mirror of
https://oauth2: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@github.com/m1ngsama/automa.git
synced 2026-05-10 19:11:07 +08:00
m1ngsama
3433516287
- Remove old services/, bin/, config.sh, Makefile, setup.sh - Each Docker Compose project is now a top-level self-contained directory with compose.yaml + .env.example (project self-governance) - Add automa CLI: interactive deploy, status, logs, stop, update, config - Add install.sh for curl-pipe-bash quick start - New projects from production: uptime-kuma, tailscale+derp, monitoring (prometheus+grafana+blackbox+node-exporter), filesuite (cloudreve+qbt), huajibot, dockge, notification-center - Clean up existing projects: forgejo, minecraft, teamspeak, nextcloud - Sanitize all .env.example files (no real secrets)
45 lines
1.3 KiB
YAML
45 lines
1.3 KiB
YAML
services:
|
|
tailscale:
|
|
image: tailscale/tailscale:latest
|
|
container_name: tailscale
|
|
hostname: "${TS_HOSTNAME}"
|
|
volumes:
|
|
- ./tailscale-data:/var/lib/tailscale
|
|
- /dev/net/tun:/dev/net/tun
|
|
- /var/run/tailscale:/var/run/tailscale
|
|
privileged: true
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
- NET_RAW
|
|
network_mode: host
|
|
environment:
|
|
TS_AUTHKEY: "${TS_AUTHKEY}"
|
|
TS_EXTRA_ARGS: "${TS_EXTRA_ARGS:---advertise-tags=tag:container}"
|
|
TS_STATE_DIR: /var/lib/tailscale
|
|
TS_SOCKET: /var/run/tailscale/tailscaled.sock
|
|
TS_USERSPACE: "${TS_USERSPACE:-false}"
|
|
TS_DEBUG_FIREWALL_MODE: "${TS_FIREWALL_MODE:-nftables}"
|
|
TS_HOSTNAME: "${TS_HOSTNAME}"
|
|
TZ: "${TZ:-Asia/Shanghai}"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "tailscale status --json | grep -q '\"BackendState\": \"Running\"'"]
|
|
restart: unless-stopped
|
|
|
|
derp-server:
|
|
image: ghcr.io/nbtca/tailscale-derp:edge
|
|
container_name: tailscale-derp
|
|
network_mode: host
|
|
depends_on:
|
|
tailscale:
|
|
condition: service_healthy
|
|
environment:
|
|
TZ: "${TZ:-Asia/Shanghai}"
|
|
DERP_HOST: "${DERP_HOST}"
|
|
DERP_PORT: "${DERP_PORT:-443}"
|
|
STUN_PORT: "${STUN_PORT:-3478}"
|
|
HTTP_PORT: "-1"
|
|
VERIFY_CLIENTS: "true"
|
|
volumes:
|
|
- /var/run/tailscale:/var/run/tailscale
|
|
restart: unless-stopped
|