jpscott84/drinktracker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Switch to host networking for Proxmox LXC compatibility

Browse Source 
network_mode: host avoids Docker creating separate network namespaces
which trigger sysctl writes blocked in LXC containers. All service
references updated from container names to localhost.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
JP Scott
2026-03-01 15:37:14 -07:00
parent c401c8f2e0
commit 4ed53d0fd7
2 changed files with 12 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
docker-compose.prod.yml
View File

@@ -2,7 +2,7 @@ services:
db: db:
image: postgres:16-alpine image: postgres:16-alpine
restart: unless-stopped restart: unless-stopped
privileged: true network_mode: host
security_opt: security_opt:
- apparmor:unconfined - apparmor:unconfined
environment: environment:
@@ -12,7 +12,7 @@ services:
volumes: volumes:
- pgdata:/var/lib/postgresql/data - pgdata:/var/lib/postgresql/data
healthcheck: healthcheck:
test: ["CMD-SHELL", "pg_isready -U drinktracker -d drinktracker"] test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-drinktracker} -d ${POSTGRES_DB:-drinktracker}"]
interval: 5s interval: 5s
timeout: 5s timeout: 5s
retries: 5 retries: 5
@@ -20,7 +20,7 @@ services:
minio: minio:
image: minio/minio:latest image: minio/minio:latest
restart: unless-stopped restart: unless-stopped
privileged: true network_mode: host
security_opt: security_opt:
- apparmor:unconfined - apparmor:unconfined
environment: environment:
@@ -37,7 +37,7 @@ services:
minio-init: minio-init:
image: minio/mc:latest image: minio/mc:latest
privileged: true network_mode: host
security_opt: security_opt:
- apparmor:unconfined - apparmor:unconfined
depends_on: depends_on:
@@ -48,7 +48,7 @@ services:
MINIO_SECRET_KEY: ${MINIO_SECRET_KEY} MINIO_SECRET_KEY: ${MINIO_SECRET_KEY}
entrypoint: > entrypoint: >
/bin/sh -c " /bin/sh -c "
mc alias set local http://minio:9000 $$MINIO_ACCESS_KEY $$MINIO_SECRET_KEY; mc alias set local http://localhost:9000 $$MINIO_ACCESS_KEY $$MINIO_SECRET_KEY;
mc mb local/drink-images --ignore-existing; mc mb local/drink-images --ignore-existing;
mc anonymous set download local/drink-images; mc anonymous set download local/drink-images;
exit 0; exit 0;
@@ -56,7 +56,7 @@ services:
migrate: migrate:
image: node:20-alpine image: node:20-alpine
privileged: true network_mode: host
security_opt: security_opt:
- apparmor:unconfined - apparmor:unconfined
depends_on: depends_on:
@@ -70,18 +70,16 @@ services:
env_file: env_file:
- .env.production - .env.production
environment: environment:
DATABASE_URL: "postgresql://${POSTGRES_USER:-drinktracker}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB:-drinktracker}" DATABASE_URL: "postgresql://${POSTGRES_USER:-drinktracker}:${POSTGRES_PASSWORD}@localhost:5432/${POSTGRES_DB:-drinktracker}"
command: sh -c "npm install prisma @prisma/client --silent && npx prisma db push --skip-generate --accept-data-loss" command: sh -c "npm install prisma @prisma/client --silent && npx prisma db push --skip-generate --accept-data-loss"
restart: "no" restart: "no"
app: app:
image: jpscott84/drinktracker:latest image: jpscott84/drinktracker:latest
restart: unless-stopped restart: unless-stopped
privileged: true network_mode: host
security_opt: security_opt:
- apparmor:unconfined - apparmor:unconfined
ports:
- "3000:3000"
depends_on: depends_on:
db: db:
condition: service_healthy condition: service_healthy
@@ -92,8 +90,8 @@ services:
env_file: env_file:
- .env.production - .env.production
environment: environment:
DATABASE_URL: "postgresql://${POSTGRES_USER:-drinktracker}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB:-drinktracker}" DATABASE_URL: "postgresql://${POSTGRES_USER:-drinktracker}:${POSTGRES_PASSWORD}@localhost:5432/${POSTGRES_DB:-drinktracker}"
MINIO_ENDPOINT: "minio" MINIO_ENDPOINT: "localhost"
volumes: volumes:
pgdata: pgdata:

4
install.sh
View File

@@ -253,7 +253,7 @@ if [[ "$SKIP_CONFIG" == "false" ]]; then
prompt_value GITHUB_CS "GitHub Client Secret" "" prompt_value GITHUB_CS "GitHub Client Secret" ""
# Build DATABASE_URL # Build DATABASE_URL
DATABASE_URL="postgresql://${PG_USER}:${PG_PASSWORD}@db:5432/${PG_DB}" DATABASE_URL="postgresql://${PG_USER}:${PG_PASSWORD}@localhost:5432/${PG_DB}"
# ─── Step 4: Write .env.production ─────────────────────── # ─── Step 4: Write .env.production ───────────────────────
@@ -278,7 +278,7 @@ GITHUB_CLIENT_ID="${GITHUB_CID}"
GITHUB_CLIENT_SECRET="${GITHUB_CS}" GITHUB_CLIENT_SECRET="${GITHUB_CS}"
# ─── MinIO / S3-compatible storage ─────────────────────── # ─── MinIO / S3-compatible storage ───────────────────────
MINIO_ENDPOINT="minio" MINIO_ENDPOINT="localhost"
MINIO_PORT="9000" MINIO_PORT="9000"
MINIO_ACCESS_KEY="${MINIO_AK}" MINIO_ACCESS_KEY="${MINIO_AK}"
MINIO_SECRET_KEY="${MINIO_SK}" MINIO_SECRET_KEY="${MINIO_SK}"