miker/Compose-Files
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
Mike McFetridge
2026-07-23 19:38:14 -04:00
parent 72272e4006
commit 84e1ead50c
283 changed files with 0 additions and 206 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Docker-Compose/infisical/files/.env
+33
View File
@@ -0,0 +1,33 @@
# Infisical core configuration
SITE_URL='<< infisical_site_url >>'
ENCRYPTION_KEY='<< infisical_encryption_key >>'
AUTH_SECRET='<< infisical_auth_secret >>'
# Data stores
<%- if database_external %>
DB_CONNECTION_URI='<< database_connection_uri >>'
<%- else %>
POSTGRES_USER='<< database_user >>'
POSTGRES_PASSWORD='<< database_password >>'
POSTGRES_DB='<< database_name >>'
DB_CONNECTION_URI='postgresql://<< database_user >>:<< database_password >>@<< service_name or 'infisical' >>_postgres:5432/<< database_name >>?sslmode=disable'
<%- endif %>
<%- if redis_external %>
REDIS_URL='<< redis_url >>'
<%- else %>
REDIS_PASSWORD='<< redis_password >>'
REDIS_URL='redis://:<< redis_password >>@<< service_name or 'infisical' >>_redis:6379'
<%- endif %>
<%- if email_enabled %>
# SMTP configuration
SMTP_HOST='<< email_host >>'
SMTP_PORT='<< email_port >>'
SMTP_FROM_ADDRESS='<< email_from_address >>'
SMTP_FROM_NAME='<< email_from_name >>'
SMTP_USERNAME='<< email_username >>'
SMTP_PASSWORD='<< email_password >>'
SMTP_SECURE='<< email_secure | lower >>'
SMTP_REQUIRE_TLS='<< email_require_tls | lower >>'
SMTP_IGNORE_TLS='<< email_ignore_tls | lower >>'
<%- endif %>
Docker-Compose/infisical/files/compose.yaml
+138
View File
@@ -0,0 +1,138 @@
---
services:
<< service_name or 'infisical' >>:
image: infisical/infisical:v0.158.0
restart: << restart_policy >>
<%- if container_name %>
container_name: << container_name >>
<%- endif %>
environment:
- NODE_ENV=production
- SITE_URL=${SITE_URL}
- ENCRYPTION_KEY=${ENCRYPTION_KEY}
- AUTH_SECRET=${AUTH_SECRET}
- DB_CONNECTION_URI=${DB_CONNECTION_URI}
- REDIS_URL=${REDIS_URL}
<%- if email_enabled %>
- SMTP_HOST=${SMTP_HOST}
- SMTP_PORT=${SMTP_PORT}
- SMTP_FROM_ADDRESS=${SMTP_FROM_ADDRESS}
- SMTP_FROM_NAME=${SMTP_FROM_NAME}
- SMTP_USERNAME=${SMTP_USERNAME}
- SMTP_PASSWORD=${SMTP_PASSWORD}
- SMTP_SECURE=${SMTP_SECURE}
- SMTP_REQUIRE_TLS=${SMTP_REQUIRE_TLS}
- SMTP_IGNORE_TLS=${SMTP_IGNORE_TLS}
<%- endif %>
<%- if (not database_external) or (not redis_external) %>
depends_on:
<%- if not database_external %>
<< service_name or 'infisical' >>_postgres:
condition: service_healthy
<%- endif %>
<%- if not redis_external %>
<< service_name or 'infisical' >>_redis:
condition: service_started
<%- endif %>
<%- endif %>
networks:
- << service_name or 'infisical' >>_backend
<%- if traefik_enabled %>
- << traefik_network >>
<%- endif %>
<%- if not traefik_enabled %>
ports:
- "<< ports_http >>:8080"
<%- endif %>
<%- if traefik_enabled %>
labels:
- traefik.enable=true
- traefik.docker.network=<< traefik_network >>
- traefik.http.services.<< service_name or 'infisical' >>.loadBalancer.server.port=8080
- traefik.http.routers.<< service_name or 'infisical' >>_http.service=<< service_name or 'infisical' >>
- traefik.http.routers.<< service_name or 'infisical' >>_http.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
- traefik.http.routers.<< service_name or 'infisical' >>_http.entrypoints=<< traefik_entrypoint >>
<%- if traefik_tls_enabled %>
- traefik.http.routers.<< service_name or 'infisical' >>_https.service=<< service_name or 'infisical' >>
- traefik.http.routers.<< service_name or 'infisical' >>_https.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
- traefik.http.routers.<< service_name or 'infisical' >>_https.entrypoints=<< traefik_tls_entrypoint >>
- traefik.http.routers.<< service_name or 'infisical' >>_https.tls=true
- traefik.http.routers.<< service_name or 'infisical' >>_https.tls.certresolver=<< traefik_tls_certresolver >>
<%- endif %>
<%- endif %>
<%- if not database_external %>
<< service_name or 'infisical' >>_postgres:
image: docker.io/library/postgres:14-alpine
restart: << restart_policy >>
environment:
- POSTGRES_USER=${POSTGRES_USER}
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
- POSTGRES_DB=${POSTGRES_DB}
healthcheck:
test: ["CMD-SHELL", "pg_isready --username=$${POSTGRES_USER} --dbname=$${POSTGRES_DB}"]
interval: 5s
timeout: 10s
retries: 10
networks:
- << service_name or 'infisical' >>_backend
volumes:
<%- if volume_mode == 'mount' %>
- << volume_mount_path >>/postgres:/var/lib/postgresql/data
<%- elif volume_mode == 'local' or volume_mode == 'nfs' %>
- << service_name or 'infisical' >>_postgres:/var/lib/postgresql/data
<%- endif %>
<%- endif %>
<%- if not redis_external %>
<< service_name or 'infisical' >>_redis:
image: docker.io/library/redis:7-alpine
restart: << restart_policy >>
command: ["redis-server", "--appendonly", "yes", "--requirepass", "${REDIS_PASSWORD}"]
networks:
- << service_name or 'infisical' >>_backend
volumes:
<%- if volume_mode == 'mount' %>
- << volume_mount_path >>/redis:/data
<%- elif volume_mode == 'local' or volume_mode == 'nfs' %>
- << service_name or 'infisical' >>_redis:/data
<%- endif %>
<%- endif %>
networks:
<< service_name or 'infisical' >>_backend:
driver: bridge
<%- if traefik_enabled %>
<< traefik_network >>:
external: true
<%- endif %>
<%- if volume_mode == 'local' and ((not database_external) or (not redis_external)) %>
volumes:
<%- if not database_external %>
<< service_name or 'infisical' >>_postgres:
driver: local
<%- endif %>
<%- if not redis_external %>
<< service_name or 'infisical' >>_redis:
driver: local
<%- endif %>
<%- elif volume_mode == 'nfs' and ((not database_external) or (not redis_external)) %>
volumes:
<%- if not database_external %>
<< service_name or 'infisical' >>_postgres:
driver: local
driver_opts:
type: nfs
o: addr=<< volume_nfs_server >>,nfsvers=4,<< volume_nfs_options >>
device: ":<< volume_nfs_path >>/postgres"
<%- endif %>
<%- if not redis_external %>
<< service_name or 'infisical' >>_redis:
driver: local
driver_opts:
type: nfs
o: addr=<< volume_nfs_server >>,nfsvers=4,<< volume_nfs_options >>
device: ":<< volume_nfs_path >>/redis"
<%- endif %>
<%- endif %>
Docker-Compose/infisical/template.json
+681
View File
@@ -0,0 +1,681 @@
{
"slug": "infisical-compose",
"kind": "compose",
"metadata": {
"name": "Infisical",
"description": "Open-source secrets management platform for teams and homelabs, including PostgreSQL, Redis, SMTP, and Traefik-friendly Docker Compose configuration.",
"tags": [
"secrets",
"postgresql",
"redis",
"traefik"
],
"icon": {
"provider": "selfhst",
"id": "infisical",
"color": "amber"
},
"draft": false,
"version": {
"name": "v0.158.0",
"source_dep_name": "infisical/infisical",
"source_dep_version": "v0.158.0"
}
},
"variables": [
{
"name": "general",
"title": "General",
"items": [
{
"name": "service_name",
"type": "str",
"title": "Service Name",
"required": false,
"config": {
"placeholder": "infisical"
}
},
{
"name": "container_name",
"type": "str",
"title": "Container Name",
"required": false,
"description": "Name to use for the container. Leave empty to omit container_name and let Compose generate it.",
"config": {
"placeholder": "infisical"
}
},
{
"name": "restart_policy",
"type": "enum",
"title": "Restart Policy",
"required": true,
"default": "unless-stopped",
"description": "Container restart policy.",
"config": {
"options": [
"unless-stopped",
"always",
"on-failure",
"no"
]
}
}
]
},
{
"name": "infisical",
"title": "Infisical",
"items": [
{
"name": "infisical_site_url",
"type": "str",
"title": "Site URL",
"required": true,
"default": "https://infisical.home.arpa",
"config": {
"placeholder": "https://infisical.home.arpa"
}
},
{
"name": "infisical_encryption_key",
"type": "secret",
"title": "Encryption Key",
"required": true,
"description": "Infisical ENCRYPTION_KEY. Back this up securely; losing it makes stored secrets unrecoverable.",
"config": {
"autogenerated": {
"length": 32,
"characters": [
"0",
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"a",
"b",
"c",
"d",
"e",
"f"
]
}
}
},
{
"name": "infisical_auth_secret",
"type": "secret",
"title": "Auth Secret",
"required": true,
"config": {
"autogenerated": {
"kind": "base64",
"bytes": 32
}
}
}
]
},
{
"name": "database",
"title": "PostgreSQL",
"items": [
{
"name": "database_external",
"type": "bool",
"title": "External PostgreSQL",
"required": false,
"default": false
},
{
"name": "database_connection_uri",
"type": "secret",
"title": "External DB Connection URI",
"required": true,
"description": "Full PostgreSQL connection URI for external databases. URL-encode special characters in usernames/passwords.",
"needs": [
"database_external=true"
],
"config": {
"placeholder": "postgresql://infisical:password@postgres.example.internal:5432/infisical?sslmode=disable"
}
},
{
"name": "database_user",
"type": "str",
"title": "Database User",
"required": true,
"default": "infisical",
"needs": [
"database_external=false"
],
"config": {
"placeholder": "infisical"
}
},
{
"name": "database_password",
"type": "secret",
"title": "Database Password",
"required": true,
"description": "PostgreSQL password for the bundled database.",
"needs": [
"database_external=false"
],
"config": {
"autogenerated": {
"length": 32,
"characters": [
"a",
"b",
"c",
"d",
"e",
"f",
"g",
"h",
"i",
"j",
"k",
"l",
"m",
"n",
"o",
"p",
"q",
"r",
"s",
"t",
"u",
"v",
"w",
"x",
"y",
"z",
"A",
"B",
"C",
"D",
"E",
"F",
"G",
"H",
"I",
"J",
"K",
"L",
"M",
"N",
"O",
"P",
"Q",
"R",
"S",
"T",
"U",
"V",
"W",
"X",
"Y",
"Z",
"0",
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9"
]
}
}
},
{
"name": "database_name",
"type": "str",
"title": "Database Name",
"required": true,
"default": "infisical",
"needs": [
"database_external=false"
],
"config": {
"placeholder": "infisical"
}
}
]
},
{
"name": "redis",
"title": "Redis",
"items": [
{
"name": "redis_external",
"type": "bool",
"title": "External Redis",
"required": false,
"default": false
},
{
"name": "redis_url",
"type": "secret",
"title": "External Redis URL",
"required": true,
"description": "Full Redis URL for external Redis, for example redis://:password@redis.example.internal:6379.",
"needs": [
"redis_external=true"
],
"config": {
"placeholder": "redis://:password@redis.example.internal:6379"
}
},
{
"name": "redis_password",
"type": "secret",
"title": "Redis Password",
"required": true,
"needs": [
"redis_external=false"
],
"config": {
"autogenerated": {
"length": 32,
"characters": [
"a",
"b",
"c",
"d",
"e",
"f",
"g",
"h",
"i",
"j",
"k",
"l",
"m",
"n",
"o",
"p",
"q",
"r",
"s",
"t",
"u",
"v",
"w",
"x",
"y",
"z",
"A",
"B",
"C",
"D",
"E",
"F",
"G",
"H",
"I",
"J",
"K",
"L",
"M",
"N",
"O",
"P",
"Q",
"R",
"S",
"T",
"U",
"V",
"W",
"X",
"Y",
"Z",
"0",
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9"
]
}
}
}
]
},
{
"name": "ports",
"title": "Ports",
"items": [
{
"name": "ports_http",
"type": "str",
"title": "HTTP Port",
"required": false,
"default": "8080",
"description": "Host port exposed when Traefik integration is disabled.",
"config": {
"placeholder": "8080"
}
}
]
},
{
"name": "traefik",
"title": "Traefik",
"toggle": "traefik_enabled",
"items": [
{
"name": "traefik_enabled",
"type": "bool",
"title": "Traefik",
"required": false,
"default": true,
"description": "Attach to an external Traefik network and create routing labels."
},
{
"name": "traefik_host",
"type": "str",
"title": "Host",
"required": true,
"default": "infisical",
"needs": [
"traefik_enabled=true"
],
"config": {
"placeholder": "infisical"
}
},
{
"name": "traefik_domain",
"type": "str",
"title": "Domain",
"required": true,
"default": "home.arpa",
"needs": [
"traefik_enabled=true"
],
"config": {
"placeholder": "home.arpa"
}
},
{
"name": "traefik_entrypoint",
"type": "str",
"title": "Entrypoint",
"required": true,
"default": "web",
"description": "Traefik HTTP entrypoint.",
"needs": [
"traefik_enabled=true"
],
"config": {
"placeholder": "web"
}
},
{
"name": "traefik_network",
"type": "str",
"title": "Network",
"required": true,
"default": "traefik",
"description": "External Docker network used by Traefik.",
"needs": [
"traefik_enabled=true"
],
"config": {
"placeholder": "traefik"
}
},
{
"name": "traefik_tls_enabled",
"type": "bool",
"title": "TLS",
"required": false,
"default": true,
"description": "Create a TLS router for Traefik.",
"needs": [
"traefik_enabled=true"
]
},
{
"name": "traefik_tls_entrypoint",
"type": "str",
"title": "TLS Entrypoint",
"required": true,
"default": "websecure",
"description": "Traefik HTTPS entrypoint.",
"needs": [
"traefik_enabled=true",
"traefik_tls_enabled=true"
],
"config": {
"placeholder": "websecure"
}
},
{
"name": "traefik_tls_certresolver",
"type": "str",
"title": "Cert Resolver",
"required": true,
"default": "cloudflare",
"needs": [
"traefik_enabled=true",
"traefik_tls_enabled=true"
],
"config": {
"placeholder": "cloudflare"
}
}
]
},
{
"name": "volume",
"title": "Volumes",
"items": [
{
"name": "volume_mode",
"type": "enum",
"title": "Volume Mode",
"required": true,
"default": "local",
"description": "Storage mode for bundled PostgreSQL and Redis data.",
"config": {
"options": [
"local",
"mount",
"nfs"
]
}
},
{
"name": "volume_mount_path",
"type": "str",
"title": "Mount Path",
"required": true,
"default": "/data/infisical",
"description": "Base host path used when volume mode is mount.",
"needs": [
"volume_mode=mount"
],
"config": {
"placeholder": "/data/infisical"
}
},
{
"name": "volume_nfs_server",
"type": "str",
"title": "NFS Server",
"required": true,
"default": "NFS_SERVER",
"needs": [
"volume_mode=nfs"
],
"config": {
"placeholder": "NFS_SERVER"
}
},
{
"name": "volume_nfs_path",
"type": "str",
"title": "NFS Path",
"required": true,
"default": "/export/infisical",
"description": "NFS export path.",
"needs": [
"volume_mode=nfs"
],
"config": {
"placeholder": "/export/infisical"
}
},
{
"name": "volume_nfs_options",
"type": "str",
"title": "NFS Options",
"required": true,
"default": "rw,nolock,soft",
"description": "NFS mount options.",
"needs": [
"volume_mode=nfs"
],
"config": {
"placeholder": "rw,nolock,soft"
}
}
]
},
{
"name": "email",
"title": "Email",
"toggle": "email_enabled",
"items": [
{
"name": "email_enabled",
"type": "bool",
"title": "SMTP Email",
"required": false,
"default": false
},
{
"name": "email_host",
"type": "str",
"title": "SMTP Host",
"required": true,
"default": "smtp.home.arpa",
"needs": [
"email_enabled=true"
],
"config": {
"placeholder": "smtp.home.arpa"
}
},
{
"name": "email_port",
"type": "int",
"title": "SMTP Port",
"required": true,
"default": 587,
"needs": [
"email_enabled=true"
],
"config": {
"placeholder": "587"
}
},
{
"name": "email_from_address",
"type": "str",
"title": "From Address",
"required": true,
"default": "infisical@home.arpa",
"needs": [
"email_enabled=true"
],
"config": {
"placeholder": "infisical@home.arpa"
}
},
{
"name": "email_from_name",
"type": "str",
"title": "From Name",
"required": false,
"default": "Infisical",
"needs": [
"email_enabled=true"
],
"config": {
"placeholder": "Infisical"
}
},
{
"name": "email_username",
"type": "str",
"title": "SMTP Username",
"required": true,
"default": "",
"needs": [
"email_enabled=true"
],
"config": {
"placeholder": "user@example.com"
}
},
{
"name": "email_password",
"type": "secret",
"title": "SMTP Password",
"required": true,
"needs": [
"email_enabled=true"
]
},
{
"name": "email_secure",
"type": "bool",
"title": "SMTP Secure",
"required": false,
"default": false,
"needs": [
"email_enabled=true"
]
},
{
"name": "email_require_tls",
"type": "bool",
"title": "Require TLS",
"required": false,
"default": true,
"needs": [
"email_enabled=true"
]
},
{
"name": "email_ignore_tls",
"type": "bool",
"title": "Ignore TLS",
"required": false,
"default": false,
"needs": [
"email_enabled=true"
]
}
]
}
]
}