feet: bagetter setup (#3)

bagetter/CaddyFile

@@ -0,0 +1,23 @@
+nuget.teknologiumum.com {
+ reverse_proxy 127.0.0.1:5000 {
+ transport http {
+ read_buffer 16KiB
+ write_buffer 16KiB
+ compression off
+ }
+ }
+
+ header {
+ Server "Teknologi Umum"
+ Permissions-Policy interest-cohort=()
+ ?Strict-Transport-Security "max-age=604800; includeSubDomains"
+ ?X-Content-Type-Options nosniff
+ ?X-Frame-Options DENY
+ ?Referrer-Policy no-referrer-when-downgrade
+ ?Content-Security-Policy "default-src 'none'; font-src 'self'; script-src 'self' blob:; manifest-src 'self'; media-src 'self' data: blob: about:; style-src 'self' 'unsafe-inline'; base-uri 'none'; img-src 'self' data:; form-action 'self'; frame-ancestors 'none'; connect-src 'self'; worker-src blob:;"
+ ?Vary Origin
+ ?X-XSS-Protection "1; mode=block"
+ }
+
+ tls [email protected]
+}

bagetter/docker-compose.yml

@@ -0,0 +1,32 @@
+services:
+ bagetter:
+ image: bagetter/bagetter:latest
+ environment:
+ Mirror__Enabled: true
+ Mirror__PackageSource: "https://api.nuget.org/v3/index.json"
+ ApiKey:
+ PackageDeletionBehavior: "HardDelete"
+ ports:
+ - 127.0.0.1:5000:5000
+ network_mode: host
+ command: --urls http://127.0.0.1:5000
+ volumes:
+ - bagetter-storage:/data
+ labels:
+ - "com.centurylinklabs.watchtower.enable=true"
+ deploy:
+ mode: replicated
+ replicas: 1
+ restart_policy:
+ condition: unless-stopped
+ delay: 30s
+ window: 120s
+ logging:
+ driver: local
+ options:
+ max-size: 10M
+ max-file: 3
+
+volumes:
+ bagetter-storage:
+ external: true

bagetter/setup.sh

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+docker volume create bagetter-storage