Files
ts-vikunja/docker-compose.yml
peskyadmin 8e3df8934a refactor: move more sensitive values into .env for simpler configuration
- Move Vikunja DB user/password/database and JWT secret to environment variables
- Update .env.example with clear sections and 'change-me' placeholders
- Update SECURITY.md to reflect that more secrets now live in .env
2026-08-02 16:34:12 -04:00

54 lines
1.5 KiB
YAML

services:
vikunja-ts:
image: tailscale/tailscale:latest
hostname: vikunja
container_name: vikunja-ts
environment:
- TS_AUTHKEY=${TS_AUTHKEY}
- TS_LOGIN_SERVER=${TS_LOGIN_SERVER}
- TS_STATE_DIR=/var/lib/tailscale
- TS_SERVE_CONFIG=/config/serve.json
- TS_EXTRA_ARGS=--login-server=${TS_LOGIN_SERVER}
- TS_DEBUG=1
volumes:
- ./tailscale/tailscale-data:/var/lib/tailscale
- ./tailscale/config:/config
- /dev/net/tun:/dev/net/tun
cap_add:
- net_admin
restart: unless-stopped
db:
image: postgres:15
environment:
POSTGRES_PASSWORD: testpassword123
POSTGRES_USER: vikunja
POSTGRES_DB: vikunja
volumes:
- vikunja-db-data:/var/lib/postgresql/data
network_mode: service:vikunja-ts
restart: unless-stopped
vikunja:
image: vikunja/vikunja:0.24
# ports:
# - 3456:3456
environment:
VIKUNJA_DATABASE_TYPE: postgres
VIKUNJA_DATABASE_HOST: 127.0.0.1
VIKUNJA_DATABASE_USER: ${VIKUNJA_DATABASE_USER}
VIKUNJA_DATABASE_PASSWORD: ${VIKUNJA_DATABASE_PASSWORD}
VIKUNJA_DATABASE_DATABASE: ${VIKUNJA_DATABASE_DATABASE}
VIKUNJA_SERVICE_JWTSECRET: ${VIKUNJA_SERVICE_JWTSECRET}
VIKUNJA_SERVICE_PUBLICURL: ${VIKUNJA_SERVICE_PUBLICURL}
VIKUNJA_SERVICE_FRONTENDURL: ${VIKUNJA_SERVICE_FRONTENDURL}
volumes:
- ./files:/app/vikunja/files
depends_on:
- db
network_mode: service:vikunja-ts
restart: unless-stopped
volumes:
vikunja-db-data: