IO-2221 IO-2323 Correct Download/Delete/Move functions

readme.md

@@ -28,43 +28,136 @@ reverse_proxy ims:8000
 }
 ```
 
-## Sample Docker Compose file.
+## Sample Docker Compose file
 
 ```docker
 version: '2'
-services:
-  ims:
+
+services: 
+  traefik:
+    container_name: traefik-ims
+    image: traefik:latest
+    restart: always
+    init: true
+    command: # CLI arguments
+      - --global.checkNewVersion=true
+      - --global.sendAnonymousUsage=false
+      - --pilot.dashboard=false
+      - --entrypoints.https.address=:10443
+      - --entrypoints.https.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/12,172.64.0.0/13,131.0.72.0/22,2400:cb00::/32,2606:4700::/32,2803:f800::/32,2405:b500::/32,2405:8100::/32,2a06:98c0::/29,2c0f:f248::/32
+      - --log=true
+      - --log.level=ERROR # (Default: error) DEBUG, INFO, WARN, ERROR, FATAL, PANIC
+      - --providers.docker=true
+      - --providers.docker.exposedbydefault=false
+      - --providers.docker.network=t2_proxy
+      - --certificatesResolvers.dns-cloudflare.acme.email=cloudflare@thinkimex.com
+      - --certificatesResolvers.dns-cloudflare.acme.storage=/acme.json
+      - --certificatesResolvers.dns-cloudflare.acme.keyType=EC384
+      - --certificatesResolvers.dns-cloudflare.acme.dnsChallenge.provider=cloudflare
+      - --certificatesresolvers.dns-cloudflare.acme.dnschallenge.resolvers=1.1.1.1:53,1.0.0.1:53,2606:4700:4700::1111:53,2606:4700:4700::1001:53
+      - --certificatesResolvers.dns-cloudflare.acme.dnsChallenge.delayBeforeCheck=90 # To delay DNS check and reduce LE hitrate
+    networks:
+      t2_proxy:
+        ipv4_address: 192.168.90.254
     ports:
-      - 8000:8000
+      - target: 10443
+        published: 10443
+        protocol: tcp
+        mode: host
+    environment:
+      - TZ=America/Vancouver
+      - CF_API_EMAIL=cloudflare@thinkimex.com
+      - CF_DNS_API_TOKEN=b8BWRbkJckVK0IG6600Iq5AYx4HYZ7dLzDWUOZ2D
     volumes:
-      - ~:/root
-      - "C:\\IMS:/media"
-     #- "/Users/pfic/Desktop/ISM:/media"
+      - "/var/run/docker.sock:/var/run/docker.sock:ro"
+      - /home/imex/ims/traefik/acme/acme.json:/acme.json # cert location - you must touch this file and change permissions to 600
+    labels:
+      - "traefik.enable=false"
+  cf-ddns:
+    container_name: cf-ddns
+    image: oznu/cloudflare-ddns:latest
+    networks:
+      - t2_proxy
+    restart: always
+    environment:
+      - API_KEY=b8BWRbkJckVK0IG6600Iq5AYx4HYZ7dLzDWUOZ2D
+      - ZONE=imexmedia.ca
+      - SUBDOMAIN=fastrack
+      - PROXIED=false
+      - RRTYPE=A
+      - DELETE_ON_STOP=false
+      - DNS_SERVER=1.1.1.1
+    labels:
+      - "traefik.enable=false"
+  ims:
+    container_name: ims
+    networks:
+      - t2_proxy
+    volumes:
+      - /mnt/ims:/media
     environment:
       - MEDIA_PATH=/media
-      - DUPLICATE_BILL_TO_VENDOR=false
-      - IMS_TOKEN=ThisIsAnImEXSecretTokenToBeSent
+      - DUPLICATE_BILL_TO_VENDOR=true
+      - IMS_TOKEN=6Q9pjF5wFQ2grGyom2rvRPXnkKZDA3BvfNK2J5qQXVuyxTFhjHVX6zwWeYDw3GLAk
+      - CONVERT_QUALITY=0.8
+      - KEEP_CONVERTED_ORIGINALS=TRUE
     image: imexonline/media-server:latest
-    #image: imexonline/media-server:beta
-    restart: unless-stopped
+    restart: always
+    labels:
+      - "traefik.enable=true"
+      # HTTP Routers
+      - "traefik.http.routers.ims-rtr.entrypoints=https"
+      - "traefik.http.routers.ims-rtr.rule=Host(`fastrack.imexmedia.ca`)"
+      - "traefik.http.routers.ims-rtr.tls.certresolver=dns-cloudflare"
+      ## HTTP Services
+      - "traefik.http.routers.ims-rtr.service=ims-svc"
+      - "traefik.http.services.ims-svc.loadbalancer.server.port=8000"
+  dozzle:
+    container_name: logs
+    image: amir20/dozzle:latest
+    restart: always
+    networks:
+      - t2_proxy
+    ports:
+      - "8080:8080"
+    security_opt:
+      - no-new-privileges:true
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    environment:
+      DOZZLE_LEVEL: info
+      DOZZLE_TAILSIZE: 300
+      DOZZLE_FILTER: "status=running"
+      DOZZLE_NO_ANALYTICS: "true"
   watchtower:
+    container_name: watchtower-ims
     image: containrrr/watchtower
+    networks:
+      - t2_proxy
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-      - /root/.docker/config.json:/config.json
-    command: --interval 3600
-  caddy:
-      image: caddy/caddy:latest
-      container_name: caddy-service
-      restart: unless-stopped
-      ports:
-          - "80:80"
-          - "443:443"
-      volumes:
-      - $PWD/Caddyfile:/etc/caddy/Caddyfile
-      - caddy_data:/data
-      - caddy_config:/config
-volumes:
-  caddy_data:
-  caddy_config:
+    environment:
+      - TZ=America/Vancouver
+      - WATCHTOWER_CLEANUP=true
+      - WATCHTOWER_REMOVE_VOLUMES=true
+      - WATCHTOWER_INCLUDE_STOPPED=true
+      - WATCHTOWER_INCLUDE_RESTARTING=true
+      - WATCHTOWER_NO_STARTUP_MESSAGE=false
+      - WATCHTOWER_REVIVE_STOPPED=true
+      - WATCHTOWER_ROLLING_RESTART=true
+      - WATCHTOWER_TIMEOUT=60s
+      - WATCHTOWER_POLL_INTERVAL=3600
+    restart: unless-stopped
+    labels:
+      - "traefik.enable=false"
+
+networks:
+  t2_proxy:
+    name: t2_proxy
+    driver: bridge
+    ipam:
+      config:
+        - subnet: 192.168.90.0/24
 ```