homelab-codex-ws/services/vikunja/docker-compose.yml

63 lines
2 KiB
YAML
Raw Normal View History

services:
vikunja:
image: vikunja/vikunja:latest
container_name: vikunja
restart: unless-stopped
depends_on:
db:
condition: service_healthy
# forgejo.okit.pl is pinned to the npm reverse proxy on PIHA so OIDC
# discovery resolves over the LAN instead of flaky public DNS, which was
# causing OIDC discovery to fail.
extra_hosts:
- "forgejo.okit.pl:192.168.31.5"
env_file:
- .env
environment:
- VIKUNJA_DATABASE_TYPE=postgres
- VIKUNJA_DATABASE_HOST=db
- VIKUNJA_DATABASE_PORT=5432
- VIKUNJA_DATABASE_USER=vikunja
- VIKUNJA_DATABASE_DATABASE=vikunja
- VIKUNJA_DATABASE_PASSWORD=${VIKUNJA_DATABASE_PASSWORD:?set in .env}
- VIKUNJA_SERVICE_PUBLICURL=https://vikunja.okit.pl
- VIKUNJA_SERVICE_JWTSECRET=${VIKUNJA_SERVICE_JWTSECRET:?set in .env}
# OIDC client secret injected from .env so config.yml stays secret-free.
- VIKUNJA_AUTH_OPENID_PROVIDERS_FORGEJO_CLIENTSECRET=${VIKUNJA_AUTH_OPENID_PROVIDERS_FORGEJO_CLIENTSECRET:?set in .env}
- TZ=Europe/Warsaw
volumes:
- vikunja_files:/app/vikunja/files
- ./config.yml:/etc/vikunja/config.yml:ro
ports:
- "3456:3456"
healthcheck:
test: ["CMD", "wget", "-qO-", "http://localhost:3456/api/v1/info"]
interval: 30s
timeout: 10s
retries: 5
db:
image: postgres:16-alpine
container_name: vikunja-db
restart: unless-stopped
environment:
- POSTGRES_USER=vikunja
- POSTGRES_DB=vikunja
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD:?set in .env}
- TZ=Europe/Warsaw
volumes:
- vikunja_db:/var/lib/postgresql/data
healthcheck:
test: ["CMD-SHELL", "pg_isready -U vikunja -d vikunja"]
interval: 10s
timeout: 5s
retries: 5
# Pinned to the EXISTING named volumes so the live database and uploaded files
# survive cutover. Do not rename these — the data lives here.
volumes:
vikunja_db:
name: vikunja_vikunja_db
vikunja_files:
name: vikunja_vikunja_files