Eduardo David Paredes Vara
faaffc2a3b
- proxy/server.js: proxy Node.js que reescribe la ruta del callback OAuth de Authentik (/auth/callback → /api/v1/auth/oauth/authentik/callback) resolviendo la incompatibilidad entre la URL que Authentik envía y la que espera Memos - docker-compose.yml y stack.env: actualizados para incluir el proxy Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
70 lines
1.9 KiB
YAML
70 lines
1.9 KiB
YAML
services:
|
|
memos-db:
|
|
image: postgres:17-alpine
|
|
container_name: memos-db
|
|
restart: unless-stopped
|
|
environment:
|
|
TZ: ${TZ}
|
|
POSTGRES_DB: ${MEMOS_DB_NAME}
|
|
POSTGRES_USER: ${MEMOS_DB_USER}
|
|
POSTGRES_PASSWORD: ${MEMOS_DB_PASSWORD}
|
|
volumes:
|
|
- /opt/memos/postgres:/var/lib/postgresql/data:Z
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${MEMOS_DB_USER} -d ${MEMOS_DB_NAME}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
start_period: 20s
|
|
networks:
|
|
- memos_internal
|
|
|
|
memos:
|
|
image: neosmemo/memos:0.27.1
|
|
pull_policy: always
|
|
container_name: memos
|
|
restart: unless-stopped
|
|
depends_on:
|
|
memos-db:
|
|
condition: service_healthy
|
|
environment:
|
|
MEMOS_PORT: 5230
|
|
MEMOS_DATA: /var/opt/memos
|
|
MEMOS_DRIVER: postgres
|
|
MEMOS_DSN: postgresql://${MEMOS_DB_USER}:${MEMOS_DB_PASSWORD}@memos-db:5432/${MEMOS_DB_NAME}?sslmode=disable
|
|
MEMOS_INSTANCE_URL: https://${MEMOS_DOMAIN}
|
|
volumes:
|
|
- /opt/memos/data:/var/opt/memos:Z
|
|
networks:
|
|
- memos_internal
|
|
|
|
memos-proxy:
|
|
image: node:22-alpine
|
|
container_name: memos-proxy
|
|
restart: unless-stopped
|
|
depends_on:
|
|
memos:
|
|
condition: service_started
|
|
environment:
|
|
MEMOS_UPSTREAM: http://memos:5230
|
|
PORT: 8080
|
|
command: ["node", "/app/server.js"]
|
|
volumes:
|
|
- ./proxy/server.js:/app/server.js:ro,Z
|
|
networks:
|
|
- memos_internal
|
|
- proxy
|
|
labels:
|
|
traefik.enable: "true"
|
|
traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
|
|
traefik.http.routers.memos.rule: "Host(`${MEMOS_DOMAIN}`)"
|
|
traefik.http.routers.memos.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
|
|
traefik.http.routers.memos.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
|
|
traefik.http.services.memos.loadbalancer.server.port: "8080"
|
|
|
|
networks:
|
|
memos_internal:
|
|
driver: bridge
|
|
proxy:
|
|
external: true
|