added matrix service, still in testing not prod ready

This commit is contained in:
venus
2026-06-02 03:11:42 -05:00
parent be2668ce4c
commit 810a063461
3 changed files with 81 additions and 16 deletions

View File

@@ -17,16 +17,11 @@ services:
ipv4_address: 172.21.0.10
labels:
- "traefik.enable=true"
- "traefik.http.routers.dashboard.rule=Host(`traefik.riverrooks.dev`)"
- "traefik.http.routers.dashboard.entrypoints=websecure"
- "traefik.http.routers.dashboard.service=api@internal"
- "traefik.http.routers.dashboard.tls=true"
- "traefik.http.routers.dashboard.tls.certresolver=basic"
# MIDDLEWARE
# enable auth MIDDLEWARE
- "traefik.http.routers.dashboard.middlewares=auth"
# define auth type and traffic
@@ -39,13 +34,11 @@ services:
volumes:
- ./etc_wireguard:/etc/wireguard
environment:
# Required settings
- WG_HOST=wg.riverrooks.dev
# Optional settings
- PASSWORD_HASH=$2a$12$PzmNEYtQws9ylYYtr1yojuGJvWUOzmJTxzVSO0svSb9NvOeg1BUcC
- WG_PORT=51820 # WireGuard UDP port
- WG_DEFAULT_DNS=dns
- WG_ALLOWED_IPS=10.8.0.0/24
- WG_DEFAULT_DNS=1.1.1.1
- WG_ALLOWED_IPS=10.8.0.0/24, 172.16.0.0/12
cap_add:
- NET_ADMIN
@@ -59,9 +52,8 @@ services:
ports:
- "51820:51820/udp"
networks:
traefik: {}
dfnk:
ipv4_address: 10.8.0.2
backend: {}
frontend: {}
labels:
# since by default containers are disabled, we need to enable them
@@ -82,11 +74,13 @@ services:
restart: always
networks:
traefik:
# Backend network for docker containers to talk to eachother
backend:
name: traefik
external: true
dfnk:
# VPN network for external devices to connect to the server
frontend:
driver: bridge
ipam:
config:
- subnet: 10.8.0.0/24
- subnet: 172.20.0.0/24