39dad00455
Both pinned an arbitrary host port — vaultwarden 8201:80, searxng 8083:8080 — which was the only thing blocking them from being instanced. Neither number is meaningful the way pihole's 53 or stalwart's 25 are, so both become random:<internal> and portAllocate assigns each install (and each future instance) its own. The ports appeared nowhere else: no hook, no compose, no docs. Neither app is installed on the maintainer's box, so nothing to migrate. Both now clear every instance guard. Of the eight apps the port guard caught, that leaves six, all genuinely one-per-host. Also made compose rewrite rules 2 and 3 skip commented lines, for the same reason rule 1 already does. Spotted while verifying the above: vaultwarden parks an optional exporter behind #, and rule 2 rewrote the container_name inside that dead block while the service key above it kept the old name, leaving it internally inconsistent. Harmless — rule 2 is anchored on container_name: so it could never reach the image line — but there is no reason to touch a commented block at all. Bookstack's rewritten identities remain byte-identical to the running instance. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
76 lines
4.0 KiB
Plaintext
Executable File
76 lines
4.0 KiB
Plaintext
Executable File
#
|
|
# =============================================================================
|
|
# GENERAL CONFIGURATION
|
|
# =============================================================================
|
|
# APP_NAME = name of application for use in scripts
|
|
# COMPOSE_FILE = default for no app_name in docker-compose file name, app if there is
|
|
# BACKUP = if true, include this application in backup operations
|
|
# UPDATE_TYPE = auto: new image builds are applied automatically (a recovery snapshot is taken first), manual: only when you press Update
|
|
# HEALTHCHECK = if true, default docker health checks for that container will be enabled
|
|
# AUTHELIA = if true, use Authelia authentication, if false turned off.
|
|
# HEADSCALE = options : false, local, remote (see general config). e.g false or local,remote
|
|
# MONITORING = if true, export this app's metrics to Prometheus + Grafana (needs both apps installed)
|
|
#
|
|
CFG_VAULTWARDEN_APP_NAME=vaultwarden
|
|
CFG_VAULTWARDEN_BACKUP=true
|
|
CFG_VAULTWARDEN_BACKUP_STRATEGY=auto
|
|
CFG_VAULTWARDEN_UPDATE_TYPE=auto
|
|
CFG_VAULTWARDEN_COMPOSE_FILE=default
|
|
CFG_VAULTWARDEN_HEALTHCHECK=false
|
|
CFG_VAULTWARDEN_AUTHELIA=false
|
|
CFG_VAULTWARDEN_HEADSCALE=false
|
|
CFG_VAULTWARDEN_MONITORING=false
|
|
#
|
|
# =============================================================================
|
|
# APPLICATION CONFIGURATION
|
|
# =============================================================================
|
|
# ADMIN_TOKEN = admin token for accessing the admin interface (set to 'none' to disable)
|
|
# SIGNUPS_ALLOWED = if true, new user registrations are allowed
|
|
#
|
|
CFG_VAULTWARDEN_ADMIN_TOKEN_1=RANDOMIZEDPASSWORD1
|
|
CFG_VAULTWARDEN_SIGNUPS_ALLOWED=true
|
|
#
|
|
# =============================================================================
|
|
# METADATA
|
|
# =============================================================================
|
|
# CATEGORY = application category for grouping
|
|
# TITLE = display name for the application
|
|
# DESCRIPTION = short description of the application
|
|
# LONG_DESCRIPTION = detailed description of the application
|
|
# URL = source repository or documentation URL
|
|
# ACTIONS = available actions for this application
|
|
#
|
|
CFG_VAULTWARDEN_CATEGORY="security"
|
|
CFG_VAULTWARDEN_TITLE="Vaultwarden"
|
|
CFG_VAULTWARDEN_DESCRIPTION="Password Manager"
|
|
CFG_VAULTWARDEN_LONG_DESCRIPTION="Vaultwarden is an alternative implementation of the Bitwarden server API written in Rust and compatible with Bitwarden clients"
|
|
CFG_VAULTWARDEN_URL="https://github.com/dani-garcia/vaultwarden"
|
|
CFG_VAULTWARDEN_ACTIONS="configure|install|restart|shutdown|uninstall"
|
|
#
|
|
# =============================================================================
|
|
# NETWORK CONFIGURATION
|
|
# =============================================================================
|
|
# DOMAIN = number of domain from the general config, useful when using multiple domains
|
|
# WHITELIST = if true only allow whitelisted ips on traefik, if false allow all
|
|
#
|
|
CFG_VAULTWARDEN_DOMAIN=1
|
|
CFG_VAULTWARDEN_WHITELIST=false
|
|
CFG_VAULTWARDEN_NETWORK=default
|
|
#
|
|
# =============================================================================
|
|
# PORT CONFIGURATION
|
|
# =============================================================================
|
|
# PORT_ = port configuration: app|name|external:internal|access|protocol|login|traefik|webui|description
|
|
# - app: application name
|
|
# - name: service identifier (webui, api, ssh, etc.)
|
|
# - external:internal: port mapping (external can be 'random' for auto-allocation)
|
|
# - access: 'public' (internet accessible), 'private' (local network only), 'disabled' (not running)
|
|
# - protocol: 'tcp' or 'udp'
|
|
# - login: if true, this port requires basic-auth via Traefik (only meaningful when traefik=true)
|
|
# - traefik: if true, Traefik handles this port (reverse proxy)
|
|
# - webui: if true, this port serves the main web interface
|
|
# - description: human-readable description of the service
|
|
#
|
|
CFG_VAULTWARDEN_PORT_1="vaultwarden-service|webui|random:80|public|tcp|false|true|true|Password Manager Interface||vault"
|
|
CFG_VAULTWARDEN_PORT_2="vaultwarden-exporter|metrics|3001:3001|disabled|tcp|false|false|false|Metrics Exporter (sidecar, docker-network only)|"
|