53 lines
2.0 KiB
YAML
53 lines
2.0 KiB
YAML
# Dynamic DNS Updater
|
|
# Updates DNS records when public IP changes
|
|
# Deployed on Atlantis - updates all homelab domains
|
|
version: '3.8'
|
|
|
|
services:
|
|
# vish.gg (proxied domains - all public services)
|
|
ddns-vish-proxied:
|
|
image: favonia/cloudflare-ddns:latest
|
|
network_mode: host
|
|
restart: always
|
|
user: "1026:100"
|
|
read_only: true
|
|
cap_drop: [all]
|
|
security_opt: [no-new-privileges:true]
|
|
environment:
|
|
- CLOUDFLARE_API_TOKEN="REDACTED_TOKEN"
|
|
# Main domains + Calypso services (sf, dav, actual, docs, ost, retro)
|
|
- DOMAINS=vish.gg,www.vish.gg,cal.vish.gg,dash.vish.gg,gf.vish.gg,git.vish.gg,kuma.vish.gg,mastodon.vish.gg,mx.vish.gg,npm.vish.gg,ntfy.vish.gg,ollama.vish.gg,paperless.vish.gg,pw.vish.gg,rackula.vish.gg,reddit.vish.gg,rx.vish.gg,rxdl.vish.gg,rxv4access.vish.gg,rxv4download.vish.gg,scrutiny.vish.gg,sso.vish.gg,vp.vish.gg,sf.vish.gg,dav.vish.gg,actual.vish.gg,docs.vish.gg,ost.vish.gg,retro.vish.gg,wizarr.vish.gg
|
|
- PROXIED=true
|
|
|
|
# thevish.io (proxied domains)
|
|
ddns-thevish-proxied:
|
|
image: favonia/cloudflare-ddns:latest
|
|
network_mode: host
|
|
restart: always
|
|
user: "1026:100"
|
|
read_only: true
|
|
cap_drop: [all]
|
|
security_opt: [no-new-privileges:true]
|
|
environment:
|
|
- CLOUDFLARE_API_TOKEN="REDACTED_TOKEN"
|
|
# Removed: documenso.thevish.io, *.vps.thevish.io (deleted)
|
|
# Added: binterest, hoarder (now proxied)
|
|
# meet.thevish.io moved here: CF proxy enabled Jan 2026 (NPM migration)
|
|
- DOMAINS=www.thevish.io,joplin.thevish.io,matrix.thevish.io,binterest.thevish.io,hoarder.thevish.io,meet.thevish.io
|
|
- PROXIED=true
|
|
|
|
# thevish.io (unproxied domains - special protocols)
|
|
ddns-thevish-unproxied:
|
|
image: favonia/cloudflare-ddns:latest
|
|
network_mode: host
|
|
restart: always
|
|
user: "1026:100"
|
|
read_only: true
|
|
cap_drop: [all]
|
|
security_opt: [no-new-privileges:true]
|
|
environment:
|
|
- CLOUDFLARE_API_TOKEN="REDACTED_TOKEN"
|
|
# turn.thevish.io - TURN/STUN protocol needs direct connection
|
|
- DOMAINS=turn.thevish.io
|
|
- PROXIED=false
|