PhilandClaude Opus 5.5
fea0d1042d
Manyfold matches linked users on provider + uid, so the existing user's auth_uid was remapped to the Pocket ID user before deploying. HTTPS_ONLY is needed so Manyfold builds an https callback URL behind Caddy. The Authentik credentials stay in the vault for rollback. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
49 lines
1.7 KiB
Django/Jinja
49 lines
1.7 KiB
Django/Jinja
services:
|
|
app:
|
|
image: ghcr.io/manyfold3d/manyfold-solo:latest
|
|
volumes:
|
|
# Uncomment to add a volume where a database file should be created.
|
|
# Don't change the part after the colon, it needs to be at /config
|
|
- ./config:/config
|
|
# Uncomment to add a filesystem volume for your model library (or multiple if
|
|
# you want multiple libraries), in the form <local_path>:<container_path>.
|
|
# The local path could be a folder that already contains models, in which case Manyfold
|
|
# will scan and import them, or it could be empty.
|
|
# The container path can be anything; you will need to enter it in the "new library" form.
|
|
- ./models:/models
|
|
environment:
|
|
SECRET_KEY_BASE: {{ vault_manyfold.secret_key }}
|
|
MULTIUSER: enabled
|
|
OIDC_CLIENT_ID: {{ vault_manyfold.pocketid.client_id }}
|
|
OIDC_CLIENT_SECRET: {{ vault_manyfold.pocketid.client_secret }}
|
|
OIDC_ISSUER: https://{{ subdomains.pocketid }}
|
|
OIDC_NAME: Pocket ID
|
|
PUBLIC_HOSTNAME: {{ subdomains.models }}
|
|
HTTPS_ONLY: enabled # makes the OIDC callback URL https
|
|
MAX_FILE_UPLOAD_SIZE: 5368709120
|
|
PUID: 1000
|
|
PGID: 1000
|
|
extra_hosts:
|
|
- "{{ subdomains.pocketid }}:{{ docker.hairpin_ip }}"
|
|
labels:
|
|
glance.name: Manyfold
|
|
glance.icon: si:open3d
|
|
glance.url: https://{{ subdomains.models }}/
|
|
glance.description: STL Storage
|
|
mag37.dockcheck.update: true
|
|
restart: unless-stopped
|
|
# Optional, but recommended for better security
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- CHOWN
|
|
- DAC_OVERRIDE
|
|
- SETUID
|
|
- SETGID
|
|
|
|
networks:
|
|
default:
|
|
external: true
|
|
name: "{{ docker.network_name }}" |