vaults3 added

2026-07-07 12:36:03 +02:00
1 parent c7f8dcf70c
commit b33a49887c
@@ -0,0 +1,56 @@
+services:
+  vaults3:
+    image: eniz1806/vaults3:latest
+    container_name: vaults3
+    network_mode: bridge
+    labels:
+      - traefik.http.routers.vaults3.rule=Host(`s3.arnoutvw.nl`)
+      - pangolin.proxy-resources.vaults3.name=vaults3
+      - pangolin.proxy-resources.vaults3.full-domain=s3.arnoutvw.nl
+      - pangolin.proxy-resources.vaults3.protocol=http
+      - pangolin.proxy-resources.vaults3.ssl=true
+      - pangolin.proxy-resources.vaults3.targets[0].method=http
+      - pangolin.proxy-resources.vaults3.targets[0].hostname=192.168.10.144
+      - pangolin.proxy-resources.vaults3.targets[0].port=9010
+      - pangolin.proxy-resources.vaults3.targets[0].healthcheck.hostname=192.168.10.144
+      - pangolin.proxy-resources.vaults3.targets[0].healthcheck.port=9010
+      - pangolin.proxy-resources.vaults3.targets[0].healthcheck.enabled=true
+      - pangolin.proxy-resources.vaults3.auth.sso-enabled=false
+      - pangolin.proxy-resources.vaults3.rules[0].match=country
+      - pangolin.proxy-resources.vaults3.rules[0].action=allow
+      - pangolin.proxy-resources.vaults3.rules[0].value=NL
+      - pangolin.proxy-resources.vaults3.rules[1].match=country
+      - pangolin.proxy-resources.vaults3.rules[1].action=allow
+      - pangolin.proxy-resources.vaults3.rules[1].value=DE
+      - pangolin.proxy-resources.vaults3.rules[2].match=ip
+      - pangolin.proxy-resources.vaults3.rules[2].action=allow
+      - pangolin.proxy-resources.vaults3.rules[2].value=172.21.0.1
+      - pangolin.proxy-resources.vaults3.rules[3].match=country
+      - pangolin.proxy-resources.vaults3.rules[3].action=deny
+      - pangolin.proxy-resources.vaults3.rules[3].value=ALL
+    ports:
+      - "9010:9000/tcp"
+    environment:
+      VAULTS3_ACCESS_KEY: ${VAULTS3_ACCESS_KEY}
+      VAULTS3_SECRET_KEY: ${VAULTS3_SECRET_KEY}
+      VAULTS3_ENCRYPTION_KEY: ${VAULTS3_ENCRYPTION_KEY}
+      VAULTS3_PORT: 9000
+      VAULTS3_ADDRESS: 0.0.0.0
+      VAULTS3_DATA_DIR: /data
+      VAULTS3_METADATA_DIR: /metadata
+      VAULTS3_LOG_LEVEL: info
+    volumes:
+      - /mnt/user/appdata/vaults3/data:/data
+      - /mnt/user/appdata/vaults3/metadata:/metadata
+    restart: unless-stopped
+    healthcheck:
+      test: [ "CMD", "wget", "-qO-", "http://localhost:9000/health" ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+    logging:
+      driver: json-file
+      options:
+        max-size: 50m
+        max-file: "1"