feat: initial move to python script

bagetter/docker-compose.yml

@@ -6,14 +6,33 @@ services:
  Mirror__PackageSource: "https://api.nuget.org/v3/index.json"
  ApiKey:
  PackageDeletionBehavior: "HardDelete"
- ports:
- - 127.0.0.1:5000:5000
  network_mode: host
- command: --urls http://127.0.0.1:5000
+ command: --urls http://0.0.0.0:5000
  volumes:
  - bagetter-storage:/data
  labels:
  - "com.centurylinklabs.watchtower.enable=true"
+ - "traefik.enable=true"
+ - "traefik.docker.network=public-web"
+ - "traefik.http.routers.bagetter.entrypoints=web,websecure"
+ - "traefik.http.routers.bagetter.rule=Host(`nuget.teknologiumum.com`)"
+ - "traefik.http.routers.bagetter.tls.certresolver=tlsresolver"
+ - "traefik.http.routers.bagetter.middlewares=bagetter-header,bagetter-redirectscheme"
+ - "traefik.http.services.bagetter.loadbalancer.server.port=5000"
+ - "traefik.http.services.bagetter.loadbalancer.server.scheme=http"
+ - "traefik.http.services.bagetter.loadbalancer.healthcheck.interval=30s"
+ - "traefik.http.middlewares.bagetter-header.headers.addvaryheader=true"
+ - "traefik.http.middlewares.bagetter-header.headers.frameDeny=true"
+ - "traefik.http.middlewares.bagetter-header.headers.browserxssfilter=true"
+ - "traefik.http.middlewares.bagetter-header.headers.stsSeconds=604800"
+ - "traefik.http.middlewares.bagetter-header.headers.stsIncludeSubdomains=true"
+ - "traefik.http.middlewares.bagetter-header.headers.browserXssFilter=true"
+ - "traefik.http.middlewares.bagetter-header.headers.contentTypeNosniff=true"
+ - "traefik.http.middlewares.bagetter-header.headers.customResponseHeaders.server=Teknologi Umum"
+ - "traefik.http.middlewares.bagetter-redirectscheme.redirectscheme.scheme=https"
+ - "traefik.http.middlewares.bagetter-redirectscheme.redirectscheme.permanent=true"
+ networks:
+ - public-web
  deploy:
  mode: replicated
  replicas: 1
@@ -30,3 +49,7 @@ services:
 volumes:
  bagetter-storage:
  external: true
+
+networks:
+ public-web:
+ external: true

goproxy/docker-compose.yml

@@ -5,12 +5,31 @@ services:
  environment:
  GOPROXY: "https://proxy.golang.org,https://goproxy.io,direct"
  GOMAXPROCS: 1
- ports:
- - 127.0.0.1:8081:8080
  volumes:
  - goproxy-storage:/go
  labels:
  - "com.centurylinklabs.watchtower.enable=true"
+ - "traefik.enable=true"
+ - "traefik.docker.network=public-web"
+ - "traefik.http.routers.goproxy.entrypoints=web,websecure"
+ - "traefik.http.routers.goproxy.rule=Host(`goproxy.teknologiumum.com`)"
+ - "traefik.http.routers.goproxy.tls.certresolver=tlsresolver"
+ - "traefik.http.routers.goproxy.middlewares=goproxy-header,goproxy-redirectscheme"
+ - "traefik.http.services.goproxy.loadbalancer.server.port=8080"
+ - "traefik.http.services.goproxy.loadbalancer.server.scheme=http"
+ - "traefik.http.services.goproxy.loadbalancer.healthcheck.interval=30s"
+ - "traefik.http.middlewares.goproxy-header.headers.addvaryheader=true"
+ - "traefik.http.middlewares.goproxy-header.headers.frameDeny=true"
+ - "traefik.http.middlewares.goproxy-header.headers.browserxssfilter=true"
+ - "traefik.http.middlewares.goproxy-header.headers.stsSeconds=604800"
+ - "traefik.http.middlewares.goproxy-header.headers.stsIncludeSubdomains=true"
+ - "traefik.http.middlewares.goproxy-header.headers.browserXssFilter=true"
+ - "traefik.http.middlewares.goproxy-header.headers.contentTypeNosniff=true"
+ - "traefik.http.middlewares.goproxy-header.headers.customResponseHeaders.server=Teknologi Umum"
+ - "traefik.http.middlewares.goproxy-redirectscheme.redirectscheme.scheme=https"
+ - "traefik.http.middlewares.goproxy-redirectscheme.redirectscheme.permanent=true"
+ networks:
+ - public-web
  deploy:
  mode: replicated
  replicas: 1
@@ -27,3 +46,7 @@ services:
 volumes:
  goproxy-storage:
  external: true
+
+networks:
+ public-web:
+ external: true

libreddit/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
  libreddit:
- image: libreddit/libreddit:latest
+ image: quay.io/redlib/redlib:latest
  environment:
  BLUR_NSFW: on
  labels:
@@ -50,36 +50,6 @@ services:
  networks:
  - public-web
 
- redlib:
- image: quay.io/redlib/redlib:latest
- environment:
- BLUR_NSFW: on
- labels:
- - "traefik.enable=true"
- - "traefik.docker.network=public-web"
- - "traefik.http.services.libreddit.loadbalancer.server.port=8080"
- - "traefik.http.services.libreddit.loadbalancer.server.scheme=http"
- - "traefik.http.services.libreddit.loadbalancer.healthcheck.interval=120s"
- - "traefik.http.services.libreddit.loadbalancer.healthcheck.path=/settings"
- - "com.centurylinklabs.watchtower.enable=true"
- platform: linux/amd64
- deploy:
- mode: replicated
- replicas: 1
- restart_policy:
- condition: unless-stopped
- delay: 30s
- window: 120s
- resources:
- limits:
- memory: 750MB
- cpus: '1'
- reservations:
- memory: 25MB
- cpus: '0.10'
- networks:
- - public-web
-
 networks:
  public-web:
  external: true

monitoring/docker-compose.yml

@@ -87,4 +87,4 @@ volumes:
 
 networks:
  monitoring:
- external: false
+ external: true

setup.py

@@ -0,0 +1,39 @@
+SERVICE_MAPPING = {
+ "tanzanite.gems.teknologiumum.com": [
+ "traefik",
+ "bot",
+ "captcha",
+ "gitgram",
+ "gold",
+ "graphene",
+ "libreddit",
+ "monitoring",
+ "pesto",
+ "polarite",
+ "pph21",
+ "projects",
+ "tgif",
+ "watchtower",
+ ],
+ "painite.gems.teknologiumum.com": [
+ "traefik",
+ "git",
+ "umami",
+ "uptime-kuma",
+ "watchtower",
+ ],
+ "hibonite.gems.teknologiumum.com": [
+ "traefik",
+ "bagetter",
+ "goproxy",
+ "verdaccio",
+ "watchtower",
+ ],
+}
+
+if __name__ == "__main__":
+ for server, containers in SERVICE_MAPPING.items():
+ # SSH to server
+ # Copy directory with rsync
+
+

traefik/setup.sh

@@ -1,3 +1,4 @@
 #!/usr/bin/env bash
 
 docker network create public-web -d bridge --subnet 172.31.0.0/22
+docker network craete monitoring

umami/docker-compose.yml

@@ -3,8 +3,32 @@ services:
  image: ghcr.io/umami-software/umami:postgresql-latest
  labels:
  - "com.centurylinklabs.watchtower.enable=true"
- ports:
- - "23120:3000"
+ - "traefik.enable=true"
+ - "traefik.docker.network=public-web"
+ - "traefik.http.routers.umami.entrypoints=web,websecure"
+ - "traefik.http.routers.umami.rule=Host(`analytics.teknologiumum.com`)"
+ - "traefik.http.routers.umami.tls.certresolver=tlsresolver"
+ - "traefik.http.routers.umami.middlewares=umami-header,umami-rate,umami-redirectscheme"
+ - "traefik.http.services.umami.loadbalancer.server.port=3000"
+ - "traefik.http.services.umami.loadbalancer.server.scheme=http"
+ - "traefik.http.services.umami.loadbalancer.healthcheck.interval=30s"
+ - "traefik.http.services.umami.loadbalancer.healthcheck.path=/api/heartbeat"
+ - "traefik.http.middlewares.umami-rate.ratelimit.average=200"
+ - "traefik.http.middlewares.umami-rate.ratelimit.burst=100"
+ - "traefik.http.middlewares.umami-rate.ratelimit.period=1s"
+ - "traefik.http.middlewares.umami-header.headers.addvaryheader=true"
+ - "traefik.http.middlewares.umami-header.headers.frameDeny=true"
+ - "traefik.http.middlewares.umami-header.headers.browserxssfilter=true"
+ - "traefik.http.middlewares.umami-header.headers.stsSeconds=604800"
+ - "traefik.http.middlewares.umami-header.headers.stsIncludeSubdomains=true"
+ - "traefik.http.middlewares.umami-header.headers.browserXssFilter=true"
+ - "traefik.http.middlewares.umami-header.headers.contentTypeNosniff=true"
+ - "traefik.http.middlewares.umami-header.headers.customResponseHeaders.server=Teknologi Umum"
+ - "traefik.http.middlewares.umami-redirectscheme.redirectscheme.scheme=https"
+ - "traefik.http.middlewares.umami-redirectscheme.redirectscheme.permanent=true"
+ networks:
+ - public-web
+ - umami-internal
  environment:
  DATABASE_URL:
  DATABASE_TYPE: postgresql
@@ -31,6 +55,7 @@ services:
  options:
  max-size: 10M
  max-file: 3
+
  db:
  image: postgres:16-alpine
  environment:
@@ -39,6 +64,8 @@ services:
  POSTGRES_PASSWORD:
  volumes:
  - umami-db-data:/var/lib/postgresql/data
+ networks:
+ - umami-internal
  deploy:
  restart_policy:
  condition: unless-stopped
@@ -58,3 +85,8 @@ services:
 volumes:
  umami-db-data:
  external: true
+
+networks:
+ umami-internal:
+ public-web:
+ external: true

uptime-kuma/docker-compose.yml

@@ -1,8 +1,6 @@
 services:
  uptime-kuma:
  image: louislam/uptime-kuma:1
- ports:
- - 127.0.0.1:43241:3001
  labels:
  - "traefik.enable=true"
  - "traefik.http.routers.uptime-kuma.entrypoints=web,websecure"
@@ -42,3 +40,7 @@ services:
 
 volumes:
  uptime-data:
+
+networks:
+ public-web:
+ external: true