953a9d52af
Domain Strategy: - fig.systems: Homelab services only (removed edfig.dev fallback from all services) - edfig.dev: Professional/public sites (personal site, blog) - figgy.foo: Experimental/private content (SSO protected) Removed edfig.dev Fallbacks: - Updated 22 compose files to remove || Host(...edfig.dev) pattern - All homelab services now use fig.systems only - Traefik email remains admin@edfig.dev Added Caddy Static Sites Service: - compose/services/static-sites/ with Caddy 2 - Serves three domains with different configurations: * edfig.dev (personal/professional) - Public, no SSO * blog.edfig.dev (blog) - Public, Markdown rendering, templates * figgy.foo (experimental) - SSO protected, directory browsing - Example sites with modern, responsive designs - Comprehensive README with usage examples - Auto-reload on config changes (no restarts needed) Features: - Markdown rendering (write .md, serves as HTML) - Go templates for dynamic content - Directory browsing (figgy.foo) - Automatic gzip compression - Static asset caching - Zero-downtime config reloads Updated Documentation: - README.md: Added domain strategy section, static sites in directory structure - README.md: Added static sites to service URLs table - README.md: Updated deployment instructions
123 lines
3 KiB
YAML
123 lines
3 KiB
YAML
# Centralized Logging Stack - Loki + Promtail + Grafana
|
|
# Docs: https://grafana.com/docs/loki/latest/
|
|
|
|
services:
|
|
loki:
|
|
container_name: loki
|
|
image: grafana/loki:2.9.3
|
|
restart: unless-stopped
|
|
|
|
env_file:
|
|
- .env
|
|
|
|
volumes:
|
|
- ./loki-config.yaml:/etc/loki/local-config.yaml:ro
|
|
- ./loki-data:/loki
|
|
|
|
command: -config.file=/etc/loki/local-config.yaml
|
|
|
|
networks:
|
|
- homelab
|
|
- logging_internal
|
|
|
|
labels:
|
|
# Traefik (for API access)
|
|
traefik.enable: true
|
|
traefik.docker.network: homelab
|
|
|
|
# Loki API
|
|
traefik.http.routers.loki.rule: Host(`loki.fig.systems`)
|
|
traefik.http.routers.loki.entrypoints: websecure
|
|
traefik.http.routers.loki.tls.certresolver: letsencrypt
|
|
traefik.http.services.loki.loadbalancer.server.port: 3100
|
|
|
|
# SSO Protection
|
|
traefik.http.routers.loki.middlewares: tinyauth
|
|
|
|
# Homarr Discovery
|
|
homarr.name: Loki (Logs)
|
|
homarr.group: Monitoring
|
|
homarr.icon: mdi:math-log
|
|
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:3100/ready || exit 1"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
promtail:
|
|
container_name: promtail
|
|
image: grafana/promtail:2.9.3
|
|
restart: unless-stopped
|
|
|
|
env_file:
|
|
- .env
|
|
|
|
volumes:
|
|
- ./promtail-config.yaml:/etc/promtail/config.yaml:ro
|
|
- /var/log:/var/log:ro
|
|
- /var/lib/docker/containers:/var/lib/docker/containers:ro
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
|
|
command: -config.file=/etc/promtail/config.yaml
|
|
|
|
networks:
|
|
- logging_internal
|
|
|
|
depends_on:
|
|
loki:
|
|
condition: service_healthy
|
|
|
|
grafana:
|
|
container_name: grafana
|
|
image: grafana/grafana:10.2.3
|
|
restart: unless-stopped
|
|
|
|
env_file:
|
|
- .env
|
|
|
|
volumes:
|
|
- ./grafana-data:/var/lib/grafana
|
|
- ./grafana-provisioning:/etc/grafana/provisioning
|
|
|
|
networks:
|
|
- homelab
|
|
- logging_internal
|
|
|
|
depends_on:
|
|
loki:
|
|
condition: service_healthy
|
|
|
|
labels:
|
|
# Traefik
|
|
traefik.enable: true
|
|
traefik.docker.network: homelab
|
|
|
|
# Grafana Web UI
|
|
traefik.http.routers.grafana.rule: Host(`logs.fig.systems`)
|
|
traefik.http.routers.grafana.entrypoints: websecure
|
|
traefik.http.routers.grafana.tls.certresolver: letsencrypt
|
|
traefik.http.services.grafana.loadbalancer.server.port: 3000
|
|
|
|
# SSO Protection (optional - Grafana has its own auth)
|
|
# traefik.http.routers.grafana.middlewares: tinyauth
|
|
|
|
# Homarr Discovery
|
|
homarr.name: Grafana (Logs Dashboard)
|
|
homarr.group: Monitoring
|
|
homarr.icon: mdi:chart-line
|
|
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:3000/api/health || exit 1"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
networks:
|
|
homelab:
|
|
external: true
|
|
logging_internal:
|
|
name: logging_internal
|
|
driver: bridge
|