infrastructure/ansible/roles/privatebin/files/docker-compose.yml

services:
  privatebin:
    image: privatebin/nginx-fpm-alpine:latest
    environment:
      - TZ={{ timezone }}
    volumes:
      - "{{ app_data_dir }}/privatebin/:/srv/data"
      - "{{ app_data_dir }}/privatebin/conf.php:/srv/cfg/conf.php:ro"
    restart: unless-stopped
    labels:
      - traefik.enable=true
      - traefik.http.routers.privatebin.rule=Host(`bin.theorangeone.net`)
    networks:
      - default
      - traefik

networks:
  traefik:
    external: true
Provision privatebin 2021-02-12 23:32:31 +00:00			`services:`
			`privatebin:`
			`image: privatebin/nginx-fpm-alpine:latest`
			`environment:`
Update yamllint to fix dependency issue I think this still validates everything we need it to 2022-01-11 20:51:12 +00:00			`- TZ={{ timezone }}`
Provision privatebin 2021-02-12 23:32:31 +00:00			`volumes:`
			`- "{{ app_data_dir }}/privatebin/:/srv/data"`
Add privatebin config Disable super long expirations, among other things 2021-09-19 19:29:05 +01:00			`- "{{ app_data_dir }}/privatebin/conf.php:/srv/cfg/conf.php:ro"`
Provision privatebin 2021-02-12 23:32:31 +00:00			`restart: unless-stopped`
			`labels:`
			`- traefik.enable=true`
			- traefik.http.routers.privatebin.rule=Host(`bin.theorangeone.net`)
Run traefik as dockeruser, and without host networking This required port forwarding, a docker proxy, and a docker network, but the end result should be much more secure! 2022-01-15 23:44:06 +00:00			`networks:`
			`- default`
			`- traefik`

			`networks:`
			`traefik:`
			`external: true`