liooil
8c7eddbaee
新增: - SeaweedFS v4.28 替代 MinIO (域名 file.xiteng.site) - Authentik Outpost (Uptime Kuma + SeaweedFS 独立实例) - ForwardAuth 为 Uptime Kuma 和 SeaweedFS 提供认证 - gpu-exporter.py 监控脚本 升级: - Traefik v3.6 → v3.7 - Authentik 固定版本 2026.5.0 + trusted proxy CIDR - HedgeDoc PG 11 → 16，添加 OIDC 认证 - Homepage 添加 OIDC 认证 安全: - Outpost token 迁移至 .env 引用（不再硬编码） - .gitignore 扩展覆盖数据/缓存/旧 MinIO - security.toml 清理注释掉的旧密钥 移除: - MinIO（已全部迁移至 SeaweedFS）
57 lines
2.4 KiB
YAML
57 lines
2.4 KiB
YAML
services:
|
||
homepage:
|
||
image: ghcr.io/gethomepage/homepage:latest
|
||
container_name: homepage
|
||
restart: unless-stopped
|
||
volumes:
|
||
- ./config:/app/config
|
||
- ./config/icons:/app/public/icons:ro
|
||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||
ports:
|
||
- "3003:3000"
|
||
environment:
|
||
- HOMEPAGE_ALLOWED_HOSTS=home.xiteng.site,xiteng.site
|
||
- HOMEPAGE_AUTH_PROVIDER=oidc
|
||
- HOMEPAGE_AUTH_OIDC_ISSUER=https://auth.xiteng.site/application/o/homepage/
|
||
- HOMEPAGE_AUTH_OIDC_CLIENT_ID=homepage-64bfd7a7
|
||
- HOMEPAGE_AUTH_OIDC_CLIENT_SECRET=b5d710941dba4a4694a92fe7bc381f3c853a248b5114467d9b82b0953928326b
|
||
- HOMEPAGE_AUTH_OIDC_SCOPE=openid profile email
|
||
labels:
|
||
# --- 1. Traefik 路由设置 ---
|
||
- "traefik.enable=true"
|
||
- "traefik.http.routers.homepage.rule=Host(`home.xiteng.site`)"
|
||
- "traefik.http.services.homepage.loadbalancer.server.port=3000"
|
||
- "traefik.http.routers.homepage.entrypoints=websecure"
|
||
# --- 根域名 xiteng.site ---
|
||
- "traefik.http.routers.homepage-root.rule=Host(`xiteng.site`)"
|
||
- "traefik.http.routers.homepage-root.service=homepage"
|
||
- "traefik.http.routers.homepage-root.entrypoints=websecure"
|
||
# --- HTTP 入口（来自 cloudflared tunnel）---
|
||
- "traefik.http.routers.homepage-root-http.rule=Host(`xiteng.site`)"
|
||
- "traefik.http.routers.homepage-root-http.service=homepage"
|
||
- "traefik.http.routers.homepage-root-http.entrypoints=web"
|
||
- "traefik.http.routers.homepage-root.tls=true"
|
||
- "traefik.http.routers.homepage-root.tls.certresolver=cfresolver"
|
||
# --- 新增：开启 TLS 并指定解析器 ---
|
||
- "traefik.http.routers.homepage.tls=true"
|
||
- "traefik.http.routers.homepage.tls.certresolver=cfresolver"
|
||
# --- 3. Homepage 自动发现设置 ---
|
||
- "homepage.group=我的服务"
|
||
- "homepage.name=HomePage"
|
||
- "homepage.icon=homepage"
|
||
- "homepage.href=https://home.xiteng.site"
|
||
- "homepage.description=导航主页"
|
||
# --- 4. AutoKuma 自动发现设置 ---
|
||
# 格式: kuma.<自定义ID>.<监控类型>.<属性>
|
||
- "kuma.homepage.http.name=HomePage" # 监控项名称
|
||
- "kuma.homepage.http.url=http://homepage:3000" # 内网直连
|
||
# (可选) 每 60 秒检查一次，重试 3 次
|
||
- "kuma.homepage.http.interval=60"
|
||
- "kuma.homepage.http.max_retries=3"
|
||
networks:
|
||
- homelab_net
|
||
|
||
networks:
|
||
homelab_net:
|
||
external: true
|