badbl0cks
f014330b14
All checks were successful
Build And Deploy / build-and-deploy (push) Successful in 1m16s
Replace single deploy/haproxy.cfg with deploy/haproxy/{haproxy.cfg,challenge.html}.
HAProxy now runs a WebCrypto-based proof-of-work challenge using a stick-table,
URI normalization and a challenge backend. docker-compose mounts the haproxy
directory, and also switches the site DB volume to ./db to be consistent. Update robots.txt.ts to
add a honeypot path for bad bot blocking.
86 lines
2 KiB
YAML
86 lines
2 KiB
YAML
services:
|
|
badblocks-personal-site:
|
|
image: ${IMAGE_NAME}:latest
|
|
restart: always
|
|
container_name: badblocks-personal-site
|
|
volumes:
|
|
- ./db:/db
|
|
networks:
|
|
- proxynet
|
|
env_file:
|
|
- .env
|
|
# healthcheck:
|
|
# test:
|
|
# [
|
|
# "CMD",
|
|
# "curl",
|
|
# "-f",
|
|
# "-s",
|
|
# "--max-time",
|
|
# "5",
|
|
# "http://localhost:4321/health",
|
|
# ]
|
|
# interval: 30s
|
|
# timeout: 15s
|
|
# retries: 3
|
|
# start_period: 120s
|
|
wireguard:
|
|
image: qmcgaw/gluetun
|
|
cap_add:
|
|
- NET_ADMIN
|
|
container_name: wireguard
|
|
hostname: wireguard
|
|
environment:
|
|
- VPN_SERVICE_PROVIDER=custom
|
|
- VPN_TYPE=wireguard
|
|
- HTTPPROXY=on
|
|
expose:
|
|
- "8888"
|
|
env_file:
|
|
- .env
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
restart: unless-stopped
|
|
networks:
|
|
- proxynet
|
|
# healthcheck:
|
|
# test: ["CMD", "ping", "-c", "1", "-W", "3", "$$ANDROID_SMS_GATEWAY_IP"]
|
|
# interval: 30s
|
|
# timeout: 15s
|
|
# retries: 3
|
|
# start_period: 60s
|
|
certbot:
|
|
image: serversideup/certbot-dns-cloudflare
|
|
container_name: certbot
|
|
volumes:
|
|
- ./certs:/etc/letsencrypt
|
|
environment:
|
|
CLOUDFLARE_API_TOKEN: "${CLOUDFLARE_API_TOKEN}"
|
|
CERTBOT_EMAIL: "${CERTBOT_EMAIL}"
|
|
CERTBOT_DOMAINS: "${DOMAIN}"
|
|
haproxy:
|
|
image: haproxy:3.2
|
|
stop_signal: SIGTERM
|
|
container_name: haproxy
|
|
env_file:
|
|
- .env
|
|
command: ["haproxy", "-f", "/usr/local/etc/haproxy"]
|
|
ports:
|
|
- "${PUBLIC_IP}:80:80"
|
|
- "${PUBLIC_IP}:443:443"
|
|
- "${PUBLIC_IP}:8404:8404"
|
|
volumes:
|
|
- ./haproxy:/usr/local/etc/haproxy:ro
|
|
- ./certs:/certs:ro
|
|
restart: always
|
|
networks:
|
|
- proxynet
|
|
# healthcheck:
|
|
# test: ["CMD", "haproxy", "-c", "-f", "/usr/local/etc/haproxy"]
|
|
# interval: 30s
|
|
# timeout: 10s
|
|
# retries: 3
|
|
networks:
|
|
proxynet:
|
|
name: proxynet
|
|
driver: bridge
|