Arnout van Westen
03b1607e79
Per request: TNC removed, all stacks back on default bridge with legacy links for inter-container DNS (default bridge has no embedded DNS — verified: nameserver passthrough to AdGuard). Kept: traefik router labels (dnsweaver records), dawarich prod + SECRET_KEY_BASE, teslamate/bookorbit hostport removals (service DNS now via links), komodo periphery as separate project with 8120 hostport + server address change.
44 lines
1.8 KiB
YAML
44 lines
1.8 KiB
YAML
# Komodo periphery for Atlas — deliberately SEPARATE from the komodo stack:
|
|
# the periphery executes deploys, and a compose child that recreates its own
|
|
# parent dies mid-deploy leaving half-created containers
|
|
# (see moghtech/komodo discussion #223). Deploys for this stack are manual
|
|
# (host docker compose), renovate is disabled for this folder, and the
|
|
# update-stacks procedure does not include it.
|
|
# Joins the komodo stack's private network so core can resolve "periphery"
|
|
name: komodo-periphery
|
|
|
|
services:
|
|
periphery:
|
|
image: ghcr.io/moghtech/komodo-periphery:2
|
|
container_name: komodo-periphery
|
|
restart: unless-stopped
|
|
init: true
|
|
network_mode: bridge
|
|
ports:
|
|
- "8120:8120"
|
|
logging:
|
|
driver: local
|
|
env_file: ../komodo/.env
|
|
environment:
|
|
PERIPHERY_REPO_DIR: ${PERIPHERY_ROOT_DIRECTORY:-/etc/komodo}/repos
|
|
PERIPHERY_STACK_DIR: ${PERIPHERY_ROOT_DIRECTORY:-/etc/komodo}/stacks
|
|
PERIPHERY_SSL_KEY_FILE: ${PERIPHERY_ROOT_DIRECTORY:-/etc/komodo}/ssl/key.pem
|
|
PERIPHERY_SSL_CERT_FILE: ${PERIPHERY_ROOT_DIRECTORY:-/etc/komodo}/ssl/cert.pem
|
|
volumes:
|
|
## Mount external docker socket
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
## Allow Periphery to see processes outside of container
|
|
- /proc:/proc
|
|
## Specify the Periphery agent root directory - must be the same inside and outside the container.
|
|
- ${PERIPHERY_ROOT_DIRECTORY:-/etc/komodo}:${PERIPHERY_ROOT_DIRECTORY:-/etc/komodo}
|
|
## Custom location for docker compose repo
|
|
- /mnt/user/compose:/mnt/user/compose
|
|
## v2 PKI private keys (persist)
|
|
- /etc/komodo/keys:/config/keys
|
|
labels:
|
|
komodo.skip: # Prevent Komodo from stopping with StopAllContainers
|
|
|
|
networks:
|
|
komodo-internal:
|
|
external: true
|
|
name: komodo_komodo-internal |