2c5894d70b
services/kb-site/ — nginx:alpine serwujacy wolumen kb-site_content (:ro, /usr/share/nginx/html), pelny layout z CLAUDE.md: docker-compose.yml, service.yaml, README-wskaznik, env.example (swiadomie pusty — brak sekretow), healthcheck.sh. Wpis w hosts/piha/services.yaml. Port hosta 8250, NIE 8240 z opisu zadania: 8240 jest juz zajete przez narty27 (services/narty27/docker-compose.yml). Blok statyczny PIHA to 8210 paperless, 8220 nextcloud, 8230 kb-query, 8240 narty27 -> 8250 to nastepny wolny. Uzgodnione z operatorem. exposure: public — w odroznieniu od narty27 ta wystawka ma byc dostepna z internetu przez vhost npm@PIHA kb.okit.pl; bind :8250 jest upstreamem proxy, nie punktem wejscia. Tresc jest czystym artefaktem repo (wyjscie scripts/kb/gen_pages.py), zyje wylacznie w wolumenie kb-site_kb-site_content — bez binda pod /opt/homelab/data i bez zadania backupu: odtworzeniem jest regeneracja z kb/. Sprawdzone lokalnie: docker compose config -q, bash -n healthcheck.sh, yaml.safe_load na obu manifestach.
29 lines
1.1 KiB
YAML
29 lines
1.1 KiB
YAML
services:
|
|
kb-site:
|
|
image: nginx:alpine
|
|
container_name: kb-site
|
|
restart: unless-stopped
|
|
ports:
|
|
# PIHA 82x0 static-HTTP block: 8210 paperless, 8220 nextcloud,
|
|
# 8230 kb-query, 8240 narty27 -> 8250 is the next free slot.
|
|
# Publicly the site is reached only through the npm@PIHA vhost
|
|
# kb.okit.pl; this bind is the proxy's upstream.
|
|
- "8250:80"
|
|
volumes:
|
|
# Generated output of scripts/kb/gen_pages.py — never committed, never
|
|
# bind-mounted from the repo. Read-only: nginx only serves it; writes go
|
|
# through the helper-container procedure in kb/runbooks/kb-site-deploy.md
|
|
# (docker cp cannot write into a :ro mount).
|
|
- kb-site_content:/usr/share/nginx/html:ro
|
|
# busybox wget — nginx:alpine ships no curl. index.html is generated on
|
|
# every run, so it is the one file that must always be there.
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1/index.html"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 5
|
|
start_period: 5s
|
|
|
|
volumes:
|
|
kb-site_content:
|