staging for gitea runner

outline-stack.yml

@@ -0,0 +1,82 @@
+services:
+  outline:
+    image: outlinewiki/outline:latest
+    environment:
+    - PGSSLMODE=disable
+    - SECRET_KEY=2821b95392ba4ead8acb1882653eb217545ee267099608dee92ecde2cf9a7323
+    - UTILS_SECRET=cd5dab7c54b92603ba44bcab8a49e5a0f816b11a5b75ef25fe73ebb13633cae4
+    - DATABASE_URL=postgres://admin:AllOfTheStars%2B1@10.0.4.10:5432/outline
+    - REDIS_URL=redis://redis:6379
+    - URL=https://flow.frostlabs.me
+    - TZ=America/New_York
+    - PORT=3000
+    - FILE_STORAGE=local
+    - FILE_STORAGE_LOCAL_ROOT_DIR=/var/lib/outline/data
+    - FILE_STORAGE_UPLOAD_MAX_SIZE=26214400
+    # OIDC/SSO Configuration for Authentik
+    - OIDC_CLIENT_ID=9zCd8wzJFBv3oRYmdJXKWVokI0P3dx0HhuJB2yST
+    - OIDC_CLIENT_SECRET=fQpA7KFeDO2x8HKcQ5lOKFvB4HqyXcUvwUpow20bIOUBEZqoZ5hekkYS2kJ7BR2XayrOevq1sd4cC7Nw3mO1xz2jFXw0CiuhfNQTdMF35Zz2IXKbsNvVHU0Z1hYFjhlG
+    - OIDC_AUTH_URI=https://auth.frostlabs.me/application/o/authorize/
+    - OIDC_TOKEN_URI=https://auth.frostlabs.me/application/o/token/
+    - OIDC_USERINFO_URI=https://auth.frostlabs.me/application/o/userinfo/
+    - OIDC_LOGOUT_URI=https://auth.frostlabs.me/application/o/outline/end-session/
+    - OIDC_USERNAME_CLAIM=preferred_username
+    - OIDC_DISPLAY_NAME=Authentik
+    - OIDC_SCOPES=openid profile email
+    volumes:
+    - /home/doc/projects/swarm-data/appdata/outline/data:/var/lib/outline/data
+    networks:
+    - homelab
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: any
+      resources:
+        limits:
+          memory: 1G
+          cpus: '1.0'
+        reservations:
+          memory: 512M
+      labels:
+      - "traefik.enable=true"
+      - "traefik.swarm.network=homelab"
+      # Public-facing domain with Let's Encrypt certificate
+      - "traefik.http.routers.outline.rule=Host(`flow.frostlabs.me`)"
+      - "traefik.http.routers.outline.entrypoints=websecure"
+      - "traefik.http.routers.outline.tls=true"
+      - "traefik.http.routers.outline.tls.certresolver=cloudflare"
+      - "traefik.http.services.outline.loadbalancer.server.port=3000"
+    depends_on:
+    - redis
+
+  redis:
+    image: redis:7-alpine
+    volumes:
+    - /home/doc/projects/swarm-data/appdata/outline/redis:/data
+    networks:
+    - homelab
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+        - node.hostname == p0
+      restart_policy:
+        condition: on-failure
+        delay: 5s
+      resources:
+        limits:
+          memory: 256M
+        reservations:
+          memory: 128M
+    healthcheck:
+      test: [ "CMD", "redis-cli", "ping" ]
+      interval: 10s
+      timeout: 3s
+      retries: 3
+
+networks:
+  homelab:
+    external: true
+  outline_internal:
+    driver: overlay
+    attachable: true