Inital commit
This commit is contained in:
commit
149e1afbe9
4
.gitignore
vendored
Normal file
4
.gitignore
vendored
Normal file
@ -0,0 +1,4 @@
|
||||
vars/secrets.yml
|
||||
templates/conf/users_database.yml.j2
|
||||
templates/conf/configuration.yml.j2
|
||||
files/firefox
|
||||
661
LICENSE
Normal file
661
LICENSE
Normal file
@ -0,0 +1,661 @@
|
||||
GNU AFFERO GENERAL PUBLIC LICENSE
|
||||
Version 3, 19 November 2007
|
||||
|
||||
Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
|
||||
Everyone is permitted to copy and distribute verbatim copies
|
||||
of this license document, but changing it is not allowed.
|
||||
|
||||
Preamble
|
||||
|
||||
The GNU Affero General Public License is a free, copyleft license for
|
||||
software and other kinds of works, specifically designed to ensure
|
||||
cooperation with the community in the case of network server software.
|
||||
|
||||
The licenses for most software and other practical works are designed
|
||||
to take away your freedom to share and change the works. By contrast,
|
||||
our General Public Licenses are intended to guarantee your freedom to
|
||||
share and change all versions of a program--to make sure it remains free
|
||||
software for all its users.
|
||||
|
||||
When we speak of free software, we are referring to freedom, not
|
||||
price. Our General Public Licenses are designed to make sure that you
|
||||
have the freedom to distribute copies of free software (and charge for
|
||||
them if you wish), that you receive source code or can get it if you
|
||||
want it, that you can change the software or use pieces of it in new
|
||||
free programs, and that you know you can do these things.
|
||||
|
||||
Developers that use our General Public Licenses protect your rights
|
||||
with two steps: (1) assert copyright on the software, and (2) offer
|
||||
you this License which gives you legal permission to copy, distribute
|
||||
and/or modify the software.
|
||||
|
||||
A secondary benefit of defending all users' freedom is that
|
||||
improvements made in alternate versions of the program, if they
|
||||
receive widespread use, become available for other developers to
|
||||
incorporate. Many developers of free software are heartened and
|
||||
encouraged by the resulting cooperation. However, in the case of
|
||||
software used on network servers, this result may fail to come about.
|
||||
The GNU General Public License permits making a modified version and
|
||||
letting the public access it on a server without ever releasing its
|
||||
source code to the public.
|
||||
|
||||
The GNU Affero General Public License is designed specifically to
|
||||
ensure that, in such cases, the modified source code becomes available
|
||||
to the community. It requires the operator of a network server to
|
||||
provide the source code of the modified version running there to the
|
||||
users of that server. Therefore, public use of a modified version, on
|
||||
a publicly accessible server, gives the public access to the source
|
||||
code of the modified version.
|
||||
|
||||
An older license, called the Affero General Public License and
|
||||
published by Affero, was designed to accomplish similar goals. This is
|
||||
a different license, not a version of the Affero GPL, but Affero has
|
||||
released a new version of the Affero GPL which permits relicensing under
|
||||
this license.
|
||||
|
||||
The precise terms and conditions for copying, distribution and
|
||||
modification follow.
|
||||
|
||||
TERMS AND CONDITIONS
|
||||
|
||||
0. Definitions.
|
||||
|
||||
"This License" refers to version 3 of the GNU Affero General Public License.
|
||||
|
||||
"Copyright" also means copyright-like laws that apply to other kinds of
|
||||
works, such as semiconductor masks.
|
||||
|
||||
"The Program" refers to any copyrightable work licensed under this
|
||||
License. Each licensee is addressed as "you". "Licensees" and
|
||||
"recipients" may be individuals or organizations.
|
||||
|
||||
To "modify" a work means to copy from or adapt all or part of the work
|
||||
in a fashion requiring copyright permission, other than the making of an
|
||||
exact copy. The resulting work is called a "modified version" of the
|
||||
earlier work or a work "based on" the earlier work.
|
||||
|
||||
A "covered work" means either the unmodified Program or a work based
|
||||
on the Program.
|
||||
|
||||
To "propagate" a work means to do anything with it that, without
|
||||
permission, would make you directly or secondarily liable for
|
||||
infringement under applicable copyright law, except executing it on a
|
||||
computer or modifying a private copy. Propagation includes copying,
|
||||
distribution (with or without modification), making available to the
|
||||
public, and in some countries other activities as well.
|
||||
|
||||
To "convey" a work means any kind of propagation that enables other
|
||||
parties to make or receive copies. Mere interaction with a user through
|
||||
a computer network, with no transfer of a copy, is not conveying.
|
||||
|
||||
An interactive user interface displays "Appropriate Legal Notices"
|
||||
to the extent that it includes a convenient and prominently visible
|
||||
feature that (1) displays an appropriate copyright notice, and (2)
|
||||
tells the user that there is no warranty for the work (except to the
|
||||
extent that warranties are provided), that licensees may convey the
|
||||
work under this License, and how to view a copy of this License. If
|
||||
the interface presents a list of user commands or options, such as a
|
||||
menu, a prominent item in the list meets this criterion.
|
||||
|
||||
1. Source Code.
|
||||
|
||||
The "source code" for a work means the preferred form of the work
|
||||
for making modifications to it. "Object code" means any non-source
|
||||
form of a work.
|
||||
|
||||
A "Standard Interface" means an interface that either is an official
|
||||
standard defined by a recognized standards body, or, in the case of
|
||||
interfaces specified for a particular programming language, one that
|
||||
is widely used among developers working in that language.
|
||||
|
||||
The "System Libraries" of an executable work include anything, other
|
||||
than the work as a whole, that (a) is included in the normal form of
|
||||
packaging a Major Component, but which is not part of that Major
|
||||
Component, and (b) serves only to enable use of the work with that
|
||||
Major Component, or to implement a Standard Interface for which an
|
||||
implementation is available to the public in source code form. A
|
||||
"Major Component", in this context, means a major essential component
|
||||
(kernel, window system, and so on) of the specific operating system
|
||||
(if any) on which the executable work runs, or a compiler used to
|
||||
produce the work, or an object code interpreter used to run it.
|
||||
|
||||
The "Corresponding Source" for a work in object code form means all
|
||||
the source code needed to generate, install, and (for an executable
|
||||
work) run the object code and to modify the work, including scripts to
|
||||
control those activities. However, it does not include the work's
|
||||
System Libraries, or general-purpose tools or generally available free
|
||||
programs which are used unmodified in performing those activities but
|
||||
which are not part of the work. For example, Corresponding Source
|
||||
includes interface definition files associated with source files for
|
||||
the work, and the source code for shared libraries and dynamically
|
||||
linked subprograms that the work is specifically designed to require,
|
||||
such as by intimate data communication or control flow between those
|
||||
subprograms and other parts of the work.
|
||||
|
||||
The Corresponding Source need not include anything that users
|
||||
can regenerate automatically from other parts of the Corresponding
|
||||
Source.
|
||||
|
||||
The Corresponding Source for a work in source code form is that
|
||||
same work.
|
||||
|
||||
2. Basic Permissions.
|
||||
|
||||
All rights granted under this License are granted for the term of
|
||||
copyright on the Program, and are irrevocable provided the stated
|
||||
conditions are met. This License explicitly affirms your unlimited
|
||||
permission to run the unmodified Program. The output from running a
|
||||
covered work is covered by this License only if the output, given its
|
||||
content, constitutes a covered work. This License acknowledges your
|
||||
rights of fair use or other equivalent, as provided by copyright law.
|
||||
|
||||
You may make, run and propagate covered works that you do not
|
||||
convey, without conditions so long as your license otherwise remains
|
||||
in force. You may convey covered works to others for the sole purpose
|
||||
of having them make modifications exclusively for you, or provide you
|
||||
with facilities for running those works, provided that you comply with
|
||||
the terms of this License in conveying all material for which you do
|
||||
not control copyright. Those thus making or running the covered works
|
||||
for you must do so exclusively on your behalf, under your direction
|
||||
and control, on terms that prohibit them from making any copies of
|
||||
your copyrighted material outside their relationship with you.
|
||||
|
||||
Conveying under any other circumstances is permitted solely under
|
||||
the conditions stated below. Sublicensing is not allowed; section 10
|
||||
makes it unnecessary.
|
||||
|
||||
3. Protecting Users' Legal Rights From Anti-Circumvention Law.
|
||||
|
||||
No covered work shall be deemed part of an effective technological
|
||||
measure under any applicable law fulfilling obligations under article
|
||||
11 of the WIPO copyright treaty adopted on 20 December 1996, or
|
||||
similar laws prohibiting or restricting circumvention of such
|
||||
measures.
|
||||
|
||||
When you convey a covered work, you waive any legal power to forbid
|
||||
circumvention of technological measures to the extent such circumvention
|
||||
is effected by exercising rights under this License with respect to
|
||||
the covered work, and you disclaim any intention to limit operation or
|
||||
modification of the work as a means of enforcing, against the work's
|
||||
users, your or third parties' legal rights to forbid circumvention of
|
||||
technological measures.
|
||||
|
||||
4. Conveying Verbatim Copies.
|
||||
|
||||
You may convey verbatim copies of the Program's source code as you
|
||||
receive it, in any medium, provided that you conspicuously and
|
||||
appropriately publish on each copy an appropriate copyright notice;
|
||||
keep intact all notices stating that this License and any
|
||||
non-permissive terms added in accord with section 7 apply to the code;
|
||||
keep intact all notices of the absence of any warranty; and give all
|
||||
recipients a copy of this License along with the Program.
|
||||
|
||||
You may charge any price or no price for each copy that you convey,
|
||||
and you may offer support or warranty protection for a fee.
|
||||
|
||||
5. Conveying Modified Source Versions.
|
||||
|
||||
You may convey a work based on the Program, or the modifications to
|
||||
produce it from the Program, in the form of source code under the
|
||||
terms of section 4, provided that you also meet all of these conditions:
|
||||
|
||||
a) The work must carry prominent notices stating that you modified
|
||||
it, and giving a relevant date.
|
||||
|
||||
b) The work must carry prominent notices stating that it is
|
||||
released under this License and any conditions added under section
|
||||
7. This requirement modifies the requirement in section 4 to
|
||||
"keep intact all notices".
|
||||
|
||||
c) You must license the entire work, as a whole, under this
|
||||
License to anyone who comes into possession of a copy. This
|
||||
License will therefore apply, along with any applicable section 7
|
||||
additional terms, to the whole of the work, and all its parts,
|
||||
regardless of how they are packaged. This License gives no
|
||||
permission to license the work in any other way, but it does not
|
||||
invalidate such permission if you have separately received it.
|
||||
|
||||
d) If the work has interactive user interfaces, each must display
|
||||
Appropriate Legal Notices; however, if the Program has interactive
|
||||
interfaces that do not display Appropriate Legal Notices, your
|
||||
work need not make them do so.
|
||||
|
||||
A compilation of a covered work with other separate and independent
|
||||
works, which are not by their nature extensions of the covered work,
|
||||
and which are not combined with it such as to form a larger program,
|
||||
in or on a volume of a storage or distribution medium, is called an
|
||||
"aggregate" if the compilation and its resulting copyright are not
|
||||
used to limit the access or legal rights of the compilation's users
|
||||
beyond what the individual works permit. Inclusion of a covered work
|
||||
in an aggregate does not cause this License to apply to the other
|
||||
parts of the aggregate.
|
||||
|
||||
6. Conveying Non-Source Forms.
|
||||
|
||||
You may convey a covered work in object code form under the terms
|
||||
of sections 4 and 5, provided that you also convey the
|
||||
machine-readable Corresponding Source under the terms of this License,
|
||||
in one of these ways:
|
||||
|
||||
a) Convey the object code in, or embodied in, a physical product
|
||||
(including a physical distribution medium), accompanied by the
|
||||
Corresponding Source fixed on a durable physical medium
|
||||
customarily used for software interchange.
|
||||
|
||||
b) Convey the object code in, or embodied in, a physical product
|
||||
(including a physical distribution medium), accompanied by a
|
||||
written offer, valid for at least three years and valid for as
|
||||
long as you offer spare parts or customer support for that product
|
||||
model, to give anyone who possesses the object code either (1) a
|
||||
copy of the Corresponding Source for all the software in the
|
||||
product that is covered by this License, on a durable physical
|
||||
medium customarily used for software interchange, for a price no
|
||||
more than your reasonable cost of physically performing this
|
||||
conveying of source, or (2) access to copy the
|
||||
Corresponding Source from a network server at no charge.
|
||||
|
||||
c) Convey individual copies of the object code with a copy of the
|
||||
written offer to provide the Corresponding Source. This
|
||||
alternative is allowed only occasionally and noncommercially, and
|
||||
only if you received the object code with such an offer, in accord
|
||||
with subsection 6b.
|
||||
|
||||
d) Convey the object code by offering access from a designated
|
||||
place (gratis or for a charge), and offer equivalent access to the
|
||||
Corresponding Source in the same way through the same place at no
|
||||
further charge. You need not require recipients to copy the
|
||||
Corresponding Source along with the object code. If the place to
|
||||
copy the object code is a network server, the Corresponding Source
|
||||
may be on a different server (operated by you or a third party)
|
||||
that supports equivalent copying facilities, provided you maintain
|
||||
clear directions next to the object code saying where to find the
|
||||
Corresponding Source. Regardless of what server hosts the
|
||||
Corresponding Source, you remain obligated to ensure that it is
|
||||
available for as long as needed to satisfy these requirements.
|
||||
|
||||
e) Convey the object code using peer-to-peer transmission, provided
|
||||
you inform other peers where the object code and Corresponding
|
||||
Source of the work are being offered to the general public at no
|
||||
charge under subsection 6d.
|
||||
|
||||
A separable portion of the object code, whose source code is excluded
|
||||
from the Corresponding Source as a System Library, need not be
|
||||
included in conveying the object code work.
|
||||
|
||||
A "User Product" is either (1) a "consumer product", which means any
|
||||
tangible personal property which is normally used for personal, family,
|
||||
or household purposes, or (2) anything designed or sold for incorporation
|
||||
into a dwelling. In determining whether a product is a consumer product,
|
||||
doubtful cases shall be resolved in favor of coverage. For a particular
|
||||
product received by a particular user, "normally used" refers to a
|
||||
typical or common use of that class of product, regardless of the status
|
||||
of the particular user or of the way in which the particular user
|
||||
actually uses, or expects or is expected to use, the product. A product
|
||||
is a consumer product regardless of whether the product has substantial
|
||||
commercial, industrial or non-consumer uses, unless such uses represent
|
||||
the only significant mode of use of the product.
|
||||
|
||||
"Installation Information" for a User Product means any methods,
|
||||
procedures, authorization keys, or other information required to install
|
||||
and execute modified versions of a covered work in that User Product from
|
||||
a modified version of its Corresponding Source. The information must
|
||||
suffice to ensure that the continued functioning of the modified object
|
||||
code is in no case prevented or interfered with solely because
|
||||
modification has been made.
|
||||
|
||||
If you convey an object code work under this section in, or with, or
|
||||
specifically for use in, a User Product, and the conveying occurs as
|
||||
part of a transaction in which the right of possession and use of the
|
||||
User Product is transferred to the recipient in perpetuity or for a
|
||||
fixed term (regardless of how the transaction is characterized), the
|
||||
Corresponding Source conveyed under this section must be accompanied
|
||||
by the Installation Information. But this requirement does not apply
|
||||
if neither you nor any third party retains the ability to install
|
||||
modified object code on the User Product (for example, the work has
|
||||
been installed in ROM).
|
||||
|
||||
The requirement to provide Installation Information does not include a
|
||||
requirement to continue to provide support service, warranty, or updates
|
||||
for a work that has been modified or installed by the recipient, or for
|
||||
the User Product in which it has been modified or installed. Access to a
|
||||
network may be denied when the modification itself materially and
|
||||
adversely affects the operation of the network or violates the rules and
|
||||
protocols for communication across the network.
|
||||
|
||||
Corresponding Source conveyed, and Installation Information provided,
|
||||
in accord with this section must be in a format that is publicly
|
||||
documented (and with an implementation available to the public in
|
||||
source code form), and must require no special password or key for
|
||||
unpacking, reading or copying.
|
||||
|
||||
7. Additional Terms.
|
||||
|
||||
"Additional permissions" are terms that supplement the terms of this
|
||||
License by making exceptions from one or more of its conditions.
|
||||
Additional permissions that are applicable to the entire Program shall
|
||||
be treated as though they were included in this License, to the extent
|
||||
that they are valid under applicable law. If additional permissions
|
||||
apply only to part of the Program, that part may be used separately
|
||||
under those permissions, but the entire Program remains governed by
|
||||
this License without regard to the additional permissions.
|
||||
|
||||
When you convey a copy of a covered work, you may at your option
|
||||
remove any additional permissions from that copy, or from any part of
|
||||
it. (Additional permissions may be written to require their own
|
||||
removal in certain cases when you modify the work.) You may place
|
||||
additional permissions on material, added by you to a covered work,
|
||||
for which you have or can give appropriate copyright permission.
|
||||
|
||||
Notwithstanding any other provision of this License, for material you
|
||||
add to a covered work, you may (if authorized by the copyright holders of
|
||||
that material) supplement the terms of this License with terms:
|
||||
|
||||
a) Disclaiming warranty or limiting liability differently from the
|
||||
terms of sections 15 and 16 of this License; or
|
||||
|
||||
b) Requiring preservation of specified reasonable legal notices or
|
||||
author attributions in that material or in the Appropriate Legal
|
||||
Notices displayed by works containing it; or
|
||||
|
||||
c) Prohibiting misrepresentation of the origin of that material, or
|
||||
requiring that modified versions of such material be marked in
|
||||
reasonable ways as different from the original version; or
|
||||
|
||||
d) Limiting the use for publicity purposes of names of licensors or
|
||||
authors of the material; or
|
||||
|
||||
e) Declining to grant rights under trademark law for use of some
|
||||
trade names, trademarks, or service marks; or
|
||||
|
||||
f) Requiring indemnification of licensors and authors of that
|
||||
material by anyone who conveys the material (or modified versions of
|
||||
it) with contractual assumptions of liability to the recipient, for
|
||||
any liability that these contractual assumptions directly impose on
|
||||
those licensors and authors.
|
||||
|
||||
All other non-permissive additional terms are considered "further
|
||||
restrictions" within the meaning of section 10. If the Program as you
|
||||
received it, or any part of it, contains a notice stating that it is
|
||||
governed by this License along with a term that is a further
|
||||
restriction, you may remove that term. If a license document contains
|
||||
a further restriction but permits relicensing or conveying under this
|
||||
License, you may add to a covered work material governed by the terms
|
||||
of that license document, provided that the further restriction does
|
||||
not survive such relicensing or conveying.
|
||||
|
||||
If you add terms to a covered work in accord with this section, you
|
||||
must place, in the relevant source files, a statement of the
|
||||
additional terms that apply to those files, or a notice indicating
|
||||
where to find the applicable terms.
|
||||
|
||||
Additional terms, permissive or non-permissive, may be stated in the
|
||||
form of a separately written license, or stated as exceptions;
|
||||
the above requirements apply either way.
|
||||
|
||||
8. Termination.
|
||||
|
||||
You may not propagate or modify a covered work except as expressly
|
||||
provided under this License. Any attempt otherwise to propagate or
|
||||
modify it is void, and will automatically terminate your rights under
|
||||
this License (including any patent licenses granted under the third
|
||||
paragraph of section 11).
|
||||
|
||||
However, if you cease all violation of this License, then your
|
||||
license from a particular copyright holder is reinstated (a)
|
||||
provisionally, unless and until the copyright holder explicitly and
|
||||
finally terminates your license, and (b) permanently, if the copyright
|
||||
holder fails to notify you of the violation by some reasonable means
|
||||
prior to 60 days after the cessation.
|
||||
|
||||
Moreover, your license from a particular copyright holder is
|
||||
reinstated permanently if the copyright holder notifies you of the
|
||||
violation by some reasonable means, this is the first time you have
|
||||
received notice of violation of this License (for any work) from that
|
||||
copyright holder, and you cure the violation prior to 30 days after
|
||||
your receipt of the notice.
|
||||
|
||||
Termination of your rights under this section does not terminate the
|
||||
licenses of parties who have received copies or rights from you under
|
||||
this License. If your rights have been terminated and not permanently
|
||||
reinstated, you do not qualify to receive new licenses for the same
|
||||
material under section 10.
|
||||
|
||||
9. Acceptance Not Required for Having Copies.
|
||||
|
||||
You are not required to accept this License in order to receive or
|
||||
run a copy of the Program. Ancillary propagation of a covered work
|
||||
occurring solely as a consequence of using peer-to-peer transmission
|
||||
to receive a copy likewise does not require acceptance. However,
|
||||
nothing other than this License grants you permission to propagate or
|
||||
modify any covered work. These actions infringe copyright if you do
|
||||
not accept this License. Therefore, by modifying or propagating a
|
||||
covered work, you indicate your acceptance of this License to do so.
|
||||
|
||||
10. Automatic Licensing of Downstream Recipients.
|
||||
|
||||
Each time you convey a covered work, the recipient automatically
|
||||
receives a license from the original licensors, to run, modify and
|
||||
propagate that work, subject to this License. You are not responsible
|
||||
for enforcing compliance by third parties with this License.
|
||||
|
||||
An "entity transaction" is a transaction transferring control of an
|
||||
organization, or substantially all assets of one, or subdividing an
|
||||
organization, or merging organizations. If propagation of a covered
|
||||
work results from an entity transaction, each party to that
|
||||
transaction who receives a copy of the work also receives whatever
|
||||
licenses to the work the party's predecessor in interest had or could
|
||||
give under the previous paragraph, plus a right to possession of the
|
||||
Corresponding Source of the work from the predecessor in interest, if
|
||||
the predecessor has it or can get it with reasonable efforts.
|
||||
|
||||
You may not impose any further restrictions on the exercise of the
|
||||
rights granted or affirmed under this License. For example, you may
|
||||
not impose a license fee, royalty, or other charge for exercise of
|
||||
rights granted under this License, and you may not initiate litigation
|
||||
(including a cross-claim or counterclaim in a lawsuit) alleging that
|
||||
any patent claim is infringed by making, using, selling, offering for
|
||||
sale, or importing the Program or any portion of it.
|
||||
|
||||
11. Patents.
|
||||
|
||||
A "contributor" is a copyright holder who authorizes use under this
|
||||
License of the Program or a work on which the Program is based. The
|
||||
work thus licensed is called the contributor's "contributor version".
|
||||
|
||||
A contributor's "essential patent claims" are all patent claims
|
||||
owned or controlled by the contributor, whether already acquired or
|
||||
hereafter acquired, that would be infringed by some manner, permitted
|
||||
by this License, of making, using, or selling its contributor version,
|
||||
but do not include claims that would be infringed only as a
|
||||
consequence of further modification of the contributor version. For
|
||||
purposes of this definition, "control" includes the right to grant
|
||||
patent sublicenses in a manner consistent with the requirements of
|
||||
this License.
|
||||
|
||||
Each contributor grants you a non-exclusive, worldwide, royalty-free
|
||||
patent license under the contributor's essential patent claims, to
|
||||
make, use, sell, offer for sale, import and otherwise run, modify and
|
||||
propagate the contents of its contributor version.
|
||||
|
||||
In the following three paragraphs, a "patent license" is any express
|
||||
agreement or commitment, however denominated, not to enforce a patent
|
||||
(such as an express permission to practice a patent or covenant not to
|
||||
sue for patent infringement). To "grant" such a patent license to a
|
||||
party means to make such an agreement or commitment not to enforce a
|
||||
patent against the party.
|
||||
|
||||
If you convey a covered work, knowingly relying on a patent license,
|
||||
and the Corresponding Source of the work is not available for anyone
|
||||
to copy, free of charge and under the terms of this License, through a
|
||||
publicly available network server or other readily accessible means,
|
||||
then you must either (1) cause the Corresponding Source to be so
|
||||
available, or (2) arrange to deprive yourself of the benefit of the
|
||||
patent license for this particular work, or (3) arrange, in a manner
|
||||
consistent with the requirements of this License, to extend the patent
|
||||
license to downstream recipients. "Knowingly relying" means you have
|
||||
actual knowledge that, but for the patent license, your conveying the
|
||||
covered work in a country, or your recipient's use of the covered work
|
||||
in a country, would infringe one or more identifiable patents in that
|
||||
country that you have reason to believe are valid.
|
||||
|
||||
If, pursuant to or in connection with a single transaction or
|
||||
arrangement, you convey, or propagate by procuring conveyance of, a
|
||||
covered work, and grant a patent license to some of the parties
|
||||
receiving the covered work authorizing them to use, propagate, modify
|
||||
or convey a specific copy of the covered work, then the patent license
|
||||
you grant is automatically extended to all recipients of the covered
|
||||
work and works based on it.
|
||||
|
||||
A patent license is "discriminatory" if it does not include within
|
||||
the scope of its coverage, prohibits the exercise of, or is
|
||||
conditioned on the non-exercise of one or more of the rights that are
|
||||
specifically granted under this License. You may not convey a covered
|
||||
work if you are a party to an arrangement with a third party that is
|
||||
in the business of distributing software, under which you make payment
|
||||
to the third party based on the extent of your activity of conveying
|
||||
the work, and under which the third party grants, to any of the
|
||||
parties who would receive the covered work from you, a discriminatory
|
||||
patent license (a) in connection with copies of the covered work
|
||||
conveyed by you (or copies made from those copies), or (b) primarily
|
||||
for and in connection with specific products or compilations that
|
||||
contain the covered work, unless you entered into that arrangement,
|
||||
or that patent license was granted, prior to 28 March 2007.
|
||||
|
||||
Nothing in this License shall be construed as excluding or limiting
|
||||
any implied license or other defenses to infringement that may
|
||||
otherwise be available to you under applicable patent law.
|
||||
|
||||
12. No Surrender of Others' Freedom.
|
||||
|
||||
If conditions are imposed on you (whether by court order, agreement or
|
||||
otherwise) that contradict the conditions of this License, they do not
|
||||
excuse you from the conditions of this License. If you cannot convey a
|
||||
covered work so as to satisfy simultaneously your obligations under this
|
||||
License and any other pertinent obligations, then as a consequence you may
|
||||
not convey it at all. For example, if you agree to terms that obligate you
|
||||
to collect a royalty for further conveying from those to whom you convey
|
||||
the Program, the only way you could satisfy both those terms and this
|
||||
License would be to refrain entirely from conveying the Program.
|
||||
|
||||
13. Remote Network Interaction; Use with the GNU General Public License.
|
||||
|
||||
Notwithstanding any other provision of this License, if you modify the
|
||||
Program, your modified version must prominently offer all users
|
||||
interacting with it remotely through a computer network (if your version
|
||||
supports such interaction) an opportunity to receive the Corresponding
|
||||
Source of your version by providing access to the Corresponding Source
|
||||
from a network server at no charge, through some standard or customary
|
||||
means of facilitating copying of software. This Corresponding Source
|
||||
shall include the Corresponding Source for any work covered by version 3
|
||||
of the GNU General Public License that is incorporated pursuant to the
|
||||
following paragraph.
|
||||
|
||||
Notwithstanding any other provision of this License, you have
|
||||
permission to link or combine any covered work with a work licensed
|
||||
under version 3 of the GNU General Public License into a single
|
||||
combined work, and to convey the resulting work. The terms of this
|
||||
License will continue to apply to the part which is the covered work,
|
||||
but the work with which it is combined will remain governed by version
|
||||
3 of the GNU General Public License.
|
||||
|
||||
14. Revised Versions of this License.
|
||||
|
||||
The Free Software Foundation may publish revised and/or new versions of
|
||||
the GNU Affero General Public License from time to time. Such new versions
|
||||
will be similar in spirit to the present version, but may differ in detail to
|
||||
address new problems or concerns.
|
||||
|
||||
Each version is given a distinguishing version number. If the
|
||||
Program specifies that a certain numbered version of the GNU Affero General
|
||||
Public License "or any later version" applies to it, you have the
|
||||
option of following the terms and conditions either of that numbered
|
||||
version or of any later version published by the Free Software
|
||||
Foundation. If the Program does not specify a version number of the
|
||||
GNU Affero General Public License, you may choose any version ever published
|
||||
by the Free Software Foundation.
|
||||
|
||||
If the Program specifies that a proxy can decide which future
|
||||
versions of the GNU Affero General Public License can be used, that proxy's
|
||||
public statement of acceptance of a version permanently authorizes you
|
||||
to choose that version for the Program.
|
||||
|
||||
Later license versions may give you additional or different
|
||||
permissions. However, no additional obligations are imposed on any
|
||||
author or copyright holder as a result of your choosing to follow a
|
||||
later version.
|
||||
|
||||
15. Disclaimer of Warranty.
|
||||
|
||||
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
|
||||
APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
|
||||
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
|
||||
OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
|
||||
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
||||
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
|
||||
IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
|
||||
ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
|
||||
|
||||
16. Limitation of Liability.
|
||||
|
||||
IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
|
||||
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
|
||||
THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
|
||||
GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
|
||||
USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
|
||||
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
|
||||
PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
|
||||
EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
|
||||
SUCH DAMAGES.
|
||||
|
||||
17. Interpretation of Sections 15 and 16.
|
||||
|
||||
If the disclaimer of warranty and limitation of liability provided
|
||||
above cannot be given local legal effect according to their terms,
|
||||
reviewing courts shall apply local law that most closely approximates
|
||||
an absolute waiver of all civil liability in connection with the
|
||||
Program, unless a warranty or assumption of liability accompanies a
|
||||
copy of the Program in return for a fee.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
How to Apply These Terms to Your New Programs
|
||||
|
||||
If you develop a new program, and you want it to be of the greatest
|
||||
possible use to the public, the best way to achieve this is to make it
|
||||
free software which everyone can redistribute and change under these terms.
|
||||
|
||||
To do so, attach the following notices to the program. It is safest
|
||||
to attach them to the start of each source file to most effectively
|
||||
state the exclusion of warranty; and each file should have at least
|
||||
the "copyright" line and a pointer to where the full notice is found.
|
||||
|
||||
<one line to give the program's name and a brief idea of what it does.>
|
||||
Copyright (C) <year> <name of author>
|
||||
|
||||
This program is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU Affero General Public License as published by
|
||||
the Free Software Foundation, either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU Affero General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU Affero General Public License
|
||||
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
Also add information on how to contact you by electronic and paper mail.
|
||||
|
||||
If your software can interact with users remotely through a computer
|
||||
network, you should also make sure that it provides a way for users to
|
||||
get its source. For example, if your program is a web application, its
|
||||
interface could display a "Source" link that leads users to an archive
|
||||
of the code. There are many ways you could offer source, and different
|
||||
solutions will be better for different programs; see section 13 for the
|
||||
specific requirements.
|
||||
|
||||
You should also get your employer (if you work as a programmer) or school,
|
||||
if any, to sign a "copyright disclaimer" for the program, if necessary.
|
||||
For more information on this, and how to apply and follow the GNU AGPL, see
|
||||
<http://www.gnu.org/licenses/>.
|
||||
20
README.md
Normal file
20
README.md
Normal file
@ -0,0 +1,20 @@
|
||||
# Ansible project for Opnxng deployment
|
||||
|
||||
An Ansible project that deploy docker services to our servers.
|
||||
|
||||
`ansible-playbook -i "production" "deploy.yml"`
|
||||
|
||||
## Services
|
||||
|
||||
The services are hosted on one Vultr and four Oracle servers. A [variables file](vars/services.yml) defines the services to be deployed or already deployed.
|
||||
|
||||
They are deployed with [Compose files](templates/compose) and load balanced according to the [Caddyfile](templates/conf/Caddyfile.j2).
|
||||
|
||||
## Configurations
|
||||
|
||||
Our SearXNG instance uses a custom [settings.yml](templates/conf/settings.yml.j2) that always include upstream changes. It is updated by hand with reference to [Pussthecat.org's configuration](https://github.com/PussTheCat-org/PussTheCat.org-Configs/tree/master/Services/SearXNG).
|
||||
|
||||
Passwords and other sensitive data are kept locally as encrypted variables in [secrets.yml](/opnxng/ansible-opnxng-deploy). We host an Authelia and Firefox stack that is restricted to specific users only. Their related files are also kept locally.
|
||||
|
||||
## Contact
|
||||
Please contact us via [email](mailto:opnxng@tuta.io) if you discover any vulnerability or area for improvement in our infrastructure. We would truly appreciate it.
|
||||
65
deploy.yml
Normal file
65
deploy.yml
Normal file
@ -0,0 +1,65 @@
|
||||
---
|
||||
- name: Docker Deploy
|
||||
hosts: all
|
||||
gather_facts: false
|
||||
vars_files:
|
||||
- vars/secrets.yml
|
||||
- vars/services.yml
|
||||
tasks:
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
- name: Docker Compose down
|
||||
command: "docker-compose -f {{ docker_dir }}/{{ item }}/docker-compose.yaml down"
|
||||
loop: "{{ down[inventory_hostname] }}"
|
||||
when: down is defined and inventory_hostname in down
|
||||
ignore_errors: yes
|
||||
|
||||
- name: Remove project directory
|
||||
file:
|
||||
path: "{{ docker_dir }}/{{ item }}"
|
||||
state: absent
|
||||
become: true
|
||||
loop: "{{ remove[inventory_hostname] }}"
|
||||
when: remove is defined and inventory_hostname in remove
|
||||
ignore_errors: yes
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
- name: Create project directory
|
||||
file:
|
||||
path: "{{ docker_dir }}/{{ item }}"
|
||||
state: directory
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
loop: "{{ compose[inventory_hostname] }}"
|
||||
when: compose is defined and inventory_hostname in compose
|
||||
|
||||
- name: Inital Setup
|
||||
include_tasks: "setups/setup-{{ item }}.yml"
|
||||
loop: "{{ setup[inventory_hostname] }}"
|
||||
when: setup is defined and inventory_hostname in setup
|
||||
ignore_errors: yes
|
||||
|
||||
- name: Copy Docker Compose
|
||||
template:
|
||||
src: "compose/{{ item }}.yaml.j2"
|
||||
dest: "{{ docker_dir }}/{{ item }}/docker-compose.yaml"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
loop: "{{ compose[inventory_hostname] }}"
|
||||
when: compose is defined and inventory_hostname in compose
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
- name: Docker Compose pull
|
||||
command: "docker-compose -f {{ docker_dir }}/{{ item }}/docker-compose.yaml pull"
|
||||
loop: "{{ compose[inventory_hostname] }}"
|
||||
when: compose is defined and inventory_hostname in compose
|
||||
|
||||
- name: Docker Compose up
|
||||
command: "docker-compose -f {{ docker_dir }}/{{ item }}/docker-compose.yaml up --remove-orphans --force-recreate -d"
|
||||
loop: "{{ compose[inventory_hostname] }}"
|
||||
when: compose is defined and inventory_hostname in compose
|
||||
13
files/gitea/conf/example.app.ini
Executable file
13
files/gitea/conf/example.app.ini
Executable file
@ -0,0 +1,13 @@
|
||||
[server]
|
||||
LANDING_PAGE = /explore/repos
|
||||
|
||||
[storage.packages]
|
||||
STORAGE_TYPE = local
|
||||
PATH = /packages
|
||||
|
||||
[actions]
|
||||
ENABLED=true
|
||||
|
||||
[ui]
|
||||
THEMES = github
|
||||
DEFAULT_THEME = github
|
||||
552
files/gitea/public/assets/css/theme-github.css
Normal file
552
files/gitea/public/assets/css/theme-github.css
Normal file
@ -0,0 +1,552 @@
|
||||
/* Made by Rainnny <3 */
|
||||
|
||||
.chroma {
|
||||
background-color: var(--color-code-bg);
|
||||
}
|
||||
.chroma .lntd {
|
||||
vertical-align: top;
|
||||
border: 0;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
}
|
||||
.chroma .lntable {
|
||||
border-spacing: 0;
|
||||
border: 0;
|
||||
width: auto;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
display: block;
|
||||
overflow: auto;
|
||||
}
|
||||
.chroma .hl {
|
||||
width: 100%;
|
||||
display: block;
|
||||
}
|
||||
.chroma .lnt,
|
||||
.chroma .ln {
|
||||
margin-right: 0.4em;
|
||||
padding: 0 0.4em;
|
||||
}
|
||||
.chroma .gs {
|
||||
font-weight: var(--font-weight-semibold);
|
||||
}
|
||||
.chroma .gl {
|
||||
text-decoration: underline;
|
||||
}
|
||||
.chroma .bp {
|
||||
color: #fabd2f;
|
||||
}
|
||||
.chroma .c,
|
||||
.chroma .c1,
|
||||
.chroma .ch,
|
||||
.chroma .cm {
|
||||
color: #777e94;
|
||||
}
|
||||
.chroma .cp {
|
||||
color: #8ec07c;
|
||||
}
|
||||
.chroma .cpf {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .cs {
|
||||
color: #9075cd;
|
||||
}
|
||||
.chroma .dl {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .gd {
|
||||
color: #fff;
|
||||
background-color: #5f3737;
|
||||
}
|
||||
.chroma .ge {
|
||||
color: #ddee30;
|
||||
}
|
||||
.chroma .gh {
|
||||
color: #ffaa10;
|
||||
}
|
||||
.chroma .gi {
|
||||
color: #fff;
|
||||
background-color: #3a523a;
|
||||
}
|
||||
.chroma .go {
|
||||
color: #777e94;
|
||||
}
|
||||
.chroma .gp {
|
||||
color: #ebdbb2;
|
||||
}
|
||||
.chroma .gr {
|
||||
color: #f43;
|
||||
}
|
||||
.chroma .gs {
|
||||
color: #ebdbb2;
|
||||
}
|
||||
.chroma .gt {
|
||||
color: #7ee787;
|
||||
}
|
||||
.chroma .gu {
|
||||
color: #a5d6ff;
|
||||
}
|
||||
.chroma .il {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .k {
|
||||
color: #ff7b72;
|
||||
}
|
||||
.chroma .kc {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .kd {
|
||||
color: #ff7b72;
|
||||
}
|
||||
.chroma .kn {
|
||||
color: #ff7b72;
|
||||
}
|
||||
.chroma .kp {
|
||||
color: #5f8700;
|
||||
}
|
||||
.chroma .kr {
|
||||
color: #7ee787;
|
||||
}
|
||||
.chroma .kt {
|
||||
color: #ff7b72;
|
||||
}
|
||||
.chroma .m,
|
||||
.chroma .mb,
|
||||
.chroma .mf,
|
||||
.chroma .mh,
|
||||
.chroma .mi,
|
||||
.chroma .mo {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .n {
|
||||
color: #c9d1d9;
|
||||
}
|
||||
.chroma .na {
|
||||
color: #d2a8ff;
|
||||
}
|
||||
.chroma .nb {
|
||||
color: #a5d6ff;
|
||||
}
|
||||
.chroma .nc {
|
||||
color: #e6edf3;
|
||||
}
|
||||
.chroma .nd {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .ne {
|
||||
color: #7ee787;
|
||||
}
|
||||
.chroma .nf,
|
||||
.chroma .ni {
|
||||
color: #d2a8ff;
|
||||
}
|
||||
.chroma .nl {
|
||||
color: #7ee787;
|
||||
}
|
||||
.chroma .nn {
|
||||
color: #e6edf3;
|
||||
}
|
||||
.chroma .no {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .nt {
|
||||
color: #7ee787;
|
||||
}
|
||||
.chroma .nv {
|
||||
color: #ebdbb2;
|
||||
}
|
||||
.chroma .nx {
|
||||
color: #b6bac5;
|
||||
}
|
||||
.chroma .o {
|
||||
color: #7ee787;
|
||||
}
|
||||
.chroma .ow {
|
||||
color: #5f8700;
|
||||
}
|
||||
.chroma .p {
|
||||
color: #d2d4db;
|
||||
}
|
||||
.chroma .s,
|
||||
.chroma .s1,
|
||||
.chroma .s2 {
|
||||
color: #a5d6ff;
|
||||
}
|
||||
.chroma .sa {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .sb {
|
||||
color: #a5d6ff;
|
||||
}
|
||||
.chroma .sc {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .sd {
|
||||
color: #777e94;
|
||||
}
|
||||
.chroma .se {
|
||||
color: #7ee787;
|
||||
}
|
||||
.chroma .sh {
|
||||
color: #79c0ff;
|
||||
}
|
||||
.chroma .si {
|
||||
color: #ffaa10;
|
||||
}
|
||||
.chroma .sr {
|
||||
color: #9075cd;
|
||||
}
|
||||
.chroma .ss {
|
||||
color: #7ee787;
|
||||
}
|
||||
.chroma .sx {
|
||||
color: #ffaa10;
|
||||
}
|
||||
.chroma .vc {
|
||||
color: #7ee787;
|
||||
}
|
||||
.chroma .vg,
|
||||
.chroma .vi {
|
||||
color: #ffaa10;
|
||||
}
|
||||
.chroma .w {
|
||||
color: #7f8699;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-property,
|
||||
.CodeMirror.cm-s-paper .cm-property {
|
||||
color: #a0cc75;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-header,
|
||||
.CodeMirror.cm-s-paper .cm-header {
|
||||
color: #9daccc;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-quote,
|
||||
.CodeMirror.cm-s-paper .cm-quote {
|
||||
color: #090;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-keyword,
|
||||
.CodeMirror.cm-s-paper .cm-keyword {
|
||||
color: #cc8a61;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-atom,
|
||||
.CodeMirror.cm-s-paper .cm-atom {
|
||||
color: #ef5e77;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-number,
|
||||
.CodeMirror.cm-s-paper .cm-number {
|
||||
color: #ff5656;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-def,
|
||||
.CodeMirror.cm-s-paper .cm-def {
|
||||
color: #e4e4e4;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-variable-2,
|
||||
.CodeMirror.cm-s-paper .cm-variable-2 {
|
||||
color: #00bdbf;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-variable-3,
|
||||
.CodeMirror.cm-s-paper .cm-variable-3 {
|
||||
color: #085;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-comment,
|
||||
.CodeMirror.cm-s-paper .cm-comment {
|
||||
color: #8e9ab3;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-string,
|
||||
.CodeMirror.cm-s-paper .cm-string {
|
||||
color: #a77272;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-string-2,
|
||||
.CodeMirror.cm-s-paper .cm-string-2 {
|
||||
color: #f50;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-meta,
|
||||
.CodeMirror.cm-s-paper .cm-meta,
|
||||
.CodeMirror.cm-s-default .cm-qualifier,
|
||||
.CodeMirror.cm-s-paper .cm-qualifier {
|
||||
color: #ffb176;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-builtin,
|
||||
.CodeMirror.cm-s-paper .cm-builtin {
|
||||
color: #b7c951;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-bracket,
|
||||
.CodeMirror.cm-s-paper .cm-bracket {
|
||||
color: #997;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-tag,
|
||||
.CodeMirror.cm-s-paper .cm-tag {
|
||||
color: #f1d273;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-attribute,
|
||||
.CodeMirror.cm-s-paper .cm-attribute {
|
||||
color: #bfcc70;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-hr,
|
||||
.CodeMirror.cm-s-paper .cm-hr {
|
||||
color: #999;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-url,
|
||||
.CodeMirror.cm-s-paper .cm-url {
|
||||
color: #c5cfd0;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-link,
|
||||
.CodeMirror.cm-s-paper .cm-link {
|
||||
color: #d8c792;
|
||||
}
|
||||
.CodeMirror.cm-s-default .cm-error,
|
||||
.CodeMirror.cm-s-paper .cm-error {
|
||||
color: #dbdbeb;
|
||||
}
|
||||
:root {
|
||||
--is-dark-theme: true;
|
||||
--color-primary: #4b80ca;
|
||||
--color-primary-contrast: #fff;
|
||||
--color-primary-dark-1: #739cb3;
|
||||
--color-primary-dark-2: #40aaff;
|
||||
--color-primary-dark-3: #92b4c4;
|
||||
--color-primary-dark-4: #a1bbcd;
|
||||
--color-primary-dark-5: #cfddc1;
|
||||
--color-primary-dark-6: #e7eee0;
|
||||
--color-primary-dark-7: #f8faf6;
|
||||
--color-primary-light-1: #4b80ca;
|
||||
--color-primary-light-2: #437aad;
|
||||
--color-primary-light-3: #415b8b;
|
||||
--color-primary-light-4: #25425a;
|
||||
--color-primary-light-5: #223546;
|
||||
--color-primary-light-6: #131923;
|
||||
--color-primary-light-7: #06090b;
|
||||
--color-primary-alpha-10: #3683c019;
|
||||
--color-primary-alpha-20: #3683c033;
|
||||
--color-primary-alpha-30: #3683c04b;
|
||||
--color-primary-alpha-40: #3683c066;
|
||||
--color-primary-alpha-50: #3683c080;
|
||||
--color-primary-alpha-60: #3683c099;
|
||||
--color-primary-alpha-70: #3683c0b3;
|
||||
--color-primary-alpha-80: #3683c0cc;
|
||||
--color-primary-alpha-90: #3683c0e1;
|
||||
--color-primary-hover: var(--color-primary-light-1);
|
||||
--color-primary-active: var(--color-primary-light-2);
|
||||
--color-secondary: #2c2f35;
|
||||
--color-secondary-dark-1: #505665;
|
||||
--color-secondary-dark-2: #5b6273;
|
||||
--color-secondary-dark-3: #71798e;
|
||||
--color-secondary-dark-4: #7f8699;
|
||||
--color-secondary-dark-5: #8c93a4;
|
||||
--color-secondary-dark-6: #9aa0af;
|
||||
--color-secondary-dark-7: #a8adba;
|
||||
--color-secondary-dark-8: #c4c7d0;
|
||||
--color-secondary-dark-9: #dfe1e6;
|
||||
--color-secondary-dark-10: #edeef1;
|
||||
--color-secondary-dark-11: #fbfbfc;
|
||||
--color-secondary-dark-12: #eeeff2;
|
||||
--color-secondary-dark-13: #fbfbfc;
|
||||
--color-secondary-light-1: #373b46;
|
||||
--color-secondary-light-2: #292c34;
|
||||
--color-secondary-light-3: #1c1e23;
|
||||
--color-secondary-light-4: #0e0f11;
|
||||
--color-secondary-alpha-10: #2c2f35;
|
||||
--color-secondary-alpha-20: #2c2f3533;
|
||||
--color-secondary-alpha-30: #2c2f354b;
|
||||
--color-secondary-alpha-40: #2c2f3566;
|
||||
--color-secondary-alpha-50: #2c2f3580;
|
||||
--color-secondary-alpha-60: #2c2f3599;
|
||||
--color-secondary-alpha-70: #2c2f35b3;
|
||||
--color-secondary-alpha-80: #2c2f35cc;
|
||||
--color-secondary-alpha-90: #2c2f35e1;
|
||||
--color-red: #da3737;
|
||||
--color-orange: #f17a2b;
|
||||
--color-yellow: #f3c640;
|
||||
--color-olive: #c8df36;
|
||||
--color-green: #3bc75b;
|
||||
--color-teal: #69d4cf;
|
||||
--color-blue: #4b80ca;
|
||||
--color-violet: #754ad3;
|
||||
--color-purple: #b65dd4;
|
||||
--color-pink: #e04b9f;
|
||||
--color-brown: #a86d45;
|
||||
--color-black: #141516;
|
||||
--color-grey: #797c85;
|
||||
--color-gold: #d4b74c;
|
||||
--color-white: #ffffff;
|
||||
--color-red-light: #d15a5a;
|
||||
--color-orange-light: #f6a066;
|
||||
--color-yellow-light: #eaaf03;
|
||||
--color-olive-light: #abc016;
|
||||
--color-green-light: #93b373;
|
||||
--color-teal-light: #00b6ad;
|
||||
--color-blue-light: #4e96cc;
|
||||
--color-violet-light: #9b79e4;
|
||||
--color-purple-light: #ba6ad5;
|
||||
--color-pink-light: #d74397;
|
||||
--color-brown-light: #b08061;
|
||||
--color-black-light: #3f4555;
|
||||
--color-red-dark-1: #c23636;
|
||||
--color-orange-dark-1: #f38236;
|
||||
--color-yellow-dark-1: #b88a03;
|
||||
--color-olive-dark-1: #839311;
|
||||
--color-green-dark-1: #7a9e55;
|
||||
--color-teal-dark-1: #00837c;
|
||||
--color-blue-dark-1: #347cb3;
|
||||
--color-violet-dark-1: #7b4edb;
|
||||
--color-purple-dark-1: #a742c9;
|
||||
--color-pink-dark-1: #be297d;
|
||||
--color-brown-dark-1: #94674a;
|
||||
--color-black-dark-1: #292d38;
|
||||
--color-red-dark-2: #ad3030;
|
||||
--color-orange-dark-2: #f16e17;
|
||||
--color-yellow-dark-2: #a37a02;
|
||||
--color-olive-dark-2: #74820f;
|
||||
--color-green-dark-2: #6c8c4c;
|
||||
--color-teal-dark-2: #00746e;
|
||||
--color-blue-dark-2: #2e6e9f;
|
||||
--color-violet-dark-2: #6733d6;
|
||||
--color-purple-dark-2: #9834b9;
|
||||
--color-pink-dark-2: #a9246f;
|
||||
--color-brown-dark-2: #835b42;
|
||||
--color-black-dark-2: #252832;
|
||||
--color-console-bg: #11171f;
|
||||
--color-ansi-black: var(--color-black);
|
||||
--color-ansi-red: var(--color-red);
|
||||
--color-ansi-green: var(--color-green);
|
||||
--color-ansi-yellow: var(--color-yellow);
|
||||
--color-ansi-blue: var(--color-blue);
|
||||
--color-ansi-magenta: var(--color-pink);
|
||||
--color-ansi-cyan: var(--color-teal);
|
||||
--color-ansi-white: var(--color-console-fg-subtle);
|
||||
--color-ansi-bright-black: var(--color-black-light);
|
||||
--color-ansi-bright-red: var(--color-red-light);
|
||||
--color-ansi-bright-green: var(--color-green-light);
|
||||
--color-ansi-bright-yellow: var(--color-yellow-light);
|
||||
--color-ansi-bright-blue: var(--color-blue-light);
|
||||
--color-ansi-bright-magenta: var(--color-pink-light);
|
||||
--color-ansi-bright-cyan: var(--color-teal-light);
|
||||
--color-ansi-bright-white: var(--color-console-fg);
|
||||
--color-grey: #505665;
|
||||
--color-grey-light: #a1a6b7;
|
||||
--color-gold: #b1983b;
|
||||
--color-white: #fff;
|
||||
--color-diff-removed-word-bg: #6f3333;
|
||||
--color-diff-added-word-bg: #3c653c;
|
||||
--color-diff-removed-row-bg: #3c2626;
|
||||
--color-diff-moved-row-bg: #818044;
|
||||
--color-diff-added-row-bg: #283e2d;
|
||||
--color-diff-removed-row-border: #634343;
|
||||
--color-diff-moved-row-border: #bcca6f;
|
||||
--color-diff-added-row-border: #314a37;
|
||||
--color-diff-inactive: #353846;
|
||||
--color-error-border: #a04141;
|
||||
--color-error-bg: #522;
|
||||
--color-error-bg-active: #744;
|
||||
--color-error-bg-hover: #633;
|
||||
--color-error-text: #f9cbcb;
|
||||
--color-success-border: #458a57;
|
||||
--color-success-bg: #284034;
|
||||
--color-success-text: #6cc664;
|
||||
--color-warning-border: #bb9d00;
|
||||
--color-warning-bg: #3a3a30;
|
||||
--color-warning-text: #fbbd08;
|
||||
--color-info-border: #306090;
|
||||
--color-info-bg: #26354c;
|
||||
--color-info-text: #38a8e8;
|
||||
--color-red-badge: #db2828;
|
||||
--color-red-badge-bg: #db28281a;
|
||||
--color-red-badge-hover-bg: #db28284d;
|
||||
--color-green-badge: #21ba45;
|
||||
--color-green-badge-bg: #21ba451a;
|
||||
--color-green-badge-hover-bg: #21ba454d;
|
||||
--color-yellow-badge: #fbbd08;
|
||||
--color-yellow-badge-bg: #fbbd081a;
|
||||
--color-yellow-badge-hover-bg: #fbbd084d;
|
||||
--color-orange-badge: #f2711c;
|
||||
--color-orange-badge-bg: #f2711c1a;
|
||||
--color-orange-badge-hover-bg: #f2711c4d;
|
||||
--color-git: #f05133;
|
||||
--color-body: #0d1117;
|
||||
--color-box-header: #161b22;
|
||||
--color-box-body: #11171f;
|
||||
--color-box-body-highlight: #262b36;
|
||||
--color-text-dark: #dbe0ea;
|
||||
--color-text: #bbc0ca;
|
||||
--color-text-light: #a6aab5;
|
||||
--color-text-light-1: rgb(125, 133, 144);
|
||||
--color-text-light-2: #8a8e99;
|
||||
--color-text-light-3: #707687;
|
||||
--color-footer: #010409;
|
||||
--color-timeline: #4c525e;
|
||||
--color-input-text: #d5dbe6;
|
||||
--color-input-background: #2c2f35;
|
||||
--color-input-toggle-background: #454a57;
|
||||
--color-input-border: #2c2f35;
|
||||
--color-input-border-hover: #505667;
|
||||
--color-header-wrapper: #0d1117;
|
||||
--color-header-wrapper-transparent: #20243000;
|
||||
--color-light: #00000028;
|
||||
--color-light-mimic-enabled: rgba(
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
calc(40 / 255 * 222 / 255 / var(--opacity-disabled))
|
||||
);
|
||||
--color-light-border: #ffffff28;
|
||||
--color-hover: #ffffff19;
|
||||
--color-active: #ffffff24;
|
||||
--color-menu: #0d1117;
|
||||
--color-card: #0d1117;
|
||||
--color-markup-table-row: #ffffff06;
|
||||
--color-markup-code-block: #ffffff16;
|
||||
--color-button: #1e252e;
|
||||
--color-code-bg: #0d1117;
|
||||
--color-code-sidebar-bg: #232834;
|
||||
--color-shadow: #00000060;
|
||||
--color-secondary-bg: #2c2f35;
|
||||
--color-text-focus: #fff;
|
||||
--color-expand-button: #3c404d;
|
||||
--color-placeholder-text: #8a8e99;
|
||||
--color-editor-line-highlight: var(--color-primary-light-5);
|
||||
--color-project-board-bg: var(--color-secondary-light-2);
|
||||
--color-caret: var(--color-text);
|
||||
--color-reaction-bg: #ffffff12;
|
||||
--color-reaction-hover-bg: var(--color-primary-light-4);
|
||||
--color-reaction-active-bg: var(--color-primary-light-5);
|
||||
--color-tooltip-text: #fff;
|
||||
--color-tooltip-bg: #000000f0;
|
||||
--color-nav-bg: #010409;
|
||||
--color-nav-hover-bg: #383c47;
|
||||
--color-label-text: #dfe3ec;
|
||||
--color-label-bg: #7c84974b;
|
||||
--color-label-hover-bg: #7c8497a0;
|
||||
--color-label-active-bg: #7c8497;
|
||||
--color-accent: var(--color-primary-light-1);
|
||||
--color-small-accent: var(--color-primary-light-5);
|
||||
--color-active-line: #534d1b;
|
||||
accent-color: var(--color-accent);
|
||||
color-scheme: dark;
|
||||
}
|
||||
.emoji[aria-label="check\ mark"],
|
||||
.emoji[aria-label="currency\ exchange"],
|
||||
.emoji[aria-label="TOP\ arrow"],
|
||||
.emoji[aria-label="END\ arrow"],
|
||||
.emoji[aria-label="ON! arrow"],
|
||||
.emoji[aria-label="SOON\ arrow"],
|
||||
.emoji[aria-label="heavy dollar sign"],
|
||||
.emoji[aria-label="copyright"],
|
||||
.emoji[aria-label="registered"],
|
||||
.emoji[aria-label="trade\ mark"],
|
||||
.emoji[aria-label="multiply"],
|
||||
.emoji[aria-label="plus"],
|
||||
.emoji[aria-label="minus"],
|
||||
.emoji[aria-label="divide"],
|
||||
.emoji[aria-label="curly\ loop"],
|
||||
.emoji[aria-label="double curly loop"],
|
||||
.emoji[aria-label="wavy\ dash"],
|
||||
.emoji[aria-label="paw\ prints"],
|
||||
.emoji[aria-label="musical\ note"],
|
||||
.emoji[aria-label="musical\ notes"] {
|
||||
filter: invert() hue-rotate(180deg);
|
||||
}
|
||||
|
||||
.repository.file.list #repo-files-table tbody .svg.octicon-file-directory-fill,
|
||||
.repository.file.list #repo-files-table tbody .svg.octicon-file-submodule {
|
||||
color: #7d8590;
|
||||
}
|
||||
3
files/gitea/templates/custom/extra_links.tmpl
Normal file
3
files/gitea/templates/custom/extra_links.tmpl
Normal file
@ -0,0 +1,3 @@
|
||||
<a class="item" href="{{AppSubUrl}}/opnxng/docker-images">Docker Images</a>
|
||||
<a class="item" href="{{AppSubUrl}}/opnxng/ansible-opnxng-deploy">Ansible</a>
|
||||
<a class="item" href="{{AppSubUrl}}/opnxng/website">Website</a>
|
||||
49
files/nitter/about.html
Executable file
49
files/nitter/about.html
Executable file
@ -0,0 +1,49 @@
|
||||
<h1>About</h1>
|
||||
<p>Nitter is a free and open source alternative Twitter front-end focused on
|
||||
privacy and performance. The source is available on GitHub at
|
||||
<a href="https://github.com/zedeus/nitter">https://github.com/zedeus/nitter</a></p>
|
||||
<ul>
|
||||
<li>No JavaScript or ads</li>
|
||||
<li>All requests go through the backend, client never talks to Twitter</li>
|
||||
<li>Prevents Twitter from tracking your IP or JavaScript fingerprint</li>
|
||||
<li>Uses Twitter's unofficial API (no rate limits or developer account required)</li>
|
||||
<li>Lightweight (for <a href="/nim_lang">@nim_lang</a>, 60KB vs 784KB from twitter.com)</li>
|
||||
<li>RSS feeds</li>
|
||||
<li>Themes</li>
|
||||
<li>Mobile support (responsive design)</li>
|
||||
<li>AGPLv3 licensed, no proprietary instances permitted</li>
|
||||
</ul>
|
||||
<p>Nitter's GitHub wiki contains
|
||||
<a href="https://github.com/zedeus/nitter/wiki/Instances">instances</a> and
|
||||
<a href="https://github.com/zedeus/nitter/wiki/Extensions">browser extensions</a>
|
||||
maintained by the community.</p>
|
||||
<h2>Opnxng.com</h2>
|
||||
<p>Other services: <a href="https://about.opnxng.com/">https://about.opnxng.com/</a></p>
|
||||
<p>Donating: <a href="https://liberapay.com/Opnxng/">https://liberapay.com/Opnxng/</a><br>
|
||||
Links to donate to the developer of Nitter can be found down below.</p>
|
||||
<h2>Why use Nitter?</h2>
|
||||
<p>It's impossible to use Twitter without JavaScript enabled. For privacy-minded
|
||||
folks, preventing JavaScript analytics and IP-based tracking is important, but
|
||||
apart from using a VPN and uBlock/uMatrix, it's impossible. Despite being behind
|
||||
a VPN and using heavy-duty adblockers, you can get accurately tracked with your
|
||||
<a href="https://restoreprivacy.com/browser-fingerprinting/">browser's fingerprint</a>,
|
||||
<a href="https://noscriptfingerprint.com/">no JavaScript required</a>. This all became
|
||||
particularly important after Twitter <a href="https://www.eff.org/deeplinks/2020/04/twitter-removes-privacy-option-and-shows-why-we-need-strong-privacy-laws">removed the
|
||||
ability</a>
|
||||
for users to control whether their data gets sent to advertisers.</p>
|
||||
<p>Using an instance of Nitter (hosted on a VPS for example), you can browse
|
||||
Twitter without JavaScript while retaining your privacy. In addition to
|
||||
respecting your privacy, Nitter is on average around 15 times lighter than
|
||||
Twitter, and in most cases serves pages faster (eg. timelines load 2-4x faster).</p>
|
||||
<p>In the future a simple account system will be added that lets you follow Twitter
|
||||
users, allowing you to have a clean chronological timeline without needing a
|
||||
Twitter account.</p>
|
||||
<h2>Donating</h2>
|
||||
<p>Liberapay: <a href="https://liberapay.com/zedeus">https://liberapay.com/zedeus</a> <br />
|
||||
Patreon: <a href="https://patreon.com/nitter">https://patreon.com/nitter</a> <br />
|
||||
BTC: bc1qp7q4qz0fgfvftm5hwz3vy284nue6jedt44kxya <br />
|
||||
ETH: 0x66d84bc3fd031b62857ad18c62f1ba072b011925 <br />
|
||||
LTC: ltc1qhsz5nxw6jw9rdtw9qssjeq2h8hqk2f85rdgpkr <br />
|
||||
XMR: 42hKayRoEAw4D6G6t8mQHPJHQcXqofjFuVfavqKeNMNUZfeJLJAcNU19i1bGdDvcdN6romiSscWGWJCczFLe9RFhM3d1zpL</p>
|
||||
<h2>Contact</h2>
|
||||
<p>Feel free to join our <a href="https://matrix.to/#/#nitter:matrix.org">Matrix channel</a>.</p>
|
||||
59
files/nitter/about.md
Executable file
59
files/nitter/about.md
Executable file
@ -0,0 +1,59 @@
|
||||
# About
|
||||
|
||||
Nitter is a free and open source alternative Twitter front-end focused on
|
||||
privacy and performance. The source is available on GitHub at
|
||||
<https://github.com/zedeus/nitter>
|
||||
|
||||
* No JavaScript or ads
|
||||
* All requests go through the backend, client never talks to Twitter
|
||||
* Prevents Twitter from tracking your IP or JavaScript fingerprint
|
||||
* Uses Twitter's unofficial API (no rate limits or developer account required)
|
||||
* Lightweight (for [@nim_lang](/nim_lang), 60KB vs 784KB from twitter.com)
|
||||
* RSS feeds
|
||||
* Themes
|
||||
* Mobile support (responsive design)
|
||||
* AGPLv3 licensed, no proprietary instances permitted
|
||||
|
||||
Nitter's GitHub wiki contains
|
||||
[instances](https://github.com/zedeus/nitter/wiki/Instances) and
|
||||
[browser extensions](https://github.com/zedeus/nitter/wiki/Extensions)
|
||||
maintained by the community.
|
||||
|
||||
## Opnxng.com
|
||||
Other services: [https://about.opnxng.com/]h(ttps://about.opnxng.com)
|
||||
Donating: [https://liberapay.com/Opnxng/](https://liberapay.com/Opnxng)
|
||||
Links to donate to the developer of Nitter can be found down below.
|
||||
|
||||
## Why use Nitter?
|
||||
|
||||
It's impossible to use Twitter without JavaScript enabled. For privacy-minded
|
||||
folks, preventing JavaScript analytics and IP-based tracking is important, but
|
||||
apart from using a VPN and uBlock/uMatrix, it's impossible. Despite being behind
|
||||
a VPN and using heavy-duty adblockers, you can get accurately tracked with your
|
||||
[browser's fingerprint](https://restoreprivacy.com/browser-fingerprinting/),
|
||||
[no JavaScript required](https://noscriptfingerprint.com/). This all became
|
||||
particularly important after Twitter [removed the
|
||||
ability](https://www.eff.org/deeplinks/2020/04/twitter-removes-privacy-option-and-shows-why-we-need-strong-privacy-laws)
|
||||
for users to control whether their data gets sent to advertisers.
|
||||
|
||||
Using an instance of Nitter (hosted on a VPS for example), you can browse
|
||||
Twitter without JavaScript while retaining your privacy. In addition to
|
||||
respecting your privacy, Nitter is on average around 15 times lighter than
|
||||
Twitter, and in most cases serves pages faster (eg. timelines load 2-4x faster).
|
||||
|
||||
In the future a simple account system will be added that lets you follow Twitter
|
||||
users, allowing you to have a clean chronological timeline without needing a
|
||||
Twitter account.
|
||||
|
||||
## Donating
|
||||
|
||||
Liberapay: <https://liberapay.com/zedeus> \
|
||||
Patreon: <https://patreon.com/nitter> \
|
||||
BTC: bc1qp7q4qz0fgfvftm5hwz3vy284nue6jedt44kxya \
|
||||
ETH: 0x66d84bc3fd031b62857ad18c62f1ba072b011925 \
|
||||
LTC: ltc1qhsz5nxw6jw9rdtw9qssjeq2h8hqk2f85rdgpkr \
|
||||
XMR: 42hKayRoEAw4D6G6t8mQHPJHQcXqofjFuVfavqKeNMNUZfeJLJAcNU19i1bGdDvcdN6romiSscWGWJCczFLe9RFhM3d1zpL
|
||||
|
||||
## Contact
|
||||
|
||||
Feel free to join our [Matrix channel](https://matrix.to/#/#nitter:matrix.org).
|
||||
10
files/paulgo/donate.md
Executable file
10
files/paulgo/donate.md
Executable file
@ -0,0 +1,10 @@
|
||||
# Donate
|
||||
|
||||
[Opnxng](https://about.opnxng.com/) hosts privacy-respecting services such as [SearXNG](https://opnxng.com/), [Nitter](https://n.opnxng.com/), [Voyager](https://v.opnxng.com/), [Teddit](https://i.opnxng.com/), and [many more](https://about.opnxng.com/services).
|
||||
|
||||
Please consider donating to this site via [Liberapay](https://liberapay.com/Opnxng/). Your donation would allow us to rent more instances and run the services more reliably. We truly thank you for your consideration.
|
||||
<br>
|
||||
<br>
|
||||
## Donate to SearXNG.org
|
||||
|
||||
Support the SearXNG project via [https://docs.searxng.org/donate.html](https://docs.searxng.org/donate.html)
|
||||
30
production
Normal file
30
production
Normal file
@ -0,0 +1,30 @@
|
||||
oracle:
|
||||
hosts:
|
||||
oracle1:
|
||||
ansible_host: [REDACTED]
|
||||
oracle2:
|
||||
ansible_host: [REDACTED]
|
||||
oracle3:
|
||||
ansible_host: [REDACTED]
|
||||
oracle4:
|
||||
ansible_host: [REDACTED]
|
||||
vars:
|
||||
ansible_ssh_private_key_file: [REDACTED]
|
||||
ansible_user: [REDACTED]
|
||||
ansible_ssh_port: [REDACTED]
|
||||
pipelining: true
|
||||
ansible_ssh_common_args: "-o StrictHostKeyChecking=no"
|
||||
ansible_python_interpreter: /usr/bin/python3
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
cloudcompute:
|
||||
hosts:
|
||||
vultr:
|
||||
ansible_host: [REDACTED]
|
||||
ansible_ssh_private_key_file: [REDACTED]
|
||||
ansible_user: [REDACTED]
|
||||
ansible_ssh_port: [REDACTED]
|
||||
pipelining: true
|
||||
ansible_ssh_common_args: "-o StrictHostKeyChecking=no"
|
||||
ansible_python_interpreter: /usr/bin/python3
|
||||
6
setups/setup-anonymousoverflow.yml
Normal file
6
setups/setup-anonymousoverflow.yml
Normal file
@ -0,0 +1,6 @@
|
||||
- name: Generate JWT Secret
|
||||
command: openssl rand -hex 32
|
||||
register: anonymousoverflow_jwt_secret_result
|
||||
|
||||
- set_fact:
|
||||
anonymousoverflow_jwt_secret: "{{ anonymousoverflow_jwt_secret_result.stdout }}"
|
||||
29
setups/setup-authelia.yml
Normal file
29
setups/setup-authelia.yml
Normal file
@ -0,0 +1,29 @@
|
||||
- name: Generate JWT Secret
|
||||
command: openssl rand -hex 64
|
||||
register: authelia_jwt_secret_result
|
||||
|
||||
- set_fact:
|
||||
authelia_jwt_secret: "{{ authelia_jwt_secret_result.stdout }}"
|
||||
|
||||
- name: Generate Session Secret
|
||||
command: openssl rand -hex 64
|
||||
register: authelia_session_secret_result
|
||||
|
||||
- set_fact:
|
||||
authelia_session_secret: "{{ authelia_session_secret_result.stdout }}"
|
||||
|
||||
- name: Set up configuration.yml
|
||||
template:
|
||||
src: "conf/configuration.yml.j2"
|
||||
dest: "{{ docker_dir }}/authelia/configuration.yml"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
|
||||
- name: Set up users_database.yml
|
||||
template:
|
||||
src: "conf/users_database.yml.j2"
|
||||
dest: "{{ docker_dir }}/authelia/users_database.yml"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
7
setups/setup-breezewiki.yml
Normal file
7
setups/setup-breezewiki.yml
Normal file
@ -0,0 +1,7 @@
|
||||
- name: Setup breezewiki config
|
||||
template:
|
||||
src: "conf/config.ini.j2"
|
||||
dest: "{{ docker_dir }}/breezewiki/config.ini.j2"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
21
setups/setup-caddy.yml
Normal file
21
setups/setup-caddy.yml
Normal file
@ -0,0 +1,21 @@
|
||||
- name: Check GeoLite2 file
|
||||
stat:
|
||||
path: "{{ docker_dir }}/caddy/GeoLite2-City.mmdb"
|
||||
register: geolite
|
||||
tags: never
|
||||
|
||||
- name: Create GeoLite2 file
|
||||
command: "touch {{ docker_dir }}/caddy/GeoLite2-City.mmdb"
|
||||
when:
|
||||
- not geolite.stat.exists
|
||||
tags: never
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
- name: Set up Caddyfile
|
||||
template:
|
||||
src: "conf/Caddyfile.j2"
|
||||
dest: "{{ docker_dir }}/caddy/Caddyfile"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
7
setups/setup-firefox.yml
Executable file
7
setups/setup-firefox.yml
Executable file
@ -0,0 +1,7 @@
|
||||
- name: Copy firefox directory
|
||||
copy:
|
||||
src: "firefox/"
|
||||
dest: "{{ docker_dir }}/firefox"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
11
setups/setup-gitea.yml
Normal file
11
setups/setup-gitea.yml
Normal file
@ -0,0 +1,11 @@
|
||||
- name: Copy gitea directory
|
||||
copy:
|
||||
src: "gitea/"
|
||||
dest: "{{ docker_dir }}/gitea/data/gitea"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
|
||||
- name: Curl Github theme
|
||||
shell: curl -s 'https://raw.githubusercontent.com/Rainnny7/gitea-github-theme/master/theme-github.css' > {{ docker_dir }}/gitea/data/gitea/public/assets/css/theme-github.css
|
||||
ignore_errors: true
|
||||
40
setups/setup-nitter.yml
Normal file
40
setups/setup-nitter.yml
Normal file
@ -0,0 +1,40 @@
|
||||
- name: Generate JWT Secret
|
||||
command: openssl rand -hex 32
|
||||
register: nitter_jwt_secret_result
|
||||
|
||||
- set_fact:
|
||||
nitter_jwt_secret: "{{ nitter_jwt_secret_result.stdout }}"
|
||||
|
||||
- name: Set up nitter conf
|
||||
template:
|
||||
src: "conf/nitter.conf.j2"
|
||||
dest: "{{ docker_dir }}/nitter/nitter.conf"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
|
||||
- name: Copy about.md
|
||||
copy:
|
||||
src: "nitter/about.md"
|
||||
dest: "{{ docker_dir }}/nitter/about.md"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
|
||||
- name: Copy about.html
|
||||
copy:
|
||||
src: "nitter/about.html"
|
||||
dest: "{{ docker_dir }}/nitter/about.html"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
|
||||
- name: Curl guest_accounts.jsonl
|
||||
shell: curl -s '{{ twitterminator_url }}' > {{ docker_dir }}/nitter/guest_accounts.jsonl
|
||||
ignore_errors: true
|
||||
|
||||
- name: Chmod guest_accounts.jsonl
|
||||
command: chmod 0777 {{ docker_dir }}/nitter/guest_accounts.jsonl
|
||||
|
||||
- name: Chown guest_accounts.jsonl
|
||||
command: chown 1000:1000 {{ docker_dir }}/nitter/guest_accounts.jsonl
|
||||
22
setups/setup-paulgo.yml
Normal file
22
setups/setup-paulgo.yml
Normal file
@ -0,0 +1,22 @@
|
||||
- name: Generate JWT Secret
|
||||
command: openssl rand -hex 32
|
||||
register: paulgo_jwt_secret_result
|
||||
|
||||
- set_fact:
|
||||
paulgo_jwt_secret: "{{ paulgo_jwt_secret_result.stdout }}"
|
||||
|
||||
- name: Set up paulgo conf
|
||||
template:
|
||||
src: "conf/settings.yml.j2"
|
||||
dest: "{{ docker_dir }}/paulgo/settings.yml"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
|
||||
- name: Copy donate.md
|
||||
copy:
|
||||
src: "paulgo/donate.md"
|
||||
dest: "{{ docker_dir }}/paulgo/donate.md"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
7
setups/setup-runner.yml
Normal file
7
setups/setup-runner.yml
Normal file
@ -0,0 +1,7 @@
|
||||
- name: Setup runner.j2
|
||||
template:
|
||||
src: "conf/runner.j2"
|
||||
dest: "{{ docker_dir }}/runner/.runner"
|
||||
owner: 1000
|
||||
group: 1000
|
||||
mode: 0755
|
||||
6
setups/setup-scribe.yml
Normal file
6
setups/setup-scribe.yml
Normal file
@ -0,0 +1,6 @@
|
||||
- name: Generate JWT Secret
|
||||
command: openssl rand -hex 32
|
||||
register: scribe_jwt_secret_result
|
||||
|
||||
- set_fact:
|
||||
scribe_jwt_secret: "{{ scribe_jwt_secret_result.stdout }}"
|
||||
26
templates/compose/4get.yaml.j2
Normal file
26
templates/compose/4get.yaml.j2
Normal file
@ -0,0 +1,26 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
4get:
|
||||
image: git.opnxng.com/opnxng/4get:latest
|
||||
container_name: 4get
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
cap_drop:
|
||||
- ALL
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- FOURGET_SERVER_NAME=4g.opnxng.com
|
||||
- FOURGET_SERVER_ADMIN_EMAIL=opnxng@tuta.io
|
||||
#restart: unless-stopped
|
||||
ports:
|
||||
- '8907:80'
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
26
templates/compose/anonymousoverflow.yaml.j2
Normal file
26
templates/compose/anonymousoverflow.yaml.j2
Normal file
@ -0,0 +1,26 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
anonymousoverflow:
|
||||
image: codeberg.org/aryak/anonymousoverflow-docker-builds
|
||||
container_name: anonymousoverflow
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
cap_drop:
|
||||
- ALL
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- APP_URL=https://a.opnxng.com
|
||||
- JWT_SIGNING_SECRET="{{ anonymousoverflow_jwt_secret }}"
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8898:8080'
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
24
templates/compose/authelia.yaml.j2
Normal file
24
templates/compose/authelia.yaml.j2
Normal file
@ -0,0 +1,24 @@
|
||||
# {{ ansible_managed }}
|
||||
version: "3.3"
|
||||
services:
|
||||
authelia:
|
||||
image: ghcr.io/authelia/authelia
|
||||
container_name: authelia
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
ports:
|
||||
- 9091:9091
|
||||
volumes:
|
||||
- {{ docker_dir }}/authelia:/config
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
22
templates/compose/binternet.yaml.j2
Normal file
22
templates/compose/binternet.yaml.j2
Normal file
@ -0,0 +1,22 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
binternet:
|
||||
image: git.opnxng.com/opnxng/binternet:latest
|
||||
container_name: binternet
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8896:80'
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
24
templates/compose/breezewiki.yaml.j2
Normal file
24
templates/compose/breezewiki.yaml.j2
Normal file
@ -0,0 +1,24 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
breezewiki:
|
||||
image: quay.io/pussthecatorg/breezewiki:latest
|
||||
container_name: breezewiki
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8897:10416'
|
||||
volumes:
|
||||
- {{ docker_dir }}/breezewiki/config.ini:/app/config.ini
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
30
templates/compose/caddy.yaml.j2
Normal file
30
templates/compose/caddy.yaml.j2
Normal file
@ -0,0 +1,30 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
caddy:
|
||||
image: git.opnxng.com/opnxng/caddy:latest
|
||||
container_name: caddy
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
cap_drop:
|
||||
- ALL
|
||||
cap_add:
|
||||
- NET_BIND_SERVICE
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- HOSTNAME=opnxng.com
|
||||
- CLOUDFLARE_API_TOKEN={{ cloudflare_api_token }}
|
||||
volumes:
|
||||
- {{ docker_dir }}/caddy/GeoLite2-City.mmdb:/etc/caddy/GeoLite2-City.mmdb
|
||||
- {{ docker_dir }}/caddy/Caddyfile:/etc/caddy/Caddyfile
|
||||
- {{ docker_dir }}/caddy/caddy-data:/data:rw
|
||||
- {{ docker_dir }}/caddy/caddy-config:/config:rw
|
||||
- {{ docker_dir }}/caddy/www:/www:rw
|
||||
logging:
|
||||
driver: none
|
||||
restart: unless-stopped
|
||||
network_mode: host
|
||||
|
||||
# docker run -v ./Caddyfile:/srv/Caddyfile:rw git.opnxng.com/opnxng/caddy:latest caddy fmt --overwrite Caddyfile
|
||||
22
templates/compose/cinny.yaml.j2
Normal file
22
templates/compose/cinny.yaml.j2
Normal file
@ -0,0 +1,22 @@
|
||||
# {{ ansible_managed }}
|
||||
version: "3.7"
|
||||
services:
|
||||
cinny:
|
||||
image: ghcr.io/cinnyapp/cinny:latest
|
||||
container_name: cinny
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
ports:
|
||||
- 8901:80
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
68
templates/compose/etherpad.yaml.j2
Normal file
68
templates/compose/etherpad.yaml.j2
Normal file
@ -0,0 +1,68 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3'
|
||||
services:
|
||||
etherpad:
|
||||
image: git.opnxng.com/opnxng/etherpad:latest
|
||||
container_name: etherpad
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
depends_on:
|
||||
- etherpaddb
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- DB_TYPE=postgres
|
||||
- DB_HOST=etherpaddb
|
||||
- DB_PORT=5432
|
||||
- DB_NAME=etherpad
|
||||
- DB_USER={{ etherpad_db_user }}
|
||||
- DB_PASS={{ etherpad_db_pass }}
|
||||
# - ADMIN_PASSWORD={{ etherpad_admin_password }}
|
||||
- TITLE=Notes
|
||||
- SKIN_VARIANTS="super-light-toolbar super-light-editor light-background"
|
||||
- DEFAULT_PAD_TEXT=Text
|
||||
- PAD_OPTIONS_NO_COLORS=true
|
||||
- PAD_OPTIONS_SHOW_CONTROLS=true
|
||||
- PAD_OPTIONS_SHOW_CHAT=false
|
||||
- PAD_OPTIONS_SHOW_LINE_NUMBERS=false
|
||||
- PAD_OPTIONS_USE_MONOSPACE_FONT=false
|
||||
- PAD_OPTIONS_USER_NAME=false
|
||||
- PAD_OPTIONS_USER_COLOR=false
|
||||
- SOCKETIO_MAX_HTTP_BUFFER_SIZE=1000000000
|
||||
- MAX_AGE=99999999
|
||||
- MINIFY=false
|
||||
- PAD_OPTIONS_ALWAYS_SHOW_CHAT=false
|
||||
- PAD_OPTIONS_CHAT_AND_USERS=false
|
||||
# - PAD_OPTIONS_RTL=false
|
||||
# - PAD_OPTIONS_LANG=null
|
||||
ports:
|
||||
- 8891:9001
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
etherpaddb:
|
||||
image: postgres:16-alpine
|
||||
container_name: etherpaddb
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- POSTGRES_DB=etherpad
|
||||
- POSTGRES_USER={{ etherpad_db_user }}
|
||||
- POSTGRES_PASSWORD={{ etherpad_db_pass }}
|
||||
volumes:
|
||||
- {{ docker_dir }}/etherpad/postgres:/var/lib/postgresql/data
|
||||
- {{ docker_dir }}/etherpad/backups:/backups
|
||||
- {{ docker_dir }}/etherpad/dump:/dump
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
38
templates/compose/firefox.yaml.j2
Normal file
38
templates/compose/firefox.yaml.j2
Normal file
@ -0,0 +1,38 @@
|
||||
# {{ ansible_managed }}
|
||||
version: "3.8"
|
||||
services:
|
||||
firefox:
|
||||
image: lscr.io/linuxserver/firefox:latest
|
||||
container_name: firefox
|
||||
security_opt:
|
||||
- seccomp:unconfined #optional
|
||||
#- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- TITLE=GPT
|
||||
- CUSTOM_PORT=8893
|
||||
volumes:
|
||||
- {{ docker_dir }}/firefox:/config:rw
|
||||
- {{ docker_dir }}/firefox/start.sh:/custom-cont-init.d/start.sh
|
||||
- {{ docker_dir }}/firefox/fly:/config/.fly
|
||||
- {{ docker_dir }}/firefox/profile:/config/.mozilla/firefox
|
||||
- {{ docker_dir }}/firefox/index.html:/usr/share/kasmvnc/www/index.html
|
||||
- {{ docker_dir }}/firefox/vnc.html:/usr/share/kasmvnc/www/vnc.html
|
||||
- {{ docker_dir }}/firefox/style.bundle.css:/usr/share/kasmvnc/www/dist/style.bundle.css
|
||||
# devices:
|
||||
# - /dev/dri:/dev/dri
|
||||
ports:
|
||||
- '8893:8893'
|
||||
shm_size: "2gb"
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
|
||||
|
||||
25
templates/compose/geoipupdate.yaml.j2
Normal file
25
templates/compose/geoipupdate.yaml.j2
Normal file
@ -0,0 +1,25 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
geoipupdate:
|
||||
container_name: geoipupdate
|
||||
image: ghcr.io/maxmind/geoipupdate
|
||||
restart: unless-stopped
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- GEOIPUPDATE_ACCOUNT_ID={{ geoipupdate_account_id }}
|
||||
- GEOIPUPDATE_LICENSE_KEY={{ geoipupdate_license_key }}
|
||||
- GEOIPUPDATE_EDITION_IDS=GeoLite2-City
|
||||
- GEOIPUPDATE_FREQUENCY=72
|
||||
volumes:
|
||||
- {{ docker_dir }}/caddy/:/usr/share/GeoIP/
|
||||
networks:
|
||||
- IPv4
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
31
templates/compose/gitea.yaml.j2
Normal file
31
templates/compose/gitea.yaml.j2
Normal file
@ -0,0 +1,31 @@
|
||||
# {{ ansible_managed }}
|
||||
version: "3"
|
||||
services:
|
||||
gitea:
|
||||
# image: gitea/gitea:latest
|
||||
image: gitea/gitea:nightly
|
||||
container_name: gitea
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
# - TZ=Asia/Singapore
|
||||
- USER_UID=1000
|
||||
- USER_GID=1000
|
||||
- ROOT_URL=https://git.opnxng.com
|
||||
volumes:
|
||||
- {{ docker_dir }}/gitea/data:/data
|
||||
- {{ docker_dir }}/gitea/packages:/packages
|
||||
- /etc/timezone:/etc/timezone:ro
|
||||
- /etc/localtime:/etc/localtime:ro
|
||||
restart: always
|
||||
ports:
|
||||
- "3000:3000"
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
38
templates/compose/gothub.yaml.j2
Normal file
38
templates/compose/gothub.yaml.j2
Normal file
@ -0,0 +1,38 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
gothub:
|
||||
image: codeberg.org/gothub/gothub:latest
|
||||
container_name: gothub
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- DOCKER=true
|
||||
- GOTHUB_SETUP_COMPLETE=true
|
||||
- GOTHUB_PROXYING_ENABLED=false
|
||||
- GOTHUB_IP_LOGGED=false
|
||||
- GOTHUB_REQUEST_URL_LOGGED=false
|
||||
- GOTHUB_USER_AGENT_LOGGED=false
|
||||
- GOTHUB_DIAGNOSTIC_INFO_LOGGED=false
|
||||
- GOTHUB_INSTANCE_PRIVACY_POLICY=https://about.opnxng.com/privacy/
|
||||
- GOTHUB_INSTANCE_COUNTRY=Singapore
|
||||
- GOTHUB_INSTANCE_PROVIDER=Oracle
|
||||
- GOTHUB_INSTANCE_CLOUDFLARE=false
|
||||
healthcheck:
|
||||
test: wget -nv --tries=1 --spider http://127.0.0.1:3000/api/v1/version || exit 1
|
||||
interval: 30s
|
||||
timeout: 5s
|
||||
retries: 2
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8900:3000'
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
23
templates/compose/imgin.yaml.j2
Normal file
23
templates/compose/imgin.yaml.j2
Normal file
@ -0,0 +1,23 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
imgin:
|
||||
image: git.opnxng.com/opnxng/imgin:latest
|
||||
container_name: imgin
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- BUILDX_GIT_INFO=false
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8899:8080'
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
22
templates/compose/it-tools.yaml.j2
Normal file
22
templates/compose/it-tools.yaml.j2
Normal file
@ -0,0 +1,22 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
it-tools:
|
||||
container_name: it-tools
|
||||
image: ghcr.io/corentinth/it-tools:latest
|
||||
restart: unless-stopped
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
ports:
|
||||
- 8892:80
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
28
templates/compose/libreddit.yaml.j2
Normal file
28
templates/compose/libreddit.yaml.j2
Normal file
@ -0,0 +1,28 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
libreddit:
|
||||
container_name: libreddit
|
||||
image: libreddit/libreddit:latest
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- LIBREDDIT_DEFAULT_THEME=black
|
||||
- LIBREDDIT_DEFAULT_SHOW_NSFW=on
|
||||
restart: unless-stopped
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--spider", "-q", "--tries=1", "http://localhost:8080/settings"]
|
||||
interval: 5m
|
||||
timeout: 3s
|
||||
ports:
|
||||
- 8882:8080
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
28
templates/compose/libredditarm.yaml.j2
Normal file
28
templates/compose/libredditarm.yaml.j2
Normal file
@ -0,0 +1,28 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
libreddit:
|
||||
container_name: libreddit
|
||||
image: libreddit/libreddit:arm
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- LIBREDDIT_DEFAULT_THEME=black
|
||||
- LIBREDDIT_DEFAULT_SHOW_NSFW=on
|
||||
restart: unless-stopped
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--spider", "-q", "--tries=1", "http://localhost:8080/settings"]
|
||||
interval: 5m
|
||||
timeout: 3s
|
||||
ports:
|
||||
- 8882:8080
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
27
templates/compose/libremdb.yaml.j2
Normal file
27
templates/compose/libremdb.yaml.j2
Normal file
@ -0,0 +1,27 @@
|
||||
# {{ ansible_managed }}
|
||||
version: "3.8"
|
||||
services:
|
||||
libremdb:
|
||||
image: quay.io/pussthecatorg/libremdb:latest
|
||||
container_name: libremdb
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- NEXT_TELEMETRY_DISABLED='1'
|
||||
- NEXT_PUBLIC_URL=http://localhost:3000
|
||||
- AXIOS_USERAGENT='Mozilla/5.0 (X11; Linux x86_64; rv:108.0) Gecko/20100101 Firefox/108.0'
|
||||
- AXIOS_ACCEPT='text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8'
|
||||
- AXIOS_LANGUAGE='en-US,en;q=0.5'
|
||||
ports:
|
||||
- 8905:3000
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
28
templates/compose/mlmym.yaml.j2
Normal file
28
templates/compose/mlmym.yaml.j2
Normal file
@ -0,0 +1,28 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
mlmym:
|
||||
image: ghcr.io/rystaf/mlmym:latest
|
||||
container_name: mlmym
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- DARK=true
|
||||
#- LEMMY_DOMAIN=lemm.ee
|
||||
#- HIDE_THUMBNAILS=false
|
||||
#- LISTING=All
|
||||
#- SORT=Hot
|
||||
#- COMMENT_SORT=Hot
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8902:8080'
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
55
templates/compose/nitter.yaml.j2
Normal file
55
templates/compose/nitter.yaml.j2
Normal file
@ -0,0 +1,55 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
nitter:
|
||||
image: git.opnxng.com/opnxng/nitter:latest
|
||||
container_name: nitter
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
ports:
|
||||
- 8883:8080
|
||||
volumes:
|
||||
- {{ docker_dir }}/nitter/nitter.conf:/src/nitter.conf:ro
|
||||
- {{ docker_dir }}/nitter/about.html:/src/public/md/about.html:ro
|
||||
- {{ docker_dir }}/nitter/about.md:/src/public/md/about.md:ro
|
||||
- {{ docker_dir }}/nitter/guest_accounts.jsonl:/src/guest_accounts.jsonl
|
||||
depends_on:
|
||||
- nitter-redis
|
||||
restart: unless-stopped
|
||||
healthcheck:
|
||||
test: wget -nv --tries=1 --spider http://127.0.0.1:8080/Jack/status/20 || exit 1
|
||||
interval: 30s
|
||||
timeout: 5s
|
||||
retries: 2
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
nitter-redis:
|
||||
image: redis:alpine
|
||||
container_name: nitter-redis
|
||||
command: redis-server --save 60 1 --loglevel warning
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
volumes:
|
||||
- {{ docker_dir }}/nitter/nitter-redis:/data
|
||||
restart: unless-stopped
|
||||
healthcheck:
|
||||
test: redis-cli ping
|
||||
interval: 30s
|
||||
timeout: 5s
|
||||
retries: 2
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
43
templates/compose/ntfy.yaml.j2
Normal file
43
templates/compose/ntfy.yaml.j2
Normal file
@ -0,0 +1,43 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
ntfy:
|
||||
image: binwiederhier/ntfy:latest
|
||||
container_name: ntfy
|
||||
command:
|
||||
- serve
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
#user: UID:GID # optional: replace with your own user/group or uid/gid
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- NTFY_BASE_URL=https://nt.opnxng.com
|
||||
- NTFY_AUTH_DEFAULT_ACCESS=deny-all
|
||||
- NTFY_CACHE_DURATION=72h
|
||||
- NTFY_AUTH_FILE=/var/lib/ntfy/user.db
|
||||
- NTFY_CACHE_FILE=/var/cache/ntfy/cache.db
|
||||
volumes:
|
||||
- {{ docker_dir }}/ntfy/cache.db:/var/cache/ntfy/cache.db
|
||||
- {{ docker_dir }}/ntfy/user.db:/var/lib/ntfy/user.db
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8911:80'
|
||||
healthcheck: # optional: remember to adapt the host:port to your environment
|
||||
test: ["CMD-SHELL", "wget -q --tries=1 http://localhost:80/v1/health -O - | grep -Eo '\"healthy\"\\s*:\\s*true' || exit 1"]
|
||||
interval: 60s
|
||||
timeout: 10s
|
||||
retries: 3
|
||||
start_period: 40s
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
|
||||
# touch {{ docker_dir }}/ntfy/cache.db && touch {{ docker_dir }}/ntfy/user.db
|
||||
# docker exec -it ntfy ntfy user add --role=admin opnxng
|
||||
# docker exec -it ntfy ntfy token add opnxng
|
||||
61
templates/compose/paulgo.yaml.j2
Normal file
61
templates/compose/paulgo.yaml.j2
Normal file
@ -0,0 +1,61 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
|
||||
searxng:
|
||||
image: git.opnxng.com/opnxng/searxng
|
||||
restart: always
|
||||
container_name: searxng
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
cap_drop:
|
||||
- ALL
|
||||
cap_add:
|
||||
- CHOWN
|
||||
- SETGID
|
||||
- SETUID
|
||||
logging:
|
||||
driver: "json-file"
|
||||
options:
|
||||
max-size: "1m"
|
||||
max-file: "1"
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- LIMITER=true
|
||||
- REDIS_URL=redis://localhost:6379/0
|
||||
- IMAGE_PROXY=true
|
||||
- BASE_URL=https://opnxng.com/
|
||||
- NAME=SearXNG
|
||||
- CONTACT=https://about.opnxng.com/
|
||||
- ISSUE_URL=https://github.com/searxng/searxng/issues
|
||||
- GIT_URL=https://github.com/paulgoio/searxng
|
||||
- GIT_BRANCH=main
|
||||
depends_on:
|
||||
- redis
|
||||
volumes:
|
||||
- {{ docker_dir }}/paulgo/settings.yml:/usr/local/searxng/searx/settings.yml
|
||||
- {{ docker_dir }}/paulgo/donate.md:/usr/local/searxng/searx/infopage/en/donate.md
|
||||
network_mode: host
|
||||
|
||||
redis:
|
||||
container_name: redis
|
||||
image: "redis:alpine"
|
||||
command: redis-server --save "" --appendonly "no"
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
tmpfs:
|
||||
- /var/lib/redis
|
||||
cap_drop:
|
||||
- ALL
|
||||
cap_add:
|
||||
- SETGID
|
||||
- SETUID
|
||||
- DAC_OVERRIDE
|
||||
restart: always
|
||||
network_mode: host
|
||||
27
templates/compose/photon.yaml.j2
Normal file
27
templates/compose/photon.yaml.j2
Normal file
@ -0,0 +1,27 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
photon:
|
||||
# image: ghcr.io/xyphyn/photon:latest
|
||||
image: git.opnxng.com/opnxng/photon:latest
|
||||
container_name: photon
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- PUBLIC_INSTANCE_URL=lemm.ee
|
||||
- PUBLIC_DEFAULT_FEED=All
|
||||
- PUBLIC_NSFW_BLUR=false
|
||||
- PUBLIC_LOCK_TO_INSTANCE=false
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8903:3000'
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
24
templates/compose/privatebin.yaml.j2
Normal file
24
templates/compose/privatebin.yaml.j2
Normal file
@ -0,0 +1,24 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
privatebin:
|
||||
container_name: privatebin
|
||||
image: privatebin/unit-alpine
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- TZ=Asia/Singapore
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- 8884:8080
|
||||
volumes:
|
||||
- {{ docker_dir }}/privatebin/data:/srv/data
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
|
||||
# sudo chown 65534:82 {{ docker_dir }}/privatebin/data
|
||||
53
templates/compose/proxigram.yaml.j2
Normal file
53
templates/compose/proxigram.yaml.j2
Normal file
@ -0,0 +1,53 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
proxigram:
|
||||
image: git.opnxng.com/opnxng/proxigram:latest
|
||||
container_name: proxigram
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
depends_on:
|
||||
- proxigram-redis
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- URL=https://ig.opnxng.com
|
||||
- CACHE=true
|
||||
- REDIS_URL=proxigram-redis:6379
|
||||
- EXPIRE_TIME_FOR_RSS=1d
|
||||
- EXPIRE_TIME_FOR_POST=1d
|
||||
- EXPIRE_TIME_FOR_POSTS=1d
|
||||
- EXPIRE_TIME_FOR_PROFILE=1d
|
||||
- EXPIRE_TIME_FOR_STORIES=1d
|
||||
- PROXY=true
|
||||
- FETCH_PROVIDERS=true
|
||||
- FETCH_PROVIDERS_EVERY=1d
|
||||
- PROVIDERS_LIST_URL=https://codeberg.org/ThePenguinDev/proxigram-providers/raw/branch/main/providers.json
|
||||
- USE_HEADLESS_PROVIDERS=false
|
||||
- RSS=true
|
||||
- ITEMS_PER_RSS=5
|
||||
- SLEEP_TIME_PER_REQUEST=5
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- 8908:3000
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
proxigram-redis:
|
||||
container_name: proxigram-redis
|
||||
image: redis:alpine
|
||||
command: redis-server
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- REDIS_URL=redis:6379
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
74
templates/compose/proxitok.yaml.j2
Normal file
74
templates/compose/proxitok.yaml.j2
Normal file
@ -0,0 +1,74 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
proxitok:
|
||||
image: ghcr.io/pablouser1/proxitok:latest
|
||||
container_name: proxitok
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
cap_drop:
|
||||
- ALL
|
||||
cap_add:
|
||||
- CHOWN
|
||||
- SETGID
|
||||
- SETUID
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- LATTE_CACHE=/cache
|
||||
- API_CACHE=redis
|
||||
- REDIS_HOST=proxitok-redis
|
||||
- REDIS_PORT=6379
|
||||
- API_SIGNER=remote
|
||||
- APP_URL=https://tt.opnxng.com
|
||||
- API_SIGNER_URL=http://proxitok-signer:8080/signature
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- 8909:8080
|
||||
depends_on:
|
||||
- proxitok-redis
|
||||
- signer
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
proxitok-redis:
|
||||
container_name: proxitok-redis
|
||||
image: redis:alpine
|
||||
command: redis-server --save 60 1 --loglevel warning
|
||||
user: nobody
|
||||
read_only: true
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
tmpfs:
|
||||
- /data:size=10M,mode=0770,uid=65534,gid=65534,noexec,nosuid,nodev
|
||||
cap_drop:
|
||||
- ALL
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
signer:
|
||||
container_name: proxitok-signer
|
||||
image: ghcr.io/pablouser1/signtok:master
|
||||
init: true
|
||||
user: nobody
|
||||
read_only: true
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
cap_drop:
|
||||
- ALL
|
||||
networks:
|
||||
- IPv4
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
23
templates/compose/quetre.yaml.j2
Normal file
23
templates/compose/quetre.yaml.j2
Normal file
@ -0,0 +1,23 @@
|
||||
# {{ ansible_managed }}
|
||||
version: "3.6"
|
||||
services:
|
||||
quetre:
|
||||
image: quay.io/pussthecatorg/quetre:latest
|
||||
container_name: quetre
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- NODE_ENV=production
|
||||
- PORT=3000
|
||||
ports:
|
||||
- 8904:3000
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
21
templates/compose/rat-aint-tieba.yaml.j2
Normal file
21
templates/compose/rat-aint-tieba.yaml.j2
Normal file
@ -0,0 +1,21 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
rat-aint-tieba:
|
||||
image: git.opnxng.com/opnxng/rat-aint-tieba:latest
|
||||
container_name: rat-aint-tieba
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8910:8886'
|
||||
networks:
|
||||
- IPv4
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
29
templates/compose/runner.yaml.j2
Executable file
29
templates/compose/runner.yaml.j2
Executable file
@ -0,0 +1,29 @@
|
||||
# {{ ansible_managed }}
|
||||
version: "3"
|
||||
services:
|
||||
runner:
|
||||
image: gitea/act_runner:latest
|
||||
# image: gitea/act_runner:latest-dind-rootless
|
||||
container_name: runner
|
||||
restart: always
|
||||
privileged: true
|
||||
volumes:
|
||||
- {{ docker_dir }}/runner:/data
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
# security_opt:
|
||||
# - no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
# - DOCKER_HOST={{ docker_host }}
|
||||
- GITEA_INSTANCE_URL=https://git.opnxng.com
|
||||
- GITEA_RUNNER_REGISTRATION_TOKEN="{{ gitea_runner_registration_token }}"
|
||||
- GITEA_RUNNER_NAME=runner
|
||||
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://node:16-bullseye,ubuntu-22.04:docker://node:16-bullseye,ubuntu-20.04:docker://node:16-bullseye,ubuntu-18.04:docker://node:16-buster,runner:host
|
||||
networks:
|
||||
- IPv4
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
28
templates/compose/scribe.yaml.j2
Normal file
28
templates/compose/scribe.yaml.j2
Normal file
@ -0,0 +1,28 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
scribe:
|
||||
container_name: scribe
|
||||
image: git.opnxng.com/opnxng/scribe:latest
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- SCRIBE_PORT=8088
|
||||
- PORT=8088
|
||||
- SCRIBE_HOST=0.0.0.0
|
||||
- SCRIBE_DB=postgres://does@not/matter
|
||||
- LUCKY_ENV=production
|
||||
- APP_DOMAIN=m.opnxng.com
|
||||
- SECRET_KEY_BASE="{{ scribe_jwt_secret }}"
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- 8890:8088
|
||||
networks:
|
||||
- IPv4
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
61
templates/compose/send.yaml.j2
Normal file
61
templates/compose/send.yaml.j2
Normal file
@ -0,0 +1,61 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
send:
|
||||
# image: "registry.gitlab.com/timvisee/send:latest"
|
||||
image: ghcr.io/xavion-lux/send:latest
|
||||
container_name: send
|
||||
restart: always
|
||||
volumes:
|
||||
- {{ docker_dir }}/send/uploads:/uploads
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- NODE_ENV=development
|
||||
- BASE_URL=https://s.opnxng.com
|
||||
- PORT=1443
|
||||
- REDIS_HOST=send-redis
|
||||
- FILE_DIR=/uploads
|
||||
- DOWNLOAD_COUNTS=1,2,5,10,15,25 #,50,100,1000
|
||||
- DEFAULT_DOWNLOADS=10
|
||||
- MAX_DOWNLOADS=25
|
||||
- EXPIRE_TIMES_SECONDS=3600,86400,604800 #2592000
|
||||
- DEFAULT_EXPIRE_SECONDS=604800
|
||||
- MAX_EXPIRE_SECONDS=604800
|
||||
ports:
|
||||
- 8886:1443
|
||||
networks:
|
||||
- IPv4
|
||||
labels:
|
||||
- "com.centurylinklabs.watchtower.enable=false"
|
||||
|
||||
send-redis:
|
||||
image: 'redis:alpine'
|
||||
container_name: send-redis
|
||||
restart: always
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
volumes:
|
||||
- {{ docker_dir }}/send/send-redis:/data
|
||||
command: "redis-server --appendonly yes"
|
||||
labels:
|
||||
- "com.centurylinklabs.watchtower.enable=false"
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
|
||||
|
||||
# Clear expired uploads
|
||||
# 0 */3 * * * find {{ docker_dir }}/send/uploads/ -name 7-\* -mmin +10130 -exec rm {} \;
|
||||
# 0 */3 * * * find {{ docker_dir }}/send/uploads/ -name 1-\* -mmin +1500 -exec rm {} \;
|
||||
29
templates/compose/simplytranslate.yaml.j2
Normal file
29
templates/compose/simplytranslate.yaml.j2
Normal file
@ -0,0 +1,29 @@
|
||||
# {{ ansible_managed }}
|
||||
version: "3.6"
|
||||
services:
|
||||
simplytranslate:
|
||||
image: git.opnxng.com/opnxng/simplytranslate:latest
|
||||
container_name: simplytranslate
|
||||
user: nobody
|
||||
read_only: true
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
cap_drop:
|
||||
- ALL
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- ADDRESS=0.0.0.0:5000
|
||||
- GOOGLETRANSLATE_ENABLE=true
|
||||
- ICIBA_ENABLE=true
|
||||
- REVERSO_ENABLE=true
|
||||
ports:
|
||||
- 8889:5000
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
15
templates/compose/socks5.yaml.j2
Normal file
15
templates/compose/socks5.yaml.j2
Normal file
@ -0,0 +1,15 @@
|
||||
# {{ ansible_managed }}
|
||||
version: "3"
|
||||
services:
|
||||
socks5:
|
||||
image: serjs/go-socks5-proxy
|
||||
container_name: socks5
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- PROXY_PORT=8870
|
||||
restart: unless-stopped
|
||||
network_mode: host
|
||||
27
templates/compose/stirling-pdf.yaml.j2
Normal file
27
templates/compose/stirling-pdf.yaml.j2
Normal file
@ -0,0 +1,27 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
stirling-pdf:
|
||||
container_name: stirling-pdf
|
||||
image: frooodle/s-pdf
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- ALLOW_GOOGLE_VISIBILITY=false
|
||||
# APP_LOCALE: en_GB
|
||||
# APP_HOME_NAME: Stirling PDF
|
||||
# APP_HOME_DESCRIPTION: Your locally hosted one-stop-shop for all your PDF needs.
|
||||
# APP_NAVBAR_NAME: Stirling PDF
|
||||
# APP_ROOT_PATH: /
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- 8887:8080
|
||||
networks:
|
||||
- IPv4
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
54
templates/compose/teddit.yaml.j2
Normal file
54
templates/compose/teddit.yaml.j2
Normal file
@ -0,0 +1,54 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
|
||||
teddit:
|
||||
container_name: teddit
|
||||
image: teddit/teddit:latest
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- DOMAIN=i.opnxng.com
|
||||
- USE_HELMET=true
|
||||
- USE_HELMET_HSTS=true
|
||||
- TRUST_PROXY=true
|
||||
- REDIS_HOST=teddit-redis
|
||||
- THEME=dark
|
||||
- FLAIRS_ENABLED=false
|
||||
- API_ENABLED=false
|
||||
- SUGGESTED_SUBREDDITS=["Saved", "Selfhosted", "Linux", "Privacy", "DataHoarder"]
|
||||
- DOMAIN_REPLACEMENTS=[["twitter.com","n.opnxng.com"],["quora.com","q.opnxng.com."],["imgur.com","r.opnxng.com"]]
|
||||
restart: unless-stopped
|
||||
healthcheck:
|
||||
test: ["CMD", "wget" ,"--no-verbose", "--tries=1", "--spider", "http://localhost:8080/about"]
|
||||
interval: 1m
|
||||
timeout: 3s
|
||||
ports:
|
||||
- 8881:8080
|
||||
depends_on:
|
||||
- teddit-redis
|
||||
logging:
|
||||
driver: none
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
teddit-redis:
|
||||
container_name: teddit-redis
|
||||
image: redis:alpine
|
||||
command: redis-server
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- REDIS_REPLICATION_MODE=master
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
23
templates/compose/voyager.yaml.j2
Normal file
23
templates/compose/voyager.yaml.j2
Normal file
@ -0,0 +1,23 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.7'
|
||||
services:
|
||||
voyager:
|
||||
image: ghcr.io/aeharding/voyager:latest
|
||||
container_name: voyager
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- CUSTOM_LEMMY_SERVERS=lemm.ee,lemmy.pussthecat.org,lemmy.ml,hexbear.net,sh.itjust.works,beehaw.org,lemmy.world
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8895:5314'
|
||||
networks:
|
||||
- IPv4
|
||||
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
19
templates/compose/watchtower.yaml.j2
Normal file
19
templates/compose/watchtower.yaml.j2
Normal file
@ -0,0 +1,19 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '2.1'
|
||||
services:
|
||||
watchtower:
|
||||
image: ghcr.io/containrrr/watchtower
|
||||
container_name: watchtower
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
- WATCHTOWER_CLEANUP=true
|
||||
- WATCHTOWER_WARN_ON_HEAD_FAILURE=never
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
command: --schedule "0 0 1 * * *"
|
||||
restart: unless-stopped
|
||||
network_mode: bridge
|
||||
21
templates/compose/wolfree.yaml.j2
Normal file
21
templates/compose/wolfree.yaml.j2
Normal file
@ -0,0 +1,21 @@
|
||||
# {{ ansible_managed }}
|
||||
version: '3.3'
|
||||
services:
|
||||
wolfree:
|
||||
image: git.opnxng.com/opnxng/wolfree:latest
|
||||
container_name: wolfree
|
||||
security_opt:
|
||||
- no-new-privileges
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Asia/Singapore
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- '8906:80'
|
||||
networks:
|
||||
- IPv4
|
||||
networks:
|
||||
IPv4:
|
||||
external:
|
||||
name: IPv4
|
||||
663
templates/conf/Caddyfile.j2
Executable file
663
templates/conf/Caddyfile.j2
Executable file
@ -0,0 +1,663 @@
|
||||
# {{ ansible_managed }}
|
||||
{
|
||||
admin off
|
||||
acme_dns cloudflare {$CLOUDFLARE_API_TOKEN}
|
||||
order rate_limit before basicauth
|
||||
}
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
# SearXNG
|
||||
|
||||
{$HOSTNAME} {
|
||||
log {
|
||||
output discard
|
||||
}
|
||||
|
||||
@api {
|
||||
path /config
|
||||
path /healthz
|
||||
path /stats/errors
|
||||
path /stats/checker
|
||||
}
|
||||
|
||||
@static {
|
||||
path /static/*
|
||||
}
|
||||
|
||||
@notstatic {
|
||||
not path /static/*
|
||||
}
|
||||
|
||||
@imageproxy {
|
||||
path /image_proxy
|
||||
}
|
||||
|
||||
@notimageproxy {
|
||||
not path /image_proxy
|
||||
}
|
||||
|
||||
header {
|
||||
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
|
||||
X-XSS-Protection "1; mode=block"
|
||||
X-Content-Type-Options "nosniff"
|
||||
Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=()"
|
||||
Feature-Policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'none';focus-without-user-activation 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';sync-xhr 'none';usb 'none';vr 'none'"
|
||||
Referrer-Policy "no-referrer"
|
||||
X-Robots-Tag "noindex, noarchive, nofollow"
|
||||
-Server
|
||||
}
|
||||
|
||||
header @api {
|
||||
Access-Control-Allow-Methods "GET, OPTIONS"
|
||||
Access-Control-Allow-Origin "*"
|
||||
}
|
||||
|
||||
# Cache
|
||||
header @static {
|
||||
# Cache
|
||||
Cache-Control "public, max-age=31536000"
|
||||
defer
|
||||
}
|
||||
|
||||
header @notstatic {
|
||||
# No Cache
|
||||
Cache-Control "no-cache, no-store"
|
||||
Pragma "no-cache"
|
||||
}
|
||||
|
||||
# CSP (see http://content-security-policy.com/ )
|
||||
header @imageproxy {
|
||||
Content-Security-Policy "default-src 'none'; img-src 'self' data:"
|
||||
}
|
||||
|
||||
header @notimageproxy {
|
||||
Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self' https://github.com/searxng/searxng/issues/new; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src 'self' data: https://*.tile.openstreetmap.org; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com"
|
||||
}
|
||||
|
||||
handle {
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ oracle4_private_ip }}:8080 {
|
||||
header_up X-Real-IP {remote_host}
|
||||
header_up X-Forwarded-Port {http.request.port}
|
||||
header_up X-Forwarded-Proto {http.request.scheme}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
# Other subdomains
|
||||
|
||||
*.{$HOSTNAME} {
|
||||
|
||||
log {
|
||||
output discard
|
||||
}
|
||||
|
||||
handle {
|
||||
abort
|
||||
}
|
||||
|
||||
header {
|
||||
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
|
||||
X-XSS-Protection "1; mode=block"
|
||||
X-Content-Type-Options "nosniff"
|
||||
Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),usb=(),vr=()"
|
||||
#sync-xhr=(),
|
||||
Feature-Policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'none';focus-without-user-activation 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';usb 'none';vr 'none'"
|
||||
#sync-xhr 'none';
|
||||
Referrer-Policy "no-referrer"
|
||||
X-Frame-Options SAMEORIGIN
|
||||
-Server
|
||||
}
|
||||
|
||||
@about host about.{$HOSTNAME}
|
||||
handle @about {
|
||||
root * /www
|
||||
encode gzip
|
||||
file_server
|
||||
header {
|
||||
Content-Security-Policy "default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests"
|
||||
}
|
||||
}
|
||||
|
||||
@www host www.{$HOSTNAME}
|
||||
handle @www {
|
||||
redir https://opnxng.com{uri}
|
||||
}
|
||||
|
||||
@x host x.{$HOSTNAME}
|
||||
handle @x {
|
||||
redir https://opnxng.com{uri}
|
||||
}
|
||||
|
||||
@i host i.{$HOSTNAME}
|
||||
handle @i {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ vultr_private_ip }}:8881
|
||||
to {{ oracle1_private_ip }}:8881
|
||||
to {{ oracle2_private_ip }}:8881
|
||||
to {{ oracle3_private_ip }}:8881
|
||||
to {{ oracle4_private_ip }}:8881
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
Content-Security-Policy "default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests"
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@l host l.{$HOSTNAME}
|
||||
handle @l {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ vultr_private_ip }}:8882
|
||||
to {{ oracle1_private_ip }}:8882
|
||||
to {{ oracle2_private_ip }}:8882
|
||||
to {{ oracle3_private_ip }}:8882
|
||||
to {{ oracle4_private_ip }}:8882
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
Content-Security-Policy "default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests"
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@n {
|
||||
host n.{$HOSTNAME}
|
||||
maxmind_geolocation {
|
||||
db_path "/etc/caddy/GeoLite2-City.mmdb"
|
||||
deny_countries CN
|
||||
}
|
||||
}
|
||||
handle @n {
|
||||
@notstatic {
|
||||
not path /css/* /js/* /fonts/* /browserconfig.xml /android-chrome* /favicon* /logo* /lp.svg /robots.txt /safari* /site.webmanifest /pic/*
|
||||
}
|
||||
rate_limit @notstatic {remote.ip} 2r/s 60000 500
|
||||
rate_limit @notstatic {remote.ip} 30r/m 300000 500
|
||||
reverse_proxy {{ oracle4_private_ip }}:8883 {
|
||||
transport http {compression off}
|
||||
}
|
||||
header {
|
||||
header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; img-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; object-src 'none'; media-src 'self' blob:; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; connect-src 'self' https://*.twimg.com; manifest-src 'self'"
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@t host t.{$HOSTNAME}
|
||||
handle @t {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8889
|
||||
to {{ oracle2_private_ip }}:8889
|
||||
to {{ oracle3_private_ip }}:8889
|
||||
to {{ oracle4_private_ip }}:8889
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
Content-Security-Policy "default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests"
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@b host b.{$HOSTNAME}
|
||||
handle @b {
|
||||
reverse_proxy {{ oracle1_private_ip }}:8884
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@s host s.{$HOSTNAME}
|
||||
handle @s {
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ oracle1_private_ip }}:8886
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@p host p.{$HOSTNAME}
|
||||
handle @p {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8887
|
||||
to {{ oracle2_private_ip }}:8887
|
||||
to {{ oracle3_private_ip }}:8887
|
||||
to {{ oracle4_private_ip }}:8887
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@m host m.{$HOSTNAME}
|
||||
handle @m {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8890
|
||||
to {{ oracle2_private_ip }}:8890
|
||||
to {{ oracle3_private_ip }}:8890
|
||||
to {{ oracle4_private_ip }}:8890
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@e host e.{$HOSTNAME}
|
||||
handle @e {
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ oracle3_private_ip }}:8891
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@it host it.{$HOSTNAME}
|
||||
handle @it {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8892
|
||||
to {{ oracle2_private_ip }}:8892
|
||||
to {{ oracle3_private_ip }}:8892
|
||||
to {{ oracle4_private_ip }}:8892
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@f {
|
||||
host f.{$HOSTNAME}
|
||||
maxmind_geolocation {
|
||||
db_path "/etc/caddy/GeoLite2-City.mmdb"
|
||||
allow_countries {{ allow_countries }}
|
||||
}
|
||||
}
|
||||
handle @f {
|
||||
forward_auth {{ oracle4_private_ip }}:9091 {
|
||||
uri /api/verify?rd=https://auth.opnxng.com/
|
||||
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
|
||||
#import trusted_proxy_list
|
||||
}
|
||||
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ oracle2_private_ip }}:8893
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@auth host auth.{$HOSTNAME}
|
||||
handle @auth {
|
||||
reverse_proxy {{ oracle4_private_ip }}:9091
|
||||
}
|
||||
|
||||
@v host v.{$HOSTNAME}
|
||||
handle @v {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8895
|
||||
to {{ oracle2_private_ip }}:8895
|
||||
to {{ oracle3_private_ip }}:8895
|
||||
to {{ oracle4_private_ip }}:8895
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@bn host bn.{$HOSTNAME}
|
||||
handle @bn {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8896
|
||||
to {{ oracle2_private_ip }}:8896
|
||||
to {{ oracle3_private_ip }}:8896
|
||||
to {{ oracle4_private_ip }}:8896
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@z host z.{$HOSTNAME}
|
||||
handle @z {
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ oracle3_private_ip }}:8897
|
||||
header {
|
||||
X-Permitted-Cross-Domain-Policies "none"
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@a host a.{$HOSTNAME}
|
||||
handle @a {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8898
|
||||
to {{ oracle2_private_ip }}:8898
|
||||
to {{ oracle3_private_ip }}:8898
|
||||
to {{ oracle4_private_ip }}:8898
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
Content-Security-Policy "default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests"
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@r host r.{$HOSTNAME}
|
||||
handle @r {
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ vultr_private_ip }}:8899
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@g host g.{$HOSTNAME}
|
||||
handle @g {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8900
|
||||
to {{ oracle2_private_ip }}:8900
|
||||
to {{ oracle3_private_ip }}:8900
|
||||
to {{ oracle4_private_ip }}:8900
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
Content-Security-Policy "default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests"
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@c host c.{$HOSTNAME}
|
||||
handle @c {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8901
|
||||
to {{ oracle2_private_ip }}:8901
|
||||
to {{ oracle3_private_ip }}:8901
|
||||
to {{ oracle4_private_ip }}:8901
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@o host o.{$HOSTNAME}
|
||||
handle @o {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8902
|
||||
to {{ oracle2_private_ip }}:8902
|
||||
to {{ oracle3_private_ip }}:8902
|
||||
to {{ oracle4_private_ip }}:8902
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@ph host ph.{$HOSTNAME}
|
||||
handle @ph {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8903
|
||||
to {{ oracle2_private_ip }}:8903
|
||||
to {{ oracle3_private_ip }}:8903
|
||||
to {{ oracle4_private_ip }}:8903
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@q host q.{$HOSTNAME}
|
||||
handle @q {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8904
|
||||
to {{ oracle2_private_ip }}:8904
|
||||
to {{ oracle3_private_ip }}:8904
|
||||
to {{ oracle4_private_ip }}:8904
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@d host d.{$HOSTNAME}
|
||||
handle @d {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8905
|
||||
to {{ oracle2_private_ip }}:8905
|
||||
to {{ oracle3_private_ip }}:8905
|
||||
to {{ oracle4_private_ip }}:8905
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@wf host wf.{$HOSTNAME}
|
||||
handle @wf {
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ oracle2_private_ip }}:8906
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@4g host 4g.{$HOSTNAME}
|
||||
handle @4g {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8907
|
||||
to {{ oracle2_private_ip }}:8907
|
||||
to {{ oracle3_private_ip }}:8907
|
||||
to {{ oracle4_private_ip }}:8907
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@ig host ig.{$HOSTNAME}
|
||||
handle @ig {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8908
|
||||
to {{ oracle2_private_ip }}:8908
|
||||
to {{ oracle3_private_ip }}:8908
|
||||
to {{ oracle4_private_ip }}:8908
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@tt host tt.{$HOSTNAME}
|
||||
handle @tt {
|
||||
encode zstd gzip
|
||||
reverse_proxy {
|
||||
to {{ oracle1_private_ip }}:8909
|
||||
to {{ oracle2_private_ip }}:8909
|
||||
to {{ oracle3_private_ip }}:8909
|
||||
to {{ oracle4_private_ip }}:8909
|
||||
lb_policy ip_hash
|
||||
lb_try_duration 5s
|
||||
lb_try_interval 1s
|
||||
fail_duration 30s
|
||||
max_fails 3
|
||||
}
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@tb host tb.{$HOSTNAME}
|
||||
handle @tb {
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ vultr_private_ip }}:8910
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@git host git.{$HOSTNAME}
|
||||
handle @git {
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ oracle3_private_ip }}:3000
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
@nt host nt.{$HOSTNAME}
|
||||
handle @nt {
|
||||
encode zstd gzip
|
||||
reverse_proxy {{ oracle3_private_ip }}:8911
|
||||
header {
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
# Breezewiki redirect to handle subdomain.fandom.com
|
||||
|
||||
*.z.{$HOSTNAME} {
|
||||
@fandom host *.z.{$HOSTNAME}
|
||||
redir https://z.opnxng.com/{labels.3}{uri}
|
||||
header {
|
||||
X-Permitted-Cross-Domain-Policies "none"
|
||||
X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
|
||||
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
|
||||
X-XSS-Protection "1; mode=block"
|
||||
X-Content-Type-Options "nosniff"
|
||||
Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=()"
|
||||
Feature-Policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'none';focus-without-user-activation 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';sync-xhr 'none';usb 'none';vr 'none'"
|
||||
Referrer-Policy "no-referrer"
|
||||
X-Frame-Options SAMEORIGIN
|
||||
-Server
|
||||
}
|
||||
|
||||
log {
|
||||
output discard
|
||||
}
|
||||
|
||||
handle {
|
||||
abort
|
||||
}
|
||||
}
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
# Imgin redirect to handle i.imgur.com
|
||||
|
||||
i.r.{$HOSTNAME} {
|
||||
|
||||
handle {
|
||||
redir https://r.opnxng.com{uri}
|
||||
}
|
||||
|
||||
log {
|
||||
output discard
|
||||
}
|
||||
|
||||
handle {
|
||||
abort
|
||||
}
|
||||
}
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
3
templates/conf/config.ini.j2
Normal file
3
templates/conf/config.ini.j2
Normal file
@ -0,0 +1,3 @@
|
||||
canonical_origin = https://z.opnxng.com
|
||||
debug = false
|
||||
port = 10416
|
||||
48
templates/conf/nitter.conf.j2
Executable file
48
templates/conf/nitter.conf.j2
Executable file
@ -0,0 +1,48 @@
|
||||
# {{ ansible_managed }}
|
||||
[Server]
|
||||
address = "0.0.0.0"
|
||||
port = 8080
|
||||
https = false # disable to enable cookies when not using https
|
||||
httpMaxConnections = 100
|
||||
staticDir = "./public"
|
||||
title = "nitter"
|
||||
hostname = "n.opnxng.com"
|
||||
|
||||
[Cache]
|
||||
listMinutes = 240 # how long to cache list info (not the tweets, so keep it high)
|
||||
rssMinutes = 10 # how long to cache rss queries
|
||||
redisHost = "nitter-redis" if using docker-compose
|
||||
redisPort = 6379
|
||||
redisPassword = ""
|
||||
#redisConnections = 0
|
||||
#redisMaxConnections = 0
|
||||
#redisConnections = 20 # connection pool size
|
||||
#redisMaxConnections = 30
|
||||
# max, new connections are opened when none are available, but if the pool size
|
||||
# goes above this, they're closed when released. don't worry about this unless
|
||||
# you receive tons of requests per second
|
||||
|
||||
[Config]
|
||||
hmacKey = "{{ nitter_jwt_secret }}" # random key for cryptographic signing of video urls
|
||||
base64Media = false # use base64 encoding for proxied media urls
|
||||
enableRSS = false # set this to false to disable RSS feeds
|
||||
enableDebug = false # enable request logs and debug endpoints
|
||||
proxy = "" # http/https url, SOCKS proxies are not supported
|
||||
proxyAuth = ""
|
||||
tokenCount = 10
|
||||
# minimum amount of usable tokens. tokens are used to authorize API requests,
|
||||
# but they expire after ~1 hour, and have a limit of 187 requests.
|
||||
# the limit gets reset every 15 minutes, and the pool is filled up so there's
|
||||
# always at least $tokenCount usable tokens. again, only increase this if
|
||||
# you receive major bursts all the time
|
||||
|
||||
# Change default preferences here, see src/prefs_impl.nim for a complete list
|
||||
[Preferences]
|
||||
theme = "auto_(Twitter)"
|
||||
replaceTwitter = "n.opnxng.com"
|
||||
replaceYouTube = "yewtu.be"
|
||||
replaceReddit = "i.opnxng.com"
|
||||
replaceInstagram = ""
|
||||
proxyVideos = true
|
||||
hlsPlayback = false
|
||||
infiniteScroll = false
|
||||
15
templates/conf/runner.j2
Normal file
15
templates/conf/runner.j2
Normal file
@ -0,0 +1,15 @@
|
||||
{
|
||||
"WARNING": "This file is automatically generated by act-runner. Do not edit it manually unless you know what you are doing. Removing this file will cause act runner to re-register as a new runner.",
|
||||
"id": {{ runner_id }},
|
||||
"uuid": "{{ runner_uuid }}",
|
||||
"name": "runner",
|
||||
"token": "{{ runner_token }}",
|
||||
"address": "https://git.opnxng.com",
|
||||
"labels": [
|
||||
"ubuntu-latest:docker://node:16-bullseye",
|
||||
"ubuntu-22.04:docker://node:16-bullseye",
|
||||
"ubuntu-20.04:docker://node:16-bullseye",
|
||||
"ubuntu-18.04:docker://node:16-buster",
|
||||
"runner:host"
|
||||
]
|
||||
}
|
||||
2543
templates/conf/settings.yml.j2
Executable file
2543
templates/conf/settings.yml.j2
Executable file
File diff suppressed because it is too large
Load Diff
136
vars/services.yml
Normal file
136
vars/services.yml
Normal file
@ -0,0 +1,136 @@
|
||||
setup:
|
||||
oracle4:
|
||||
- nitter
|
||||
|
||||
compose:
|
||||
oracle4:
|
||||
- nitter
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
deployed-compose:
|
||||
vultr:
|
||||
- teddit
|
||||
- libreddit
|
||||
- imgin
|
||||
- rat-aint-tieba
|
||||
- watchtower
|
||||
- 4get
|
||||
- socks5
|
||||
oracle1:
|
||||
- send
|
||||
- privatebin
|
||||
####################
|
||||
- voyager
|
||||
- mlmym
|
||||
- photon
|
||||
- stirling-pdf
|
||||
- cinny
|
||||
- gothub
|
||||
- anonymousoverflow
|
||||
- scribe
|
||||
- teddit
|
||||
- libredditarm
|
||||
- proxitok
|
||||
- proxigram
|
||||
- it-tools
|
||||
- simplytranslate
|
||||
- quetre
|
||||
- libremdb
|
||||
- binternet
|
||||
- watchtower
|
||||
- 4get
|
||||
- socks5
|
||||
oracle2:
|
||||
- firefox
|
||||
- wolfree
|
||||
####################
|
||||
- voyager
|
||||
- mlmym
|
||||
- photon
|
||||
- stirling-pdf
|
||||
- cinny
|
||||
- gothub
|
||||
- anonymousoverflow
|
||||
- scribe
|
||||
- teddit
|
||||
- libredditarm
|
||||
- proxitok
|
||||
- proxigram
|
||||
- it-tools
|
||||
- simplytranslate
|
||||
- quetre
|
||||
- libremdb
|
||||
- binternet
|
||||
- watchtower
|
||||
- 4get
|
||||
- socks5
|
||||
oracle3:
|
||||
- breezewiki
|
||||
- etherpad
|
||||
- gitea
|
||||
- runner
|
||||
- ntfy
|
||||
####################
|
||||
- voyager
|
||||
- mlmym
|
||||
- photon
|
||||
- stirling-pdf
|
||||
- cinny
|
||||
- gothub
|
||||
- anonymousoverflow
|
||||
- scribe
|
||||
- teddit
|
||||
- libredditarm
|
||||
- proxitok
|
||||
- proxigram
|
||||
- it-tools
|
||||
- simplytranslate
|
||||
- quetre
|
||||
- libremdb
|
||||
- binternet
|
||||
- watchtower
|
||||
- 4get
|
||||
- socks5
|
||||
oracle4:
|
||||
- caddy
|
||||
- nitter
|
||||
- paulgo
|
||||
- authelia
|
||||
- geoipupdate
|
||||
####################
|
||||
- voyager
|
||||
- mlmym
|
||||
- photon
|
||||
- stirling-pdf
|
||||
- cinny
|
||||
- gothub
|
||||
- anonymousoverflow
|
||||
- scribe
|
||||
- teddit
|
||||
- libredditarm
|
||||
- proxitok
|
||||
- proxigram
|
||||
- it-tools
|
||||
- simplytranslate
|
||||
- quetre
|
||||
- libremdb
|
||||
- binternet
|
||||
- watchtower
|
||||
- 4get
|
||||
- socks5
|
||||
|
||||
# ----------------------------------------------------------------------------------------------------
|
||||
|
||||
deployed-setup:
|
||||
oracle2:
|
||||
- firefox
|
||||
oracle3:
|
||||
- ntfy
|
||||
- gitea
|
||||
- runner
|
||||
oracle4:
|
||||
- authelia
|
||||
- nitter
|
||||
- paulgo
|
||||
- caddy
|
||||
Loading…
Reference in New Issue
Block a user