First commit

freshrss/install/freshrss.compose.yaml

@@ -0,0 +1,45 @@
+version: "3"
+
+services:
+  freshrss:
+    image: freshrss/freshrss:latest
+    container_name: freshrss
+    restart: unless-stopped
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.freshrss.rule=Host(`${VIRTUAL_HOST}`)"
+      - "traefik.http.routers.freshrss.entrypoints=websecure"
+      - "traefik.http.routers.freshrss.tls=true"
+      - "traefik.http.routers.freshrss.tls.certresolver=myresolver"
+      - "traefik.http.services.freshrss.loadbalancer.server.port=80"
+      - "traefik.docker.network=http-proxy"
+    networks:
+      - http-proxy
+      - internal
+    depends_on:
+      - db
+    environment:
+      TZ: "${FRESHRSS_TZ}"
+      CRON_MIN: "${FRESHRSS_CRON_MIN}"
+    volumes:
+      - /srv/docker/freshrss/data:/var/www/FreshRSS/data
+      - /srv/docker/freshrss/extensions:/var/www/FreshRSS/extensions
+
+  db:
+    image: postgres:17
+    container_name: freshrss-db
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: "${POSTGRES_USER}"
+      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"
+      POSTGRES_DB: "${POSTGRES_DB}"
+    volumes:
+      - /srv/docker/freshrss/pgdata:/var/lib/postgresql/data
+    networks:
+      - internal
+
+networks:
+  http-proxy:
+    external: true
+  internal:
+    driver: bridge

freshrss/install/freshrss.env

@@ -0,0 +1,7 @@
+FRESHRSS_TZ=Europe/Paris
+FRESHRSS_CRON_MIN=*/30
+POSTGRES_USER=freshrss
+POSTGRES_PASSWORD=8En6KCnYgQ>>p6LXA2)f`6Ax<AvB
+POSTGRES_DB=freshrss
+FRESHRSS_PORT=8080
+VIRTUAL_HOST=rss.alamaison.me

freshrss/install/traefik.compose.yaml

@@ -0,0 +1,35 @@
+version: '3.9'
+
+services:
+  traefik:
+    image: traefik:3.6.1
+    container_name: traefik
+    restart: unless-stopped
+    command:
+      - "--api.dashboard=true"
+      - "--entrypoints.web.address=:80"
+      - "--entrypoints.websecure.address=:443"
+      - "--providers.docker=true"
+      - "--providers.docker.exposedbydefault=false"
+      - "--providers.docker.watch=true"
+      - "--certificatesresolvers.myresolver.acme.httpchallenge=true"
+      - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
+      - "--certificatesresolvers.myresolver.acme.email=${ACME_EMAIL}"
+      - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
+      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
+      - "--entrypoints.web.http.redirections.entrypoint.scheme=https" 
+    ports:
+      - "80:80"
+      - "8443:443"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - traefik-letsencrypt:/letsencrypt
+    networks:
+      - http-proxy
+
+volumes:
+  traefik-letsencrypt:
+
+networks:
+  http-proxy:
+    external: true

freshrss/install/traefik.env

@@ -0,0 +1 @@
+ACME_EMAIL=contact@pinte.net