add ghost, radicale, make paperless public, add vps link

project/service/paperless-ngx/paperless-ngx.yml

@@ -8,7 +8,7 @@ services:
     ports:
       - "4009:8000"
     networks:
-      - ip4net
+      - ip6net
     volumes:
       - ${EXTERNAL_STORAGE}/paperless-ngx/data:/usr/src/paperless/data
       - ${EXTERNAL_STORAGE}/paperless-ngx/media:/usr/src/paperless/media
@@ -23,23 +23,27 @@ services:
       PAPERLESS_DBUSER: paperless
       PAPERLESS_DBPASS: ${PAPERLESS_DB_PASSWORD}
       # Paperless var
-      PAPERLESS_URL: https://paperless.${LOCAL_DOMAIN}
-      PAPERLESS_ALLOWED_HOSTS: ${LOCAL_DOMAIN}
+      PAPERLESS_URL: https://paperless.${PUBLIC_DOMAIN}
+      PAPERLESS_ALLOWED_HOSTS: ${PUBLIC_DOMAIN},192.168.1.38,"2a04:ee41:86:9397:844f:f9ff:fe5c:e416"
       PAPERLESS_OCR_LANGUAGE: fra+eng+deu
       # Admin user when not OIDC
       PAPERLESS_ADMIN_USER: chris
       PAPERLESS_ADMIN_PASSWORD: ${PAPERLESS_ADMIN_PASSWORD}
-      # # OIDC
+      # OIDC
+      # PAPERLESS_DISABLE_REGULAR_LOGIN: true
       # PAPERLESS_ENABLE_HTTP_REMOTE_USER: true
-      # PAPERLESS_ACCOUNT_ALLOW_SIGNUPS: false
-      # PAPERLESS_LOGOUT_REDIRECT_URL: https://auth.${PUBLIC_DOMAIN}
+      # PAPERLESS_HTTP_REMOTE_USER_HEADER_NAME: HTTP_REMOTE_USER
+      # PAPERLESS_LOGOUT_REDIRECT_URL: https://auth.crescentec.xyz/logout
+      # PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
+      # PAPERLESS_SOCIALACCOUNT_PROVIDERS: '{"openid_connect":{"SCOPE":["openid","profile","email"],"OAUTH_PKCE_ENABLED":true,"APPS":[{"provider_id":"authelia","name":"Authelia","client_id":"paperless","secret":"jzO0JYA35oOojGqxFJUaDXdgdXhuACyq4b3lvOx233wtoSyv19prQfCKah1mwyDv","settings":{"server_url":"https://auth.crescentec.xyz","token_auth_method":"client_secret_basic"}}]}}'
     labels:
       # Watchtower
       - "com.centurylinklabs.watchtower.enable=true"
       # Traefik
       - "traefik.enable=true"
-      - "traefik.http.routers.paperless.rule=Host(`paperless.${LOCAL_DOMAIN}`)"
+      - "traefik.http.routers.paperless.rule=Host(`paperless.${PUBLIC_DOMAIN}`)"
       - "traefik.http.routers.paperless.entrypoints=https"
+      - "traefik.http.routers.paperless.tls.certresolver=myresolver"
       - "traefik.http.routers.paperless.tls=true"
-      # # Middlewares
-      # - "traefik.http.routers.paperless.middlewares=authelia@file"
+      # Middlewares
+      - "traefik.http.routers.paperless.middlewares=crowdsec-bouncer@file"