MetaPlugin/MetaFeeder/MetaTransport apps: headless services (no AppShield, no Caddy route, no webui); drop parent; MetaFeederUsenet tile → nntmux
This commit is contained in:
@@ -58,50 +58,8 @@ services:
|
||||
# expensive to redo; safe to delete, it rebuilds.
|
||||
- ${DATA_ROOT:-/DATA}/AppData/metapluginffmpeg/cache:/cache:rw
|
||||
networks:
|
||||
- metapluginffmpeg
|
||||
- pcs
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# AppShield gate — the plugin's `/manifest` behind Yundera OIDC SSO.
|
||||
# container_name == subdomain prefix (the auth-registrar derives the client_id
|
||||
# from it). Consumers still reach the plugin directly on `pcs`; this gate
|
||||
# exists so `/process` and `/configure` are never reachable from the internet
|
||||
# without a session.
|
||||
# ---------------------------------------------------------------------------
|
||||
metapluginffmpeg:
|
||||
image: ghcr.io/yundera/appshield:2.0.9
|
||||
cpu_shares: 80
|
||||
container_name: metapluginffmpeg
|
||||
hostname: metapluginffmpeg
|
||||
restart: unless-stopped
|
||||
user: "0:0"
|
||||
expose:
|
||||
- 80
|
||||
environment:
|
||||
OIDC_REGISTRAR_URL: "http://auth-registrar:9092"
|
||||
REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.nip.io,${APP_PUBLIC_IP_DASH}.sslip.io"
|
||||
BACKEND_HOST: "metapluginffmpeg-plugin"
|
||||
BACKEND_PORT: "8080"
|
||||
LISTEN_PORT: "80"
|
||||
labels:
|
||||
caddy_0: metapluginffmpeg-${APP_DOMAIN}
|
||||
caddy_0.import: gateway_tls
|
||||
caddy_0.reverse_proxy: "{{upstreams 80}}"
|
||||
caddy_1: metapluginffmpeg-${APP_PUBLIC_IP_DASH}.nip.io
|
||||
caddy_1.import: gateway_tls
|
||||
caddy_1.reverse_proxy: "{{upstreams 80}}"
|
||||
caddy_2: metapluginffmpeg-${APP_PUBLIC_IP_DASH}.sslip.io
|
||||
caddy_2.reverse_proxy: "{{upstreams 80}}"
|
||||
depends_on:
|
||||
- metapluginffmpeg-plugin
|
||||
networks:
|
||||
- metapluginffmpeg
|
||||
- pcs
|
||||
|
||||
networks:
|
||||
metapluginffmpeg:
|
||||
name: metapluginffmpeg
|
||||
driver: bridge
|
||||
pcs:
|
||||
name: ${APP_NET:-pcs}
|
||||
external: true
|
||||
@@ -113,9 +71,6 @@ x-casaos:
|
||||
author: Worph Team
|
||||
category: Developer
|
||||
developer: Aptero Team
|
||||
main: metapluginffmpeg
|
||||
webui_port: 80
|
||||
index: /manifest
|
||||
|
||||
description:
|
||||
en_us: |
|
||||
@@ -174,8 +129,8 @@ x-casaos:
|
||||
**Requires MetaCore** on the same box: this plugin writes what it
|
||||
produces to MetaCore's WebDAV (`http://metacore-app:9000/webdav`).
|
||||
|
||||
**Authentication:** the `/manifest` page is protected by Yundera's Authelia
|
||||
(OIDC). Consumers on the `pcs` network bypass the gate by design.
|
||||
**No web UI:** a headless service. Its consumers reach it directly on the
|
||||
`pcs` network.
|
||||
|
||||
# Maison (Yundera dashboard) configuration. Read in preference to x-casaos.
|
||||
# schema_version 2 is required for `folders`: an older Maison refuses the app
|
||||
@@ -189,6 +144,3 @@ x-compose-app:
|
||||
- path: /DATA/AppData/metapluginffmpeg/cache
|
||||
user: $PUID
|
||||
group: $PGID
|
||||
# Same string as the caddy_0 label, so the tile link and the route agree.
|
||||
webui-host: metapluginffmpeg-${domain}
|
||||
webui-path: "/manifest"
|
||||
|
||||
Reference in New Issue
Block a user