95 lines
3.5 KiB
YAML
95 lines
3.5 KiB
YAML
version: '3.7'
|
|
services:
|
|
paperless-ngx:
|
|
container_name: paperless-ngx
|
|
image: ghcr.io/paperless-ngx/paperless-ngx:2.5.1
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- db
|
|
- broker
|
|
ports:
|
|
- ${APP_PORT}:8000
|
|
volumes:
|
|
- ${APP_DATA_DIR}/data/paperless_data:/usr/src/paperless/data
|
|
- ${APP_DATA_DIR}/data/paperless_media:/usr/src/paperless/media
|
|
- ${APP_DATA_DIR}/data/paperless_export:/usr/src/paperless/export
|
|
- ${APP_DATA_DIR}/data/paperless_consume:/usr/src/paperless/consume
|
|
environment:
|
|
PAPERLESS_REDIS: redis://broker:6379
|
|
PAPERLESS_DBHOST: db
|
|
PAPERLESS_ADMIN_USER: ${PAPERLESS_ADMIN_USERNAME}
|
|
PAPERLESS_ADMIN_PASSWORD: ${PAPERLESS_ADMIN_PASSWORD}
|
|
PAPERLESS_TIKA_ENABLED: ${PAPERLESS_TIKA_ENABLED}
|
|
PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
|
|
PAPERLESS_TIKA_ENDPOINT: http://tika:9998
|
|
PAPERLESS_URL: ${APP_PROTOCOL:-http}://${APP_DOMAIN}
|
|
COMPOSE_PROJECT_NAME: paperless-ngx
|
|
networks:
|
|
- tipi_main_network
|
|
labels:
|
|
# Main
|
|
traefik.enable: true
|
|
traefik.http.middlewares.paperless-ngx-web-redirect.redirectscheme.scheme: https
|
|
traefik.http.services.paperless-ngx.loadbalancer.server.port: 8000
|
|
# Web
|
|
traefik.http.routers.paperless-ngx-insecure.rule: Host(`${APP_DOMAIN}`)
|
|
traefik.http.routers.paperless-ngx-insecure.entrypoints: web
|
|
traefik.http.routers.paperless-ngx-insecure.service: paperless-ngx
|
|
traefik.http.routers.paperless-ngx-insecure.middlewares: paperless-ngx-web-redirect
|
|
# Websecure
|
|
traefik.http.routers.paperless-ngx.rule: Host(`${APP_DOMAIN}`)
|
|
traefik.http.routers.paperless-ngx.entrypoints: websecure
|
|
traefik.http.routers.paperless-ngx.service: paperless-ngx
|
|
traefik.http.routers.paperless-ngx.tls.certresolver: myresolver
|
|
# Local domain
|
|
traefik.http.routers.paperless-ngx-local-insecure.rule: Host(`paperless-ngx.${LOCAL_DOMAIN}`)
|
|
traefik.http.routers.paperless-ngx-local-insecure.entrypoints: web
|
|
traefik.http.routers.paperless-ngx-local-insecure.service: paperless-ngx
|
|
traefik.http.routers.paperless-ngx-local-insecure.middlewares: paperless-ngx-web-redirect
|
|
# Local domain secure
|
|
traefik.http.routers.paperless-ngx-local.rule: Host(`paperless-ngx.${LOCAL_DOMAIN}`)
|
|
traefik.http.routers.paperless-ngx-local.entrypoints: websecure
|
|
traefik.http.routers.paperless-ngx-local.service: paperless-ngx
|
|
traefik.http.routers.paperless-ngx-local.tls: true
|
|
|
|
# Redis
|
|
broker:
|
|
image: docker.io/library/redis:7
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ${APP_DATA_DIR}/data/redis:/data
|
|
networks:
|
|
- tipi_main_network
|
|
|
|
# Postgres SQL
|
|
db:
|
|
image: docker.io/library/postgres:16
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ${APP_DATA_DIR}/data/postgres:/var/lib/postgresql/data
|
|
environment:
|
|
POSTGRES_DB: paperless
|
|
POSTGRES_USER: paperless
|
|
POSTGRES_PASSWORD: paperless
|
|
networks:
|
|
- tipi_main_network
|
|
|
|
gotenberg:
|
|
image: docker.io/gotenberg/gotenberg:8.0
|
|
restart: unless-stopped
|
|
# The gotenberg chromium route is used to convert .eml files. We do not
|
|
# want to allow external content like tracking pixels or even javascript.
|
|
command:
|
|
- "gotenberg"
|
|
- "--chromium-disable-javascript=true"
|
|
- "--chromium-allow-list=file:///tmp/.*"
|
|
networks:
|
|
- tipi_main_network
|
|
|
|
tika:
|
|
image: ghcr.io/paperless-ngx/tika:latest
|
|
restart: unless-stopped
|
|
networks:
|
|
- tipi_main_network
|
|
|