Phil
e3f4eb4e95
- Fixed manyfold deployment error by updating template to use vault_manyfold.secret_key instead of undefined manyfold_key - Standardized template to use centralized variables for domains, network, and hairpin configuration - Added proper OIDC configuration using vault_manyfold.oidc structure 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
48 lines
1.7 KiB
Django/Jinja
48 lines
1.7 KiB
Django/Jinja
services:
|
|
app:
|
|
image: ghcr.io/manyfold3d/manyfold-solo:latest
|
|
volumes:
|
|
# Uncomment to add a volume where a database file should be created.
|
|
# Don't change the part after the colon, it needs to be at /config
|
|
- ./config:/config
|
|
# Uncomment to add a filesystem volume for your model library (or multiple if
|
|
# you want multiple libraries), in the form <local_path>:<container_path>.
|
|
# The local path could be a folder that already contains models, in which case Manyfold
|
|
# will scan and import them, or it could be empty.
|
|
# The container path can be anything; you will need to enter it in the "new library" form.
|
|
- ./models:/models
|
|
environment:
|
|
SECRET_KEY_BASE: {{ vault_manyfold.secret_key }}
|
|
MULTIUSER: enabled
|
|
OIDC_CLIENT_ID: {{ vault_manyfold.oidc.client_id }}
|
|
OIDC_CLIENT_SECRET: {{ vault_manyfold.oidc.client_secret }}
|
|
OIDC_ISSUER: https://{{ subdomains.auth }}/application/o/manyfold/
|
|
OIDC_NAME: Authentik
|
|
PUBLIC_HOSTNAME: {{ subdomains.models }}
|
|
MAX_FILE_UPLOAD_SIZE: 5368709120
|
|
PUID: 1000
|
|
PGID: 1000
|
|
extra_hosts:
|
|
- "{{ subdomains.auth }}:{{ docker.hairpin_ip }}"
|
|
labels:
|
|
glance.name: Manyfold
|
|
glance.icon: si:open3d
|
|
glance.url: https://{{ subdomains.models }}/
|
|
glance.description: STL Storage
|
|
mag37.dockcheck.update: true
|
|
restart: unless-stopped
|
|
# Optional, but recommended for better security
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- CHOWN
|
|
- DAC_OVERRIDE
|
|
- SETUID
|
|
- SETGID
|
|
|
|
networks:
|
|
default:
|
|
external: true
|
|
name: "{{ docker.network_name }}" |