feat: rebuild xiteng.site homelab platform

2026-08-12 09:48:25 +08:00
parent 557b0eca33
commit 5b84988789
128 changed files with 14979 additions and 292 deletions
@@ -0,0 +1,57 @@
+services:
+  remark42:
+    image: ghcr.io/umputun/remark42:v1.16.4
+    container_name: remark42
+    restart: unless-stopped
+    environment:
+      - REMARK_URL=https://remark.xiteng.site
+      - SECRET=60719f2fbf0c4fff4fffb3c3fa9a385953402601caf4324d734985c0afd9f7a9
+      - SITE=remark
+      - TRUSTED_PROXY=172.18.0.0/16
+      - AUTH_ANON=false
+      - AUTH_CUSTOM_NAME=Authentik
+      - AUTH_CUSTOM_CID=remark42-acd7c6f8
+      - AUTH_CUSTOM_CSEC=cb2163478f1959c7d900e98a9f0f89ef6ce9345989dc5043cd7442c33f56edb5
+      - AUTH_CUSTOM_AUTH_URL=https://auth.xiteng.site/application/o/authorize/
+      - AUTH_CUSTOM_TOKEN_URL=https://auth.xiteng.site/application/o/token/
+      - AUTH_CUSTOM_INFO_URL=https://auth.xiteng.site/application/o/userinfo/
+      - AUTH_CUSTOM_SCOPES=openid,profile,email
+    volumes:
+      - ./var:/srv/var
+    labels:
+      # ========== Traefik ==========
+      - "traefik.enable=true"
+      # HTTPS
+      - "traefik.http.routers.remark42.rule=Host(`remark.xiteng.site`)"
+      - "traefik.http.routers.remark42.entrypoints=websecure"
+      - "traefik.http.routers.remark42.tls=true"
+      - "traefik.http.routers.remark42.tls.certresolver=cfresolver"
+      - "traefik.http.services.remark42.loadbalancer.server.port=8080"
+      # HTTP (Cloudflare Tunnel)
+      - "traefik.http.routers.remark42-http.rule=Host(`remark.xiteng.site`)"
+      - "traefik.http.routers.remark42-http.service=remark42"
+      - "traefik.http.routers.remark42-http.entrypoints=web"
+      - "xiteng.site.cache.remark42.enabled=true"
+      - "xiteng.site.cache.remark42.routers=remark42,remark42-http"
+      - "xiteng.site.cache.remark42.paths=/assets/,/static/,/js/,/css/"
+      - "xiteng.site.cache.remark42.edge-ttl=604800"
+      - "xiteng.site.cache.remark42.stale-while-revalidate=86400"
+      - "xiteng.site.component.remark42.enabled=true"
+      - "xiteng.site.component.remark42.name=Remark42"
+      - "xiteng.site.component.remark42.description=可嵌入页面的评论服务；匿名发表评论已关闭。"
+      - "xiteng.site.component.remark42.section=services"
+      - "xiteng.site.component.remark42.category=内容与互动"
+      - "xiteng.site.component.remark42.endpoint=remark.xiteng.site"
+      - "xiteng.site.component.remark42.access=sso"
+      - "xiteng.site.component.remark42.access-label=发表评论需 Authentik"
+      - "xiteng.site.component.remark42.icon=R42"
+      - "xiteng.site.component.remark42.accent=green"
+      - "xiteng.site.component.remark42.order=320"
+      - "xiteng.site.component.remark42.monitor.enabled=true"
+      - "xiteng.site.component.remark42.monitor.url=http://remark42:8080/ping"
+    networks:
+      - homelab_net
+
+networks:
+  homelab_net:
+    external: true