compose.yml

# Needed environment variables:
# - MANYFOLD_DATABASE_PASSWORD: A password for the manyfold database.
# - MANYFOLD_SECRET_KEY_BASE: Base to use for secret key generation.
services:
  manyfold:
    container_name: manyfold
    image: ghcr.io/manyfold3d/manyfold:latest
    depends_on:
      - manyfold-db
      - manyfold-cache
    pull_policy: build
    restart: unless-stopped
    environment:
      DATABASE_URL: mysql2://manyfold:${MANYFOLD_DATABASE_PASSWORD}@manyfold-db:3306/manyfold?pool=16
      SECRET_KEY_BASE: ${MANYFOLD_SECRET_KEY_BASE}
      REDIS_URL: redis://manyfold-cache:6379/1
      PUID: 1000
      PGID: 1000
    networks:
      - manyfold
      - proxy
      - tunnel
    volumes:
      - /mnt/lilin/resources/3d-models:/libraries
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - DAC_OVERRIDE
      - SETUID
      - SETGID
    labels:
      - com.centurylinklabs.watchtower.enable=true
      - traefik.enable=true
      - traefik.http.routers.manyfold.rule=Host(`manyfold.iscariot.nervhq.io`)
      - traefik.http.routers.manyfold.entrypoints=websecure
      - traefik.http.routers.manyfold.tls.certresolver=cloudflare
      - traefik.http.services.manyfold.loadbalancer.server.port=3214
  manyfold-db:
    container_name: manyfold-db
    image: mariadb:latest
    pull_policy: build
    restart: unless-stopped
    environment:
      - MYSQL_ROOT_PASSWORD=${MANYFOLD_DATABASE_PASSWORD} # Use a unique, secure password
      - MYSQL_DATABASE=manyfold
      - MYSQL_USER=manyfold
      - MYSQL_PASSWORD=${MANYFOLD_DATABASE_PASSWORD}
    networks:
      - manyfold
    volumes:
      - /appdata/manyfold/db/mysql:/var/lib/mysql
    labels:
      - com.centurylinklabs.watchtower.enable=true
  manyfold-cache:
    container_name: manyfold-cache
    image: redis:8
    pull_policy: build
    restart: unless-stopped
    networks:
      - manyfold
    labels:
      - com.centurylinklabs.watchtower.enable=true
networks:
  manyfold:
    name: manyfold
    driver: bridge
  proxy:
    external: true
  tunnel:
    external: true