2019-05-20 20:36:31 +02:00
|
|
|
version: '3.5'
|
2018-02-04 17:34:07 +01:00
|
|
|
|
2021-11-09 17:11:14 +01:00
|
|
|
## Development Environment with
|
|
|
|
## - HTTPS Reverse Proxy
|
|
|
|
## - App Dev Container
|
|
|
|
## - MariaDB Database Server
|
|
|
|
## - Keycloak OpenID Connect Provider
|
|
|
|
## - and Dummy Services
|
2018-02-04 17:34:07 +01:00
|
|
|
services:
|
2022-02-08 12:51:12 +01:00
|
|
|
## Traefik HTTPS Reverse Proxy
|
|
|
|
## Includes Let's Encrypt certs for local dev domain "localssl.dev" (all records point to 127.0.0.1)
|
2022-01-06 11:31:37 +01:00
|
|
|
## Docs: https://doc.traefik.io/traefik/
|
|
|
|
traefik:
|
2022-02-21 10:57:10 +01:00
|
|
|
image: photoprism/traefik:20220221
|
2022-01-06 11:31:37 +01:00
|
|
|
ports:
|
|
|
|
# - "80:80" # HTTP (redirects to HTTPS)
|
|
|
|
- "443:443" # HTTPS (required)
|
2022-02-08 12:51:12 +01:00
|
|
|
labels:
|
|
|
|
- "traefik.enable=true"
|
|
|
|
- "traefik.http.routers.traefik.rule=Host(`traefik.localssl.dev`)"
|
|
|
|
- "traefik.http.routers.traefik.tls.domains[0].main=localssl.dev"
|
|
|
|
- "traefik.http.routers.traefik.tls.domains[0].sans=*.localssl.dev"
|
|
|
|
- "traefik.http.routers.traefik.tls=true"
|
|
|
|
- "traefik.http.routers.traefik.tls.certresolver=myresolver"
|
|
|
|
- "traefik.http.routers.traefik.service=api@internal"
|
2022-01-06 11:31:37 +01:00
|
|
|
volumes:
|
2022-02-08 12:51:12 +01:00
|
|
|
- "/var/run/docker.sock:/var/run/docker.sock" # enables Traefik to watch services
|
2022-01-06 11:31:37 +01:00
|
|
|
|
|
|
|
## App Build Environment
|
|
|
|
## Docs: https://docs.photoprism.org/developer-guide/
|
2018-02-28 08:47:50 +01:00
|
|
|
photoprism:
|
2018-09-17 12:11:19 +02:00
|
|
|
build: .
|
2018-11-08 10:56:11 +01:00
|
|
|
image: photoprism/photoprism:develop
|
2021-08-31 18:08:37 +02:00
|
|
|
depends_on:
|
|
|
|
- mariadb
|
2021-11-09 16:55:16 +01:00
|
|
|
- dummy-webdav
|
2020-08-25 14:57:45 +02:00
|
|
|
security_opt:
|
|
|
|
- seccomp:unconfined
|
|
|
|
- apparmor:unconfined
|
2018-02-04 17:34:07 +01:00
|
|
|
ports:
|
2022-02-08 12:51:12 +01:00
|
|
|
- "2342:2342" # default HTTP port (host:container)
|
|
|
|
- "2343:2343" # acceptance Test HTTP port (host:container)
|
2022-01-06 11:31:37 +01:00
|
|
|
- "40000:40000" # Go Debugger (host:container)
|
2019-05-20 20:36:31 +02:00
|
|
|
shm_size: "2gb"
|
2022-01-06 11:31:37 +01:00
|
|
|
links:
|
2022-02-08 12:51:12 +01:00
|
|
|
- "traefik:app.localssl.dev"
|
|
|
|
- "traefik:keycloak.localssl.dev"
|
|
|
|
- "traefik:dummy-webdav.localssl.dev"
|
|
|
|
- "traefik:dummy-oidc.localssl.dev"
|
2022-01-06 11:31:37 +01:00
|
|
|
labels:
|
|
|
|
- "traefik.enable=true"
|
|
|
|
- "traefik.http.services.photoprism.loadbalancer.server.port=2342"
|
|
|
|
- "traefik.http.routers.photoprism.entrypoints=websecure"
|
2022-02-21 11:32:23 +01:00
|
|
|
- "traefik.http.routers.photoprism.rule=Host(`localssl.dev`, `app.localssl.dev`, `photoprism.localssl.dev`)"
|
2022-02-08 12:51:12 +01:00
|
|
|
- "traefik.http.routers.photoprism.tls.domains[0].main=localssl.dev"
|
|
|
|
- "traefik.http.routers.photoprism.tls.domains[0].sans=*.localssl.dev"
|
2022-01-06 11:31:37 +01:00
|
|
|
- "traefik.http.routers.photoprism.tls=true"
|
2018-09-18 15:13:02 +02:00
|
|
|
environment:
|
2022-02-08 12:51:12 +01:00
|
|
|
PHOTOPRISM_UID: ${UID:-1000} # user id, should match your host user id
|
|
|
|
PHOTOPRISM_GID: ${GID:-1000} # group id
|
|
|
|
PHOTOPRISM_ADMIN_PASSWORD: "photoprism" # "admin" password (min 4 characters)
|
2022-01-06 11:31:37 +01:00
|
|
|
## External development server URL incl http:// or https:// and /path, :port is optional
|
2022-02-08 12:51:12 +01:00
|
|
|
PHOTOPRISM_SITE_URL: "https://app.localssl.dev/"
|
2020-05-31 02:09:52 +02:00
|
|
|
PHOTOPRISM_SITE_TITLE: "PhotoPrism"
|
2020-06-25 18:39:48 +02:00
|
|
|
PHOTOPRISM_SITE_CAPTION: "Browse Your Life"
|
2022-01-06 11:31:37 +01:00
|
|
|
PHOTOPRISM_SITE_DESCRIPTION: "AI-Powered Photos App. Tags and finds pictures without getting in your way!"
|
2021-05-15 10:48:37 +02:00
|
|
|
PHOTOPRISM_SITE_AUTHOR: "@photoprism_app"
|
2018-09-18 16:34:08 +02:00
|
|
|
PHOTOPRISM_DEBUG: "true"
|
2019-12-30 12:38:11 +01:00
|
|
|
PHOTOPRISM_READONLY: "false"
|
2020-05-19 12:09:48 +02:00
|
|
|
PHOTOPRISM_PUBLIC: "true"
|
2019-12-30 12:38:11 +01:00
|
|
|
PHOTOPRISM_EXPERIMENTAL: "true"
|
2018-09-18 16:34:08 +02:00
|
|
|
PHOTOPRISM_SERVER_MODE: "debug"
|
2020-04-28 22:49:02 +02:00
|
|
|
PHOTOPRISM_HTTP_HOST: "0.0.0.0"
|
|
|
|
PHOTOPRISM_HTTP_PORT: 2342
|
2022-02-08 12:51:12 +01:00
|
|
|
PHOTOPRISM_HTTP_COMPRESSION: "gzip" # improves transfer speed and bandwidth utilization (none or gzip)
|
2020-05-30 14:52:47 +02:00
|
|
|
PHOTOPRISM_DATABASE_DRIVER: "mysql"
|
2021-08-31 18:08:37 +02:00
|
|
|
PHOTOPRISM_DATABASE_SERVER: "mariadb:4001"
|
2020-12-15 19:47:05 +01:00
|
|
|
PHOTOPRISM_DATABASE_NAME: "photoprism"
|
|
|
|
PHOTOPRISM_DATABASE_USER: "root"
|
|
|
|
PHOTOPRISM_DATABASE_PASSWORD: "photoprism"
|
2020-05-31 02:09:52 +02:00
|
|
|
PHOTOPRISM_TEST_DRIVER: "sqlite"
|
|
|
|
PHOTOPRISM_TEST_DSN: ".test.db"
|
2022-01-16 14:00:37 +01:00
|
|
|
# PHOTOPRISM_TEST_DSN_MYSQL8: "root:photoprism@tcp(mysql:4001)/photoprism?charset=utf8mb4,utf8&collation=utf8mb4_unicode_ci&parseTime=true"
|
2018-09-18 16:34:08 +02:00
|
|
|
PHOTOPRISM_ASSETS_PATH: "/go/src/github.com/photoprism/photoprism/assets"
|
2020-05-31 02:09:52 +02:00
|
|
|
PHOTOPRISM_STORAGE_PATH: "/go/src/github.com/photoprism/photoprism/storage"
|
2020-06-02 15:51:14 +02:00
|
|
|
PHOTOPRISM_ORIGINALS_PATH: "/go/src/github.com/photoprism/photoprism/storage/originals"
|
|
|
|
PHOTOPRISM_IMPORT_PATH: "/go/src/github.com/photoprism/photoprism/storage/import"
|
2022-02-08 12:51:12 +01:00
|
|
|
PHOTOPRISM_DISABLE_CHOWN: "false" # disables storage permission updates on startup
|
|
|
|
PHOTOPRISM_DISABLE_BACKUPS: "false" # don't backup photo and album metadata to YAML files
|
|
|
|
PHOTOPRISM_DISABLE_WEBDAV: "false" # disables built-in WebDAV server
|
|
|
|
PHOTOPRISM_DISABLE_SETTINGS: "false" # disables Settings in Web UI
|
|
|
|
PHOTOPRISM_DISABLE_PLACES: "false" # disables reverse geocoding and maps
|
|
|
|
PHOTOPRISM_DISABLE_EXIFTOOL: "false" # don't create ExifTool JSON files for improved metadata extraction
|
|
|
|
PHOTOPRISM_DISABLE_TENSORFLOW: "false" # don't use TensorFlow for image classification
|
|
|
|
PHOTOPRISM_DETECT_NSFW: "false" # flag photos as private that MAY be offensive (requires TensorFlow)
|
|
|
|
PHOTOPRISM_UPLOAD_NSFW: "false" # allows uploads that may be offensive
|
|
|
|
PHOTOPRISM_DARKTABLE_PRESETS: "false" # enables Darktable presets and disables concurrent RAW conversion
|
|
|
|
PHOTOPRISM_THUMB_FILTER: "lanczos" # resample filter, best to worst: blackman, lanczos, cubic, linear
|
|
|
|
PHOTOPRISM_THUMB_UNCACHED: "true" # enables on-demand thumbnail rendering (high memory and cpu usage)
|
|
|
|
PHOTOPRISM_THUMB_SIZE: 2048 # pre-rendered thumbnail size limit (default 2048, min 720, max 7680)
|
2021-09-29 09:01:57 +02:00
|
|
|
# PHOTOPRISM_THUMB_SIZE: 4096 # Retina 4K, DCI 4K (requires more storage); 7680 for 8K Ultra HD
|
2022-02-08 12:51:12 +01:00
|
|
|
PHOTOPRISM_THUMB_SIZE_UNCACHED: 7680 # on-demand rendering size limit (default 7680, min 720, max 7680)
|
|
|
|
PHOTOPRISM_JPEG_SIZE: 7680 # size limit for converted image files in pixels (720-30000)
|
|
|
|
PHOTOPRISM_JPEG_QUALITY: 92 # set to 95 for high-quality thumbnails (25-100)
|
|
|
|
TF_CPP_MIN_LOG_LEVEL: 0 # show TensorFlow log messages for development
|
2022-01-06 11:31:37 +01:00
|
|
|
## OpenID Connect Provider (pre-configured for local Keycloak test server):
|
2022-02-08 12:51:12 +01:00
|
|
|
PHOTOPRISM_OIDC_ISSUER_URL: "https://keycloak.localssl.dev/auth/realms/master"
|
2022-01-06 11:31:37 +01:00
|
|
|
PHOTOPRISM_OIDC_CLIENT_ID: "photoprism-develop"
|
|
|
|
PHOTOPRISM_OIDC_CLIENT_SECRET: "9d8351a0-ca01-4556-9c37-85eb634869b9"
|
2021-10-25 17:10:50 +02:00
|
|
|
## Enable TensorFlow AVX2 support for modern Intel CPUs (requires starting the container as root):
|
2021-09-29 09:01:57 +02:00
|
|
|
# PHOTOPRISM_INIT: "tensorflow-amd64-avx2"
|
2021-10-25 17:10:50 +02:00
|
|
|
## Hardware video transcoding config (optional):
|
2021-09-29 09:01:57 +02:00
|
|
|
# PHOTOPRISM_FFMPEG_BUFFERS: "64" # FFmpeg capture buffers (default: 32)
|
2021-09-29 10:58:58 +02:00
|
|
|
# PHOTOPRISM_FFMPEG_BITRATE: "32" # FFmpeg encoding bitrate limit in Mbit/s (default: 50)
|
2022-02-08 12:51:12 +01:00
|
|
|
# PHOTOPRISM_FFMPEG_ENCODER: "h264_v4l2m2m" # use Video4Linux for AVC transcoding (default: libx264)
|
|
|
|
# PHOTOPRISM_FFMPEG_ENCODER: "h264_qsv" # use Intel Quick Sync Video for AVC transcoding (default: libx264)
|
2021-09-29 09:01:57 +02:00
|
|
|
# PHOTOPRISM_INIT: "intel-graphics tensorflow-amd64-avx2" # Enable TensorFlow AVX2 & Intel Graphics support
|
2022-02-08 12:51:12 +01:00
|
|
|
# PHOTOPRISM_INIT: "install-updates" # installs general operating system updates
|
2021-10-25 17:10:50 +02:00
|
|
|
## Hardware devices for video transcoding and machine learning (optional):
|
2021-09-29 09:01:57 +02:00
|
|
|
# devices:
|
|
|
|
# - "/dev/video11:/dev/video11" # Video4Linux (h264_v4l2m2m)
|
2022-02-08 12:51:12 +01:00
|
|
|
# - "/dev/dri/renderD128:/dev/dri/renderD128" # Intel GPU
|
2021-09-29 10:23:09 +02:00
|
|
|
# - "/dev/dri/card0:/dev/dri/card0"
|
2021-09-29 09:01:57 +02:00
|
|
|
working_dir: "/go/src/github.com/photoprism/photoprism"
|
|
|
|
volumes:
|
|
|
|
- ".:/go/src/github.com/photoprism/photoprism"
|
|
|
|
- "go-mod:/go/pkg/mod"
|
2021-08-31 18:08:37 +02:00
|
|
|
|
2021-11-09 17:11:14 +01:00
|
|
|
## MariaDB Database Server
|
|
|
|
## Docs: https://mariadb.com/docs/reference/cs10.6/
|
2021-08-31 18:08:37 +02:00
|
|
|
mariadb:
|
2021-10-21 15:16:02 +02:00
|
|
|
image: mariadb:10.6
|
2021-09-24 09:26:48 +02:00
|
|
|
command: mysqld --port=4001 --transaction-isolation=READ-COMMITTED --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci --max-connections=512 --innodb-rollback-on-timeout=OFF --innodb-lock-wait-timeout=120
|
2019-05-20 16:39:41 +02:00
|
|
|
expose:
|
|
|
|
- "4001"
|
2019-04-26 04:12:55 +02:00
|
|
|
ports:
|
2022-02-08 12:51:12 +01:00
|
|
|
- "4001:4001" # database port (host:container)
|
2020-05-08 19:34:29 +02:00
|
|
|
volumes:
|
2022-01-06 11:31:37 +01:00
|
|
|
- "./scripts/sql/mariadb-init.sql:/docker-entrypoint-initdb.d/init.sql"
|
2018-02-04 17:34:07 +01:00
|
|
|
environment:
|
|
|
|
MYSQL_ROOT_PASSWORD: photoprism
|
|
|
|
MYSQL_USER: photoprism
|
|
|
|
MYSQL_PASSWORD: photoprism
|
2019-04-26 04:12:55 +02:00
|
|
|
MYSQL_DATABASE: photoprism
|
2020-03-27 11:01:41 +01:00
|
|
|
|
2022-01-06 11:31:37 +01:00
|
|
|
## Keycloak OpenID Connect Provider
|
2022-02-13 19:32:22 +01:00
|
|
|
## Admin Account: admin / photoprism
|
|
|
|
## User Account: user / photoprism
|
2022-01-06 11:31:37 +01:00
|
|
|
keycloak:
|
2022-02-13 19:32:22 +01:00
|
|
|
image: quay.io/keycloak/keycloak:17.0.0
|
|
|
|
command: "start-dev" # development mode, don't use this in production!
|
2022-01-06 11:31:37 +01:00
|
|
|
links:
|
2022-02-08 12:51:12 +01:00
|
|
|
- "traefik:app.localssl.dev"
|
2022-01-06 11:31:37 +01:00
|
|
|
labels:
|
|
|
|
- "traefik.enable=true"
|
|
|
|
- "traefik.http.services.keycloak.loadbalancer.server.port=8080"
|
|
|
|
- "traefik.http.routers.keycloak.entrypoints=websecure"
|
2022-02-08 12:51:12 +01:00
|
|
|
- "traefik.http.routers.keycloak.rule=Host(`keycloak.localssl.dev`)"
|
|
|
|
- "traefik.http.routers.keycloak.tls.domains[0].main=localssl.dev"
|
|
|
|
- "traefik.http.routers.keycloak.tls.domains[0].sans=*.localssl.dev"
|
2022-01-06 11:31:37 +01:00
|
|
|
- "traefik.http.routers.keycloak.tls=true"
|
2022-02-13 19:32:22 +01:00
|
|
|
environment: # see https://www.keycloak.org/server/all-config
|
|
|
|
KEYCLOAK_ADMIN: "admin"
|
|
|
|
KEYCLOAK_ADMIN_PASSWORD: "photoprism"
|
|
|
|
KC_METRICS_ENABLED: "false"
|
|
|
|
KC_HOSTNAME: "keycloak.localssl.dev"
|
|
|
|
KC_HOSTNAME_STRICT: "false"
|
|
|
|
KC_PROXY: "edge"
|
|
|
|
KC_DB: "mariadb"
|
|
|
|
KC_DB_URL: "jdbc:mariadb://mariadb:4001/keycloak"
|
|
|
|
KC_DB_USERNAME: "keycloak"
|
|
|
|
KC_DB_PASSWORD: "keycloak"
|
2022-01-06 11:31:37 +01:00
|
|
|
|
2021-11-09 16:55:16 +01:00
|
|
|
## Dummy WebDAV Server
|
|
|
|
dummy-webdav:
|
2022-01-06 11:31:37 +01:00
|
|
|
image: photoprism/dummy-webdav:20211218
|
2021-11-09 16:55:16 +01:00
|
|
|
environment:
|
|
|
|
WEBDAV_USERNAME: admin
|
|
|
|
WEBDAV_PASSWORD: photoprism
|
2022-01-06 11:31:37 +01:00
|
|
|
labels:
|
|
|
|
- "traefik.enable=true"
|
|
|
|
- "traefik.http.services.dummy-webdav.loadbalancer.server.port=80"
|
|
|
|
- "traefik.http.routers.dummy-webdav.entrypoints=websecure"
|
2022-02-08 12:51:12 +01:00
|
|
|
- "traefik.http.routers.dummy-webdav.rule=Host(`dummy-webdav.localssl.dev`)"
|
|
|
|
- "traefik.http.routers.dummy-webdav.tls.domains[0].main=localssl.dev"
|
|
|
|
- "traefik.http.routers.dummy-webdav.tls.domains[0].sans=*.localssl.dev"
|
2022-01-06 11:31:37 +01:00
|
|
|
- "traefik.http.routers.dummy-webdav.tls=true"
|
|
|
|
|
|
|
|
## Dummy OpenID Connect Server
|
|
|
|
dummy-oidc:
|
|
|
|
image: photoprism/dummy-oidc:20211218
|
|
|
|
labels:
|
|
|
|
- "traefik.enable=true"
|
|
|
|
- "traefik.http.services.dummy-oidc.loadbalancer.server.port=9998"
|
|
|
|
- "traefik.http.routers.dummy-oidc.entrypoints=websecure"
|
2022-02-08 12:51:12 +01:00
|
|
|
- "traefik.http.routers.dummy-oidc.rule=Host(`dummy-oidc.localssl.dev`)"
|
|
|
|
- "traefik.http.routers.dummy-oidc.tls.domains[0].main=localssl.dev"
|
|
|
|
- "traefik.http.routers.dummy-oidc.tls.domains[0].sans=*.localssl.dev"
|
2022-01-06 11:31:37 +01:00
|
|
|
- "traefik.http.routers.dummy-oidc.tls=true"
|
2020-05-19 12:09:48 +02:00
|
|
|
|
2022-01-06 11:31:37 +01:00
|
|
|
## Create named volume for Go module cache
|
2020-05-19 12:09:48 +02:00
|
|
|
volumes:
|
|
|
|
go-mod:
|
|
|
|
driver: local
|
2021-09-23 23:46:17 +02:00
|
|
|
|
2022-01-06 11:31:37 +01:00
|
|
|
## Create shared "photoprism-develop" network for connecting with services in other docker-compose.yml files
|
2021-09-23 23:46:17 +02:00
|
|
|
networks:
|
|
|
|
default:
|
2022-01-06 11:31:37 +01:00
|
|
|
name: photoprism-develop
|
2021-09-23 23:46:17 +02:00
|
|
|
driver: bridge
|