remove authentik, upgrade to php8.3

peach/docker-compose.yml

@@ -3,10 +3,6 @@ version: "3.9"
 volumes:
     ssl:
         external: true
-    mariadb-data:
-        external: true
-    lumieredesoy-ghost-data:
-        external: true
     victoria-metrics:
         external: true
     haproxy-socket:
@@ -52,9 +48,9 @@ services:
                 ipv6_address: 2a01:e0a:5b7:35f1::5432
         restart: always
     haproxy:
-        image: haproxy:alpine
+        image: haproxytech/haproxy-alpine-quic:2.8
         volumes:
-            - ssl:/ssl:ro
+            - ssl:/ssl:rw
             - /etc/haproxy:/usr/local/etc/haproxy:ro
             - /etc/haproxy:/etc/haproxy:ro
             - haproxy-socket:/var/lib/haproxy:rw
@@ -63,7 +59,7 @@ services:
             - 443:443/udp
             - 80:80
         restart: always
-        mem_limit: 128M
+        mem_limit: 512M
         dns: fd00::3:2
         networks:
             default:
@@ -84,6 +80,7 @@ services:
             - ssl:/etc/dehydrated:ro
             - /etc/caddy:/etc/caddy
             - /srv/www:/srv/www
+            - /srv/www/nfs/kiwi/Videos:/srv/www/nfs/kiwi/Videos:ro
         restart: always
         mem_limit: 128M
         dns: 192.168.3.2
@@ -99,25 +96,6 @@ services:
         networks:
             default:
                 ipv6_address: 2a01:e0a:5b7:35f1::6379
-    mariadb:
-        image: mariadb
-        volumes:
-            - mariadb-data:/var/lib/mysql
-            - ssl:/ssl:ro
-        ports:
-            - 3306:3306
-        dns: 192.168.3.2
-        networks:
-            default:
-                ipv6_address: 2a01:e0a:5b7:35f1::3306
-        restart: always
-    lumieredesoy-ghost:
-        image: ghost:5-alpine
-        volumes:
-            - lumieredesoy-ghost-data:/var/lib/ghost/content
-            - /srv/docker/volume/lumieredesoy_ghost/config/config.production.json:/var/lib/ghost/config.production.json:ro
-        env_file: env/lumieredesoy-ghost
-        restart: always
     pdns:
         image: pdns-alpine
         volumes:
@@ -143,7 +121,16 @@ services:
         volumes:
             - /srv/docker/volume/grafana/grafana.ini:/etc/grafana/grafana.ini
         restart: always
-        mem_limit: 128M
+        mem_limit: 1G
+    php:
+        image: php83-alpine
+        extra_hosts:
+            - "mail.verry.org:192.168.42.3"
+        dns: 192.168.3.2
+        command: php-fpm
+        volumes:
+            - /srv/www:/srv/www
+        restart: always
     loki:
         image: grafana/loki
         volumes:
@@ -156,34 +143,6 @@ services:
         env_file: env/miniflux
         restart: always
         mem_limit: 128M
-    php:
-        image: php-alpine
-        extra_hosts:
-            - "mail.verry.org:192.168.42.3"
-        dns: 192.168.3.2
-        volumes:
-            - /srv/www:/srv/www
-        restart: always
-    authentik-server:
-        image: ghcr.io/goauthentik/server:latest
-        restart: unless-stopped
-        command: server
-        volumes:
-          - /srv/docker/volume/authentik/media:/media
-          - /srv/docker/volume/authentik/custom-templates:/templates
-        env_file:
-          - env/authentik
-    authentik-worker:
-        image: ghcr.io/goauthentik/server:latest
-        restart: unless-stopped
-        command: worker
-        volumes:
-          - /srv/docker/volume/authentik/certs:/certs
-          - /srv/docker/volume/authentik/media:/media
-          - /srv/docker/volume/authentik/custom-templates:/templates
-        restart: unless-stopped
-        env_file:
-          - env/authentik
     pgbouncer:
         image: pgbouncer-alpine
         volumes:
@@ -242,11 +201,6 @@ services:
             - "mail.verry.org:192.168.3.5"
         restart: always
         mem_limit: 128M
-    prometheus-mysqld:
-        image: prom/mysqld-exporter
-        env_file: env/prometheus-mysqld
-        restart: always
-        mem_limit: 512M
     prometheus-postgres:
         image: quay.io/prometheuscommunity/postgres-exporter
         env_file: env/prometheus-postgres
@@ -324,13 +278,14 @@ services:
         restart: always
         environment:
             - WHOAMI_NAME=iamverry
-    bitwarden:
+    linkding:
-        image: vaultwarden/server
+        image: sissbruecker/linkding:latest
         volumes:
-            - /srv/docker/volume/bitwarden:/data
+            - /srv/docker/volume/linkding:/etc/linkding/data
         restart: always
-        mem_limit: 128M
+        mem_limit: 1G
-        env_file: env/vaultwarden
+        env_file: env/linkding
+        command: uwsgi --http [::]:9090 uwsgi.ini
     drone:
         image: drone/drone:2
         restart: always
@@ -339,13 +294,22 @@ services:
         image: drone/drone-runner-ssh
         restart: always
         env_file: env/drone-runner-ssh
-    minio:
+#    minio:
-        image: minio/minio
+#        image: minio/minio
+#        volumes:
+#            - /srv/docker/volume/minio/data:/data:rw
+#        env_file: env/minio
+#        restart: always
+#        command: minio server /data
+#        mem_limit: 1G
+#        cpus: 0.5
+    matrixsyncv3:
+        image: alpine:3.18
+        env_file: env/matrixsyncv3
         volumes:
-            - /srv/docker/volume/minio/data:/data:rw
+            - /srv/docker/volume/sliding-sync/bin/syncv3:/bin/syncv3
-        env_file: env/minio
         restart: always
-        command: minio server /data
+        command: /bin/syncv3
         mem_limit: 1G
         cpus: 0.5
     dendrite:
@@ -370,8 +334,8 @@ services:
         volumes:
           - /srv/docker/volume/uptime-kuma/data:/app/data:rw
         restart: always
-        mem_limit: 1G
+        mem_limit: 2G
-        cpus: 0.5
+        cpus: 1
     vikunja-api:
         image: vikunja/api:latest
         env_file: env/vikunja-api
@@ -386,9 +350,6 @@ services:
         restart: always
         mem_limit: 512M
         cpus: 0.5
-        networks:
-            default:
-                ipv4_address: 172.20.0.42
     geoipupdate:
         image: "maxmindinc/geoipupdate:latest"
         volumes:

peach/reload.sh

@@ -3,4 +3,5 @@
 
 cd "$(dirname "$0")"
 
+docker-compose pull --ignore-pull-failures
 docker-compose up -d