av
a9d9eb8d83
- в бандл server добавлен канал matrix; в homeserver ходим по внутренней docker-сети, для этого у tuwunel заведён алиас без подчёркивания - плейбук проверяет формат id комнаты: значение без '!' или '#' apprise считает алиасом и молча не доставляет уведомление
40 lines
1.4 KiB
YAML
40 lines
1.4 KiB
YAML
# See versions: https://github.com/matrix-construct/tuwunel/releases
|
|
# Configuration reference: https://github.com/matrix-construct/tuwunel/blob/main/tuwunel-example.toml
|
|
|
|
services:
|
|
|
|
tuwunel_app:
|
|
image: jevolk/tuwunel:v1.9.0
|
|
container_name: tuwunel_app
|
|
restart: unless-stopped
|
|
user: "{{ owner_create_result.uid }}:{{ owner_create_result.group }}"
|
|
networks:
|
|
web_proxy_network:
|
|
# Алиас без подчёркивания: по нему в homeserver ходят соседние
|
|
# контейнеры (apprise шлёт уведомления в matrix-комнату).
|
|
aliases:
|
|
- "tuwunel"
|
|
volumes:
|
|
- "{{ data_dir }}:/var/lib/tuwunel"
|
|
environment:
|
|
TUWUNEL_SERVER_NAME: "{{ tuwunel_server_name }}"
|
|
TUWUNEL_DATABASE_PATH: "/var/lib/tuwunel"
|
|
TUWUNEL_ADDRESS: "0.0.0.0"
|
|
TUWUNEL_PORT: "6167"
|
|
TUWUNEL_MAX_REQUEST_SIZE: "20000000"
|
|
|
|
TUWUNEL_ALLOW_REGISTRATION: "false"
|
|
TUWUNEL_ALLOW_FEDERATION: "true"
|
|
TUWUNEL_TRUSTED_SERVERS: '["matrix.org"]'
|
|
|
|
# Well-known delegation values returned to clients/servers that query tuwunel directly.
|
|
# The canonical delegation is served by Caddy on {{ tuwunel_server_name }} (see Caddyfile).
|
|
TUWUNEL_WELL_KNOWN_SERVER: "{{ tuwunel_well_known_server }}"
|
|
TUWUNEL_WELL_KNOWN_CLIENT: "{{ tuwunel_well_known_client }}"
|
|
|
|
TUWUNEL_LOG: "info"
|
|
|
|
networks:
|
|
web_proxy_network:
|
|
external: true
|