From 2cb4f80e6cc6433ae350f39747af28c2873f9320 Mon Sep 17 00:00:00 2001 From: Luna Date: Wed, 16 Nov 2022 23:22:33 -0300 Subject: [PATCH] add pleroma --- Dockerfile.pleroma | 40 +++++++++++++++++++++++++ docker-compose.yaml | 60 ++++++++++++++++++++++++++++++++++++-- files/nginx.conf | 23 +++++++++++++++ files/pleroma.exs | 71 +++++++++++++++++++++++++++++++++++++++++++++ pleroma_setup.sh | 11 +++++++ 5 files changed, 203 insertions(+), 2 deletions(-) create mode 100644 Dockerfile.pleroma create mode 100644 files/pleroma.exs create mode 100755 pleroma_setup.sh diff --git a/Dockerfile.pleroma b/Dockerfile.pleroma new file mode 100644 index 0000000..779e0b0 --- /dev/null +++ b/Dockerfile.pleroma @@ -0,0 +1,40 @@ +FROM elixir:1.11.4-alpine + +ARG PLEROMA_VER=develop +ARG UID=911 +ARG GID=911 +ENV MIX_ENV=prod + +RUN echo "http://nl.alpinelinux.org/alpine/latest-stable/community" >> /etc/apk/repositories \ + && apk update \ + && apk add git gcc g++ musl-dev make cmake file-dev \ + exiftool imagemagick libmagic ncurses postgresql-client ffmpeg + +RUN addgroup -g ${GID} pleroma \ + && adduser -h /pleroma -s /bin/false -D -G pleroma -u ${UID} pleroma + +ARG DATA=/var/lib/pleroma +RUN mkdir -p /etc/pleroma \ + && chown -R pleroma /etc/pleroma \ + && mkdir -p ${DATA}/uploads \ + && mkdir -p ${DATA}/static \ + && chown -R pleroma ${DATA} + +USER pleroma +WORKDIR /pleroma + +RUN git clone -b develop https://git.pleroma.social/pleroma/pleroma.git /pleroma \ + && git checkout ${PLEROMA_VER} + +RUN echo "import Mix.Config" > config/prod.secret.exs \ + && mix local.hex --force \ + && mix local.rebar --force \ + && mix deps.get --only prod \ + && mkdir release \ + && mix release --path /pleroma + +COPY ./files/pleroma.exs /etc/pleroma/config.exs + +EXPOSE 4000 + +ENTRYPOINT ["/pleroma/docker-entrypoint.sh"] diff --git a/docker-compose.yaml b/docker-compose.yaml index 65ffd0c..f256422 100644 --- a/docker-compose.yaml +++ b/docker-compose.yaml @@ -1,10 +1,60 @@ version: "3.9" services: - #pleroma_db: - # image: postgres:15 + + pleroma_db: + image: postgres:15 + networks: + - pleroma_internal_network + healthcheck: + test: ['CMD', 'pg_isready', '-U', 'postgres'] + volumes: + - ./data/pleroma/postgres14:/var/lib/postgresql/data + environment: + - 'POSTGRES_HOST_AUTH_METHOD=trust' + - 'POSTGRES_USER=pleroma' + - 'POSTGRES_PASSWORD=very_secure_pleroma_password' + - 'POSTGRES_DB=pleroma' #pleroma: # image: git.pleroma.social:5050/pleroma/pleroma:release-2-4-1 + pleroma_web: + image: pleroma_selfbuilt + networks: + - pleroma_internal_network + - pleroma_external_network + healthcheck: + test: + [ + "CMD-SHELL", + "wget -q --spider --proxy=off localhost:4000 || exit 1", + ] + restart: always + ports: + - '127.0.0.1:20700:4000' + build: + context: . + # Feel free to remove or override this section + # See 'Build-time variables' in README.md + args: + - "UID=1000" + - "GID=1000" + - "PLEROMA_VER=v2.4.2" + volumes: + - ./data/pleroma/uploads:/var/lib/pleroma/uploads + - ./data/pleroma/static:/var/lib/pleroma/static + - ./files/pleroma.exs:/etc/pleroma/config.exs:ro + environment: + DOMAIN: pleroma.pubtester.local + INSTANCE_NAME: Pleroma/pubtester + ADMIN_EMAIL: admin@example.com + NOTIFY_EMAIL: notify@example.com + DB_HOST: pleroma_db + DB_USER: pleroma + DB_PASS: very_secure_pleroma_password + DB_NAME: pleroma + depends_on: + - pleroma_db + # mastodon config mastodon_db: image: postgres:15 @@ -85,6 +135,8 @@ services: networks: - external_network - internal_network + - pleroma_external_network + - pleroma_internal_network volumes: - ./files/nginx.conf:/etc/nginx/nginx.conf:ro ports: @@ -92,8 +144,12 @@ services: depends_on: - mastodon_web - mastodon_streaming + - pleroma_web networks: external_network: internal_network: internal: true + pleroma_external_network: + pleroma_internal_network: + internal: true diff --git a/files/nginx.conf b/files/nginx.conf index 14a4d79..2b2d4d4 100644 --- a/files/nginx.conf +++ b/files/nginx.conf @@ -63,4 +63,27 @@ http { tcp_nodelay on; } } + + server { + listen 80; + listen [::]:80; + root /mnt/none; + index index.html index.htm; + + server_name pleroma.pubtester.local; + + absolute_redirect off; + server_name_in_redirect off; + + error_page 404 /404.html; + error_page 410 /410.html; + + location / { + proxy_set_header Host $http_host; + proxy_set_header X-Forwarded-Proto https; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_pass http://pleroma_web:4000; + } + } } diff --git a/files/pleroma.exs b/files/pleroma.exs new file mode 100644 index 0000000..487ef6b --- /dev/null +++ b/files/pleroma.exs @@ -0,0 +1,71 @@ +import Config + +config :pleroma, Pleroma.Web.Endpoint, + url: [host: System.get_env("DOMAIN", "localhost"), scheme: "http", port: 80], + http: [ip: {0, 0, 0, 0}, port: 4000] + +config :pleroma, :instance, + name: System.get_env("INSTANCE_NAME", "Pleroma"), + email: System.get_env("ADMIN_EMAIL"), + notify_email: System.get_env("NOTIFY_EMAIL"), + limit: 5000, + registrations_open: true, + federating: true, + healthcheck: true + +config :pleroma, :media_proxy, + enabled: false, + redirect_on_failure: true, + base_url: "https://cache.domain.tld" + +config :pleroma, Pleroma.Repo, + adapter: Ecto.Adapters.Postgres, + username: System.get_env("DB_USER", "pleroma"), + password: System.fetch_env!("DB_PASS"), + database: System.get_env("DB_NAME", "pleroma"), + hostname: System.get_env("DB_HOST", "db"), + pool_size: 10 + +# Configure web push notifications +config :web_push_encryption, :vapid_details, subject: "mailto:#{System.get_env("NOTIFY_EMAIL")}" + +config :pleroma, :database, rum_enabled: false +config :pleroma, :instance, static_dir: "/var/lib/pleroma/static" +config :pleroma, Pleroma.Uploaders.Local, uploads: "/var/lib/pleroma/uploads" + +# We can't store the secrets in this file, since this is baked into the docker image +if not File.exists?("/var/lib/pleroma/secret.exs") do + secret = :crypto.strong_rand_bytes(64) |> Base.encode64() |> binary_part(0, 64) + signing_salt = :crypto.strong_rand_bytes(8) |> Base.encode64() |> binary_part(0, 8) + {web_push_public_key, web_push_private_key} = :crypto.generate_key(:ecdh, :prime256v1) + + secret_file = + EEx.eval_string( + """ + import Config + config :pleroma, Pleroma.Web.Endpoint, + secret_key_base: "<%= secret %>", + signing_salt: "<%= signing_salt %>" + config :web_push_encryption, :vapid_details, + public_key: "<%= web_push_public_key %>", + private_key: "<%= web_push_private_key %>" + """, + secret: secret, + signing_salt: signing_salt, + web_push_public_key: Base.url_encode64(web_push_public_key, padding: false), + web_push_private_key: Base.url_encode64(web_push_private_key, padding: false) + ) + + File.write("/var/lib/pleroma/secret.exs", secret_file) +end + +import_config("/var/lib/pleroma/secret.exs") + +# For additional user config +if File.exists?("/var/lib/pleroma/config.exs"), + do: import_config("/var/lib/pleroma/config.exs"), + else: + File.write("/var/lib/pleroma/config.exs", """ + import Config + # For additional configuration outside of environmental variables + """) diff --git a/pleroma_setup.sh b/pleroma_setup.sh new file mode 100755 index 0000000..6cf503d --- /dev/null +++ b/pleroma_setup.sh @@ -0,0 +1,11 @@ +#!/bin/sh +# +# setup pleroma db + +docker-compose up -d pleroma_db +docker-compose exec -i pleroma_db psql -U pleroma -c "CREATE EXTENSION IF NOT EXISTS citext;" +docker-compose exec -i pleroma_db psql -U pleroma -c "CREATE EXTENSION IF NOT EXISTS pg_trgm;" +docker-compose exec -i pleroma_db psql -U pleroma -c 'CREATE EXTENSION IF NOT EXISTS "uuid-ossp";' +docker-compose down + +docker buildx build -t pleroma_selfbuilt -f ./Dockerfile.pleroma .