
put notify-push into its own container
2023-06-15 15:25:50 +02:00
Simon L 9b1421980f put notify-push into its own container
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-07 16:57:04 +02:00
Simon L 45691e31df make watchtower read-only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-07 16:44:22 +02:00
Simon L a9befa0359 make borgbackup container read_only
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-07 16:42:09 +02:00
Simon L faa5947963 update to ES 8 and add necessary adjustements to its config
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-07 14:43:09 +02:00
Simon L 5583f88d9c fix issue with recording-secret
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-06 17:19:29 +02:00
Simon L acd54544ca nextcloud and not apache depends on talk-recording
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-06 14:22:02 +02:00
Simon L aff48b3479 redis - enable readonlyrootfs
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-06 10:36:02 +02:00
Simon L 50779a329a add profiles and networks to container-schema.json
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-06 09:59:38 +02:00
Simon L c1e3e65cdc
Merge pull request #2653 from nextcloud/enh/2447/remove-collabora-font-volume
Remove collaboras font volume as it does not seem to be used
2023-06-06 09:48:20 +02:00
Simon L 4953ce95c6 dont expose it publicly
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-05 18:52:05 +02:00
Simon L 70f27ae304 allow to disable/enable talk-recording
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-05 18:52:05 +02:00
Simon L 18804f8a79 Remove collaboras font volume as it does not seem to be used
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-06-01 14:31:38 +02:00
Simon L d037ebba66
Merge pull request #2454 from nextcloud/enh/noid/nextcloud-exec-commands
allow to define nextcloud_exec_commands in containers definition
2023-05-30 11:42:46 +02:00
Simon L ef43d19a27
Merge pull request #2428 from nextcloud/enh/noid/borg-retention-policy
allow to adjust borgs retention policy
2023-05-30 11:28:36 +02:00
Simon L e4de4dcb67 allow to define nextcloud_exec_commands in containers definition
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-05-26 15:54:01 +02:00
Simon L 65a9fe4c95 allow to adjust borgs retention policy
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-05-26 11:38:25 +02:00
Simon L 9f19026885 allow to include volumes in backup and restore
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-05-19 13:28:17 +02:00
Simon L 68e346047d
Merge pull request #2446 from nextcloud/enh/noid/collabora-cert
collabora - make startup faster by not generating ssl cert
2023-05-01 15:22:39 +02:00
Simon L 861d717480 collabora - make startup faster by not generating ssl cert
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-05-01 11:17:36 +02:00
Simon L eeeeb2f37b add apparmor_unconinfed to containers definition
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-04-27 19:24:14 +02:00
Simon L 0779609bed set BORG_HOST_ID to a fixed value in order to fix stale lock removal
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-04-25 09:11:10 +02:00
Simon L 37b5e12a6f rename DOCKER_SOCKET_PATH to WATCHTOWER_DOCKER_SOCKET_PATH
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-04-22 11:21:47 +02:00
Simon L 98eb90360b add a bit more logic
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-03-30 18:12:57 +02:00
Simon L 92dd734993
Merge pull request #2232 from nextcloud/enh/noid/fix-datdir-permissions
fix the datadir permission problems during install
2023-03-30 15:42:10 +02:00
Simon L 386533b02f fix the datadir permission problems during install
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-03-30 10:54:56 +02:00
Simon L d0f11028d3 increase shm_size for postgresql
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-03-29 10:57:44 +02:00
Simon L 4800888da6 collabora - add mount_jail_tree=false
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-03-09 17:55:48 +01:00
Simon L 6587530242 fix set_memory for imaginary and move cap_add to containers.json
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-03-06 11:45:07 +01:00
Simon L ee06a04f51 fix datadir permission check
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-03-02 10:33:51 +01:00
Simon L 93bd1ce2ee talk - improve a few things
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-02-22 12:35:33 +01:00
Simon L 058cadb053 collabora - add server-name variable
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-02-06 12:52:54 +01:00
Simon L 6533018c6f ports 8081 needs to be expose for the talk container
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-02-03 10:48:30 +01:00
Simon L f5c32a1a67 expose it not needed for containers that publish ports
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-02-02 15:37:03 +01:00
Simon L 21492e6b9d add expose property to containers definition
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-02-02 15:11:40 +01:00
Simon L df91f5d483 fix daily backup running into conflict with elasticsearch
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-02-02 11:28:29 +01:00
Simon L e047c2402b
Merge pull request #1663 from nextcloud/enh/1643/set-remote-font-config-for-collabora
set remote_font_config for collabora
2023-01-04 12:32:35 +01:00
Simon L 34376d535f set remote_font_config for collabora
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-01-04 12:28:56 +01:00
Simon L 92b271c3e5 allow to add the /dev/dri device into the container and refactor devices
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-01-03 02:13:34 +01:00
Simon L f98528eac5 rename services to aio_services_v1
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-01-02 22:11:20 +01:00
Simon L 29197deb69 removed not-used properties from the containers definition
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-01-02 22:11:20 +01:00
Simon L 5dc9fad2d6 refactor containerports
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-30 23:10:44 +01:00
Simon L 6dd9412fb6 rename volume name to source and volume location to destination
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-30 22:56:37 +01:00
Simon L 2fd750c8b2 allow to hide containers from the interface via display_name
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 15:56:37 +01:00
Simon L 54f61eba68 internal_ports should be a string and not an array
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 01:46:42 +01:00
Simon L 53065b5631 rename internalPorts to internal_ports
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 01:08:44 +01:00
Simon L 7a9a452f45 rename production to services
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 01:08:44 +01:00
Simon L 3c57b2db56 rename displayName to display_name
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 01:08:43 +01:00
Simon L 1e78d729c4 rename restartPolicy to restart
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 01:08:43 +01:00
Simon L 5c444472c7 rename maxShutdownTime to stop_grace_period
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 01:08:43 +01:00
Simon L b13cb77ce2 rename environmentVariables to environment
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 01:08:43 +01:00
Simon L 4a69d53a67 rename containerName to image
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 01:08:43 +01:00
Simon L 6cca3ceb6c rename dependsOn to depends_on
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 01:08:43 +01:00
Simon L 7720ed5061 rename identifier to container_name
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-25 00:36:19 +01:00
Simon L f4944fbf92 change clamd startup timeout to 90s
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-17 15:33:28 +01:00
Simon L 3568adf8c6
Merge pull request #1498 from nextcloud/enh/1032/add-collabora-volume
add a volume for collabora fonts
2022-12-15 12:14:29 +01:00
Simon L 79946a876c remove the redis database once a backup gets restored
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-15 12:10:55 +01:00
Simon L 882fd3be26 add a volume for redis
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-15 12:09:31 +01:00
Simon L bea8ca86dd add a volume for collabora fonts
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-13 14:42:02 +01:00
Simon L 85999c297c also back up the fulltextsearch volume
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-12-12 18:16:24 +01:00
Simon L da2b967a33 allow to add dependencies and php extensions into the Nextcloud container
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-11-10 12:32:21 +01:00
Simon L 588f9a36e7 allow to adjust the PHP memory limit
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-11-10 12:15:40 +01:00
Simon L d424776a43 rename TRUSTED_CACERTS_DIR to NEXTCLOUD_TRUSTED_CACERTS_DIR
Signed-off-by: Simon L <szaimen@e.mail.de>
2022-11-10 11:49:34 +01:00
szaimen 029b6ea797 allow to adjust Nextcloud apps that get installed upon first startup
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-11-08 21:48:21 +01:00
szaimen 4e8c1e53ee allow to disable seccomp for collabora
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-09-20 19:58:36 +02:00
Simon L c670d982aa
Merge pull request #1178 from nextcloud/enh/noid/bring-in-sync
bring Apache limits in sync with PHP limits
2022-09-20 19:12:00 +02:00
szaimen 2b5deb81f5 bring Apache limits in sync with PHP limits
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-09-20 18:16:17 +02:00
Lorenzo Marroccoli 935d4aab11 Let the Nextcloud-Container trust custom CAs (e.g. for using LDAPS) 2
Signed-off-by: Lorenzo Marroccoli <lollo0296@gmail.com>
Signed-off-by: szaimen <szaimen@e.mail.de>
Co-Authored-By: Simon L. <szaimen@e.mail.de>
2022-09-14 10:08:24 +02:00
szaimen f188ac8ebf reorder dependencies
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-08-26 14:03:18 +02:00
szaimen c90ee1c4db add PHP_MAX_TIME to containers.json
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-08-25 14:59:57 +02:00
szaimen 2ee63dbe42 allow to back up additional directories
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-08-25 13:44:04 +02:00
szaimen 8010030a5d add fulltextsearch as option
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-08-23 11:37:59 +02:00
szaimen e152185fe9 allow to adjust the upload limit
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-08-22 12:11:55 +02:00
szaimen 05e90d6110 add imaginary
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-08-22 12:02:56 +02:00
Julius Härtl 0b49031058
Set collabora home option
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2022-08-15 21:24:34 +02:00
szaimen 79e53f0d00 allow to run daily backups without automatic updates
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-07-17 19:45:16 +02:00
szaimen 97f053228c allow to set collabora dictionaries
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-07-04 14:32:48 +02:00
szaimen 7ae718300f allow to adjust the talk port
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-07-04 14:17:33 +02:00
szaimen 2cf98773cc add a secret to onlyoffice and collabora
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-06-27 14:11:29 +02:00
szaimen 3db57c6290 allow to specify the docker socket path
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-06-06 22:49:22 +02:00
szaimen 76bdd92c7f set PGTZ, too
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-05-23 20:16:05 +02:00