name: "kycnotme_v2024" networks: caddy: external: true volumes: pb_data: {} pb_public: {} pb_migrations: {} services: website: container_name: kycnotme-website build: ./src networks: caddy: default: volumes: - ./src/frontend/templates:/app/frontend/templates env_file: - .env depends_on: pocketbase: condition: service_healthy labels: caddy: "${WEB_DOMAIN}" caddy.reverse_proxy: "{{upstreams 4488}}" caddy.header.Referrer-Policy: "no-referrer" caddy.header.Strict-Transport-Security: "max-age=31536000; includeSubdomains; preload;" caddy.encode: zstd gzip caddy.header.Onion-Location: ${ONION_ADDRESS}{path} ofelia.enabled: "true" ofelia.job-exec.toscheck.schedule: "0 0 1 * *" ofelia.job-exec.toscheck.command: "kycnotme -scrap" pocketbase: image: spectado/pocketbase:latest container_name: kycnotme-pocketbase restart: always volumes: - pb_data:/pb_data - pb_public:/pb_public networks: caddy: {} default: aliases: - "database" labels: caddy: "${PB_DOMAIN}" caddy.reverse_proxy: "{{upstreams 80}}" caddy.request_body.max_size: 20MB caddy.header.X-Robots-Tag: "noindex" caddy.header.Strict-Transport-Security: "max-age=31536000; includeSubdomains; preload;" healthcheck: #optional (recommended) since v0.10.0 test: wget --no-verbose --tries=1 --spider http://localhost:80/api/health || exit 1 interval: 5s timeout: 5s retries: 5 tor: image: goldy/tor-hidden-service:latest profiles: ["tor"] container_name: kycnotme-tor restart: always networks: caddy: {} default: {} links: - website volumes: - ./docker/tor/hidden_service:/var/lib/tor/hidden_service environment: SERVICE1_TOR_SERVICE_HOSTS: 80:website:4488 SERVICE1_TOR_SERVICE_VERSION: '3' i2pd: build: context: ./docker/i2p/ profiles: ["i2p"] container_name: kycnotme-i2p restart: always networks: caddy: {} default: {} #ports: # - ":14447" # socks volumes: - ./docker/i2p/data:/root/.i2pd labels: caddy: ${I2P_ADDRESS} caddy.reverse_proxy: "website:4488"