diff --git a/services/service_penpot/docker-compose.yml b/services/service_penpot/docker-compose.yml index c640efb..e18d262 100644 --- a/services/service_penpot/docker-compose.yml +++ b/services/service_penpot/docker-compose.yml @@ -1,6 +1,3 @@ -networks: - penpot: - services: # Gluetun is used to connect container to VPN @@ -11,12 +8,17 @@ services: environment: - VPN_SERVICE_PROVIDER=custom - VPN_TYPE=wireguard - - VPN_ENDPOINT_IP={{ proxy_server_ip }} - - VPN_ENDPOINT_PORT={{ proxy_server_vpn_port }} - - WIREGUARD_PUBLIC_KEY={{ vpn_server_pubkey }} - - WIREGUARD_PRIVATE_KEY={{ penpot_service_privkey }} + - VPN_ENDPOINT_IP=176.58.103.70 + - VPN_ENDPOINT_PORT=51820 + - WIREGUARD_PUBLIC_KEY=ijDPNuiCnYgETt9daFLQVQPHX7efb4OEHm+cV7wLvk4= + - WIREGUARD_PRIVATE_KEY=OOIsjovP2bMsxq3VFUHNNkHMc1ri6PPP/WYO7L+GLk0= - WIREGUARD_ADDRESSES=10.0.0.11/32 - - FIREWALL_VPN_INPUT_PORTS=9001 + - FIREWALL_VPN_INPUT_PORTS=9001,80,5432,6379,25,465,587 + - FIREWALL_INPUT_PORTS=9001,80,5432,6379,25,465,587 + #volumes: + # Custom IPTables forwarding rules to forward TCP(web) traffic from port 11000 to port 80 + # - ./post-rules.txt:/iptables/post-rules.txt + # ports: - "9001:80" networks: @@ -39,7 +41,7 @@ services: - penpot-backend - penpot-exporter - labels: + #labels: #- "traefik.enable=true" ## HTTP: example of labels for the case where penpot will be exposed to the @@ -216,7 +218,7 @@ services: - PENPOT_PUBLIC_URI=http://penpot-frontend ## Redis is used for the websockets notifications. - - PENPOT_REDIS_URI=redis://penpot-redis/0 + - PENPOT_REDIS_URI=redis://11.3.0.23/0 penpot-postgres: image: "postgres:15"