feat(opengist): añadir stack de gists autohospedados con SSO

OpenGist como alternativa autoalojada a GitHub Gists con autenticación OIDC delegada a Authentik. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-25 05:49:54 +00:00
parent d771ea9dd5
commit da4baf44ab
2 changed files with 57 additions and 0 deletions
@@ -0,0 +1,38 @@
+services:
+  opengist:
+    image: ${OPENGIST_IMAGE}
+    pull_policy: always
+    container_name: opengist
+    restart: unless-stopped
+    environment:
+      TZ: ${TZ}
+      OG_OPENGIST_HOME: /opengist
+      OG_OIDC_PROVIDER_NAME: ${OPENGIST_OIDC_PROVIDER_NAME}
+      OG_OIDC_CLIENT_KEY: ${OPENGIST_OIDC_CLIENT_ID}
+      OG_OIDC_SECRET: ${OPENGIST_OIDC_CLIENT_SECRET}
+      OG_OIDC_DISCOVERY_URL: ${OPENGIST_OIDC_DISCOVERY_URL}
+    volumes:
+      - ${OPENGIST_DATA_PATH}:/opengist:Z
+    networks:
+      - proxy
+    labels:
+      traefik.enable: "true"
+      traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
+      traefik.http.routers.opengist.rule: "Host(`${OPENGIST_DOMAIN}`)"
+      traefik.http.routers.opengist.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
+      traefik.http.routers.opengist.tls: "true"
+      traefik.http.routers.opengist.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
+      traefik.http.routers.opengist.middlewares: "crowdsec-bouncer@file"
+      traefik.http.routers.opengist.service: "opengist-svc"
+      traefik.http.services.opengist-svc.loadbalancer.server.port: "6157"
+
+      homepage.group: "Automatizacion y desarrollo"
+      homepage.name: "OpenGist"
+      homepage.icon: "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/gitea.svg"
+      homepage.href: "https://${OPENGIST_DOMAIN}/"
+      homepage.description: "Repositorio de gists y snippets"
+      homepage.siteMonitor: "https://${OPENGIST_DOMAIN}/"
+
+networks:
+  proxy:
+    external: true
@@ -0,0 +1,19 @@
+##### OpenGist #####
+OPENGIST_IMAGE=ghcr.io/thomiceli/opengist:latest
+OPENGIST_DOMAIN=opengist.sherlockhomeless.net
+OPENGIST_DATA_PATH=/opt/opengist/data
+
+##### OIDC (Authentik) #####
+OPENGIST_OIDC_PROVIDER_NAME=Authentik
+OPENGIST_OIDC_CLIENT_ID=change-me
+OPENGIST_OIDC_CLIENT_SECRET=change-me
+# Discovery URL: https://auth.tudominio.com/application/o/<slug>/.well-known/openid-configuration
+OPENGIST_OIDC_DISCOVERY_URL=change-me
+
+##### Traefik #####
+TRAEFIK_DOCKER_NETWORK=proxy
+TRAEFIK_ENTRYPOINT_SECURE=websecure
+TRAEFIK_CERTRESOLVER=letsencrypt
+
+##### General #####
+TZ=America/Mexico_City