Files
ansible/roles/docker/templates/dir2opds-compose.yml.j2
T
PhilandClaude Opus 5.5 c0145dd5a2 Harden permissions, close exposed ports, and clean up tasks
- Quote file modes. Unquoted 644/755 were read as decimal, so files
  landed as 1204. Templates holding secrets are now 0640 root:docker.
- Stop publishing Authentik 9000/9443 and Karakeep 3000 (Caddy reaches
  them over the docker network), bind dir2opds to the Tailscale IP, and
  drop Caddy's unused 8448.
- Atuin login uses no_log and only runs once; the installer only runs
  when Atuin is missing.
- Make chsh, ufw-docker install, the bat symlink and Atuin dotfiles
  idempotent.
- Back up the Paperless data volume (SQLite DB), stopping Paperless
  during the backup.
- Close public sign-up on kosync and ByteStash.
- Replace hardcoded IPs and domains with variables.
- Remove teardown tasks and templates for 9 retired services.
- Fix the dockcheck comment: it auto-updates labelled containers.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-29 21:03:54 -06:00

28 lines
659 B
Django/Jinja

---
services:
dir2opds:
image: ghcr.io/dubyte/dir2opds:v1.9.0
container_name: dir2opds
ports:
- "{{ network.docker_host_ip }}:8080:8080"
volumes:
- ./books:/books
command:
- -dir=/books
- -extract-metadata
- -enable-cache
- -gzip
- -enable-html
- -url=https://{{ subdomains.dir2opds }}
restart: unless-stopped
labels:
glance.name: dir2opds
glance.icon: si:book
glance.url: https://{{ subdomains.dir2opds }}/
glance.description: OPDS book catalog
mag37.dockcheck.update: true
networks:
default:
external: true
name: {{ docker.network_name }}