chore: snapshot before production push
This commit is contained in:
auto-ci
@@ -0,0 +1,269 @@
|
||||
services:
|
||||
dark3proxy:
|
||||
container_name: dark3proxy
|
||||
image: host60/darkproxy-dark3proxy:v1.0
|
||||
build:
|
||||
context: ./3proxy/.
|
||||
dns:
|
||||
- "10.5.0.6"
|
||||
dns_search: internal.namespace #namespace used in internal DNS
|
||||
volumes:
|
||||
- "./3proxy/first-instanse.cfg:/etc/3proxy/first-instanse.cfg"
|
||||
- "./3proxy/second-instanse.cfg:/etc/3proxy/second-instanse.cfg"
|
||||
restart: unless-stopped
|
||||
sysctls:
|
||||
- "net.ipv6.conf.all.disable_ipv6=0"
|
||||
ports:
|
||||
- 100.117.196.19:2000:1080 # socks port
|
||||
- 100.117.196.19:2002:8161 # 3proxy-eagle web page
|
||||
networks:
|
||||
darkproxy:
|
||||
ipv4_address: 10.5.0.8
|
||||
|
||||
i2pd_yggdrasil:
|
||||
container_name: darki2p
|
||||
# image: i2pd_yggdrasil:latest
|
||||
image: host60/i2pd_yggdrasil:v1.0
|
||||
privileged: true
|
||||
cap_add:
|
||||
- NET_ADMIN
|
||||
devices:
|
||||
- /dev/net/tun:/dev/net/tun
|
||||
ports:
|
||||
# I2P Service Ports
|
||||
# - "2827:2827" # BOB Bridge
|
||||
# - "4444:4444" # HTTP Proxy
|
||||
# - "4447:4447" # SOCKS Proxy
|
||||
- "100.117.196.19:2001:7070" # Webconsole
|
||||
# - "7650:7650" # I2PControl
|
||||
# - "7654:7654" # I2CP
|
||||
# - "7656:7656" # SAM Bridge (TCP)
|
||||
- "10765:10765" # Main I2P Listener
|
||||
# [dns] section enabled in i2pd.conf; DNS port is 53 (accessible internally at 10.5.0.2:53)
|
||||
# mapping to host is possible if desired, e.g. 10853:53/udp
|
||||
# Yggdrasil Ports
|
||||
- "10654:10654" # Yggdrasil Listener
|
||||
environment:
|
||||
tz: /run/secrets/tz
|
||||
secrets:
|
||||
- tz
|
||||
restart: unless-stopped
|
||||
healthcheck:
|
||||
test: ["CMD", "bash", "-c", "pgrep i2pd && pgrep yggdrasil"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
start_period: 60s
|
||||
sysctls:
|
||||
- "net.ipv6.conf.all.disable_ipv6=0"
|
||||
mac_address: ce:22:b8:0e:6e:78
|
||||
networks:
|
||||
darkproxy:
|
||||
ipv4_address: 10.5.0.2
|
||||
|
||||
tor_yggdrasil:
|
||||
image: host60/tor_yggdrasil:v1.0
|
||||
# image: tor_yggdrasil:latest
|
||||
# container_name: tor_over_yggdrasil
|
||||
container_name: darktor
|
||||
# platform removed; image is amd64-only
|
||||
cap_add:
|
||||
- NET_ADMIN # Required for network tunnel management
|
||||
security_opt:
|
||||
- no-new-privileges:true # Security enhancement - prevent privilege esca>
|
||||
devices:
|
||||
- /dev/net/tun:/dev/net/tun # TUN device for Yggdrasil network interface
|
||||
ports:
|
||||
# - "127.0.0.1:9050:9050/tcp" # SOCKS5 proxy port (Tor) for application-l>
|
||||
- "10655:10655/tcp" # Yggdrasil peer connections
|
||||
secrets:
|
||||
- YGGDRASIL_GENERATE_KEYS
|
||||
environment:
|
||||
YGGDRASIL_GENERATE_KEYS: /run/secrets/YGGDRASIL_GENERATE_KEYS # Generate new Yggdrasil keys on startup
|
||||
restart: unless-stopped # Auto-restart unless manually stopped
|
||||
dns:
|
||||
- "10.5.0.6"
|
||||
sysctls:
|
||||
- "net.ipv6.conf.all.disable_ipv6=0"
|
||||
networks:
|
||||
darkproxy:
|
||||
ipv4_address: 10.5.0.7
|
||||
|
||||
alfis:
|
||||
image: cofob/alfis
|
||||
# platform removed; image is amd64 only
|
||||
container_name: darkalfis
|
||||
volumes:
|
||||
- darkalfis_data:/storage
|
||||
restart: unless-stopped
|
||||
stop_grace_period: 10s
|
||||
dns:
|
||||
- "10.5.0.6"
|
||||
sysctls:
|
||||
- "net.ipv6.conf.all.disable_ipv6=0"
|
||||
networks:
|
||||
darkproxy:
|
||||
ipv4_address: 10.5.0.3
|
||||
|
||||
coredns:
|
||||
# image: darkdns
|
||||
image: host60/darkdns:v1.0
|
||||
build:
|
||||
context: ./PopuraDNS
|
||||
dockerfile: Dockerfile
|
||||
container_name: darkdns
|
||||
restart: unless-stopped
|
||||
sysctls:
|
||||
- "net.ipv6.conf.all.disable_ipv6=0"
|
||||
logging:
|
||||
driver: "json-file"
|
||||
options:
|
||||
max-size: "10m" # Maximum log file size
|
||||
max-file: "3" # Maximum of 3 rotating log files
|
||||
networks:
|
||||
darkproxy:
|
||||
ipv4_address: 10.5.0.4
|
||||
|
||||
unbound:
|
||||
container_name: darkunbound
|
||||
image: mvance/unbound:latest
|
||||
# platform removed; image is amd64-only
|
||||
sysctls:
|
||||
- "net.ipv6.conf.all.disable_ipv6=0"
|
||||
networks:
|
||||
darkproxy:
|
||||
ipv4_address: 10.5.0.5
|
||||
volumes:
|
||||
- type: bind
|
||||
read_only: true
|
||||
source: ./unbound/unbound.conf
|
||||
target: /opt/unbound/etc/unbound/unbound.conf
|
||||
- "./unbound/forward-records.conf:/opt/unbound/etc/unbound/forward-records.conf"
|
||||
- "./unbound/a-records.conf:/opt/unbound/etc/unbound/a-records.conf"
|
||||
# ports:
|
||||
# - "5053:5053/tcp"
|
||||
# - "5053:5053/udp"
|
||||
# healthcheck:
|
||||
# disable: true
|
||||
restart: unless-stopped
|
||||
|
||||
pihole:
|
||||
container_name: darkpihole
|
||||
image: pihole/pihole:latest
|
||||
platform: linux/arm64
|
||||
# For DHCP it is recommended to remove these ports and instead add: network_mode: "host"
|
||||
ports:
|
||||
# DNS Ports
|
||||
# - "53:53/tcp"
|
||||
# - "53:53/udp"
|
||||
# Default HTTP Port
|
||||
# - "80:80/tcp"
|
||||
# Default HTTPs Port. FTL will generate a self-signed certificate
|
||||
# - "443:443/tcp
|
||||
# Uncomment the line below if you are using Pi-hole as your DHCP server
|
||||
# - "67:67/udp"
|
||||
# Uncomment the line below if you are using Pi-hole as your NTP server
|
||||
# - "123:123/udp"
|
||||
- "100.117.196.19:2003:80/tcp" # pihole web port
|
||||
environment:
|
||||
# Set the appropriate timezone for your location (https://en.wikipedia.org/wiki/List_of_tz_database_time_zones), e.g:
|
||||
TZ: 'America/Detroit'
|
||||
# WEBPASSWORD: 'set a secure password here or it will be random'
|
||||
# FTLCONF_webserver_api_password: 'darkproxy'
|
||||
# If using Docker's default `bridge` network setting the dns listening mode should be set to 'all'
|
||||
# FTLCONF_dns_listeningMode: 'all'
|
||||
PIHOLE_DNS_: 10.5.0.4
|
||||
TEMPERATUREUNIT: f
|
||||
WEBTHEME: lcars
|
||||
WEBPASSWORD: darkproxy
|
||||
FTLCONF_dns_upstreams: coredns
|
||||
# Volumes store your data between container upgrades
|
||||
volumes:
|
||||
# For persisting Pi-hole's databases and common configuration file
|
||||
- './pihole/etc-pihole:/etc/pihole'
|
||||
# Uncomment the below if you have custom dnsmasq config files that you want to persist. Not needed for most starting fresh with Pi-hole v6. If you're upgrading from v5 you and have used this directory before, you should keep it enabled for the first v6 container start to allow for a complete migration. It can be removed afterwards. Needs environment variable FTLCONF_misc_etc_dnsmasq_d: 'true'
|
||||
- './pihole/etc-dnsmasq.d:/etc/dnsmasq.d'
|
||||
cap_add:
|
||||
# See https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
|
||||
# Required if you are using Pi-hole as your DHCP server, else not needed
|
||||
- NET_ADMIN
|
||||
# Required if you are using Pi-hole as your NTP client to be able to set the host's system time
|
||||
# - SYS_TIME
|
||||
# Optional, if Pi-hole should get some more processing time
|
||||
- SYS_NICE
|
||||
restart: unless-stopped # Recommended but not required (DHCP needs NET_ADMIN)
|
||||
sysctls:
|
||||
- "net.ipv6.conf.all.disable_ipv6=0"
|
||||
healthcheck:
|
||||
test: ["CMD", "dig", "+short", "+norecurse", "+timeout=2", "@127.0.0.1", "google.com"]
|
||||
interval: 1m
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
start_period: 30s
|
||||
networks:
|
||||
darkproxy:
|
||||
ipv4_address: 10.5.0.6
|
||||
|
||||
geth:
|
||||
image: ethereum/client-go:latest
|
||||
platform: linux/arm64
|
||||
container_name: darkgeth
|
||||
command:
|
||||
- --syncmode=light
|
||||
- --http
|
||||
- --http.addr=0.0.0.0
|
||||
- --http.port=8545
|
||||
- --http.api=eth,net,web3
|
||||
- --cache=256
|
||||
networks:
|
||||
darkproxy:
|
||||
ipv4_address: 10.5.0.10
|
||||
restart: unless-stopped
|
||||
stop_grace_period: 30s
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:8545"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
start_period: 120s
|
||||
sysctls:
|
||||
- "net.ipv6.conf.all.disable_ipv6=0"
|
||||
|
||||
emc:
|
||||
image: wg00/emercoin:0.8.4
|
||||
platform: linux/arm64
|
||||
container_name: darkemer
|
||||
volumes:
|
||||
- emc_data:/emc
|
||||
- /etc/localtime:/etc/localtime:ro
|
||||
networks:
|
||||
darkproxy:
|
||||
ipv4_address: 10.5.0.9
|
||||
restart: unless-stopped
|
||||
stop_grace_period: 30s
|
||||
|
||||
volumes:
|
||||
darkalfis_data:
|
||||
name: darkalfis_data
|
||||
emc_data:
|
||||
name: emc_data
|
||||
tor-data:
|
||||
driver: local
|
||||
|
||||
networks:
|
||||
darkproxy:
|
||||
# name: darkproxy
|
||||
enable_ipv6: true
|
||||
driver: bridge
|
||||
ipam:
|
||||
config:
|
||||
- subnet: 10.5.0.0/16
|
||||
gateway: 10.5.0.1
|
||||
- subnet: 2001:0BC5::/112
|
||||
gateway: 2001:0BC5::1
|
||||
|
||||
secrets:
|
||||
tz:
|
||||
file: ./secrets/tz.txt
|
||||
YGGDRASIL_GENERATE_KEYS:
|
||||
file: ./secrets/YGGDRASIL_GENERATE_KEYS.txt
|
||||
Reference in New Issue
Block a user