Initial commit

etc/services/core/compose.yml

@@ -0,0 +1,41 @@
+services:
+  postgres:
+    image: docker.io/postgres:16.3-alpine
+    user: ${UID}:${GID}
+    restart: unless-stopped
+    environment:
+     POSTGRES_USER: synapse
+     POSTGRES_PASSWORD: synapse-password
+     POSTGRES_DB: homeserver
+     POSTGRES_INITDB_ARGS: --lc-collate C --lc-ctype C --encoding UTF8
+    volumes:
+    - ./postgres:/var/lib/postgresql/data
+    - /etc/passwd:/etc/passwd:ro
+
+  synapse:
+    image: ghcr.io/element-hq/synapse:v1.114.0
+    user: "${UID}:${GID}"
+    restart: unless-stopped
+    entrypoint: python
+    command: "-m synapse.app.homeserver -c /config/homeserver.yaml"
+    ports:
+    - "${SERVICE_SYNAPSE_BIND_PORT_CLIENT_API}:8008"
+    - "${SERVICE_SYNAPSE_BIND_PORT_FEDERATION_API}:8008"
+    volumes:
+    - ../../etc/services/core/synapse/config:/config:ro
+    - ./synapse/media-store:/media-store
+
+  element-web:
+    image: docker.io/vectorim/element-web:v1.11.77
+    user: "${UID}:${GID}"
+    restart: unless-stopped
+    ports:
+      - "${SERVICE_ELEMENT_WEB_BIND_PORT_HTTP}:8080"
+    volumes:
+    - ../../etc/services/core/element-web/nginx.conf:/etc/nginx/nginx.conf:ro
+    - ../../etc/services/core/element-web/config.json:/app/config.json:ro
+
+networks:
+  default:
+    name: ${NETWORK_NAME}
+    external: true

etc/services/core/element-web/config.json

@@ -0,0 +1,13 @@
+{
+    "default_hs_url": "http://synapse.127.0.0.1.nip.io:42020",
+    "default_is_url": "https://vector.im",
+    "integrations_ui_url": "https://scalar.vector.im/",
+    "integrations_rest_url": "https://scalar.vector.im/api",
+    "bug_report_endpoint_url": "https://riot.im/bugreports/submit",
+    "enableLabs": true,
+    "roomDirectory": {
+        "servers": [
+            "matrix.org"
+        ]
+    }
+}

etc/services/core/element-web/nginx.conf

@@ -0,0 +1,60 @@
+# This is a custom nginx configuration file that we use in the container (instead of the default one),
+# because it allows us to run nginx with a non-root user.
+#
+# For this to work, the default vhost file (`/etc/nginx/conf.d/default.conf`) also needs to be removed.
+# (mounting `/dev/null` over `/etc/nginx/conf.d/default.conf` works well)
+#
+# The following changes have been done compared to a default nginx configuration file:
+# - default server port is changed (80 -> 8080), so that a non-root user can bind it
+# - various temp paths are changed to `/tmp`, so that a non-root user can write to them
+# - the `user` directive was removed, as we don't want nginx to switch users
+
+worker_processes  1;
+
+error_log /var/log/nginx/error.log warn;
+pid /tmp/nginx.pid;
+
+
+events {
+	worker_connections  1024;
+}
+
+
+http {
+	client_body_temp_path /tmp/client_body_temp;
+	proxy_temp_path /tmp/proxy_temp;
+	fastcgi_temp_path /tmp/fastcgi_temp;
+	uwsgi_temp_path /tmp/uwsgi_temp;
+	scgi_temp_path /tmp/scgi_temp;
+
+	include       /etc/nginx/mime.types;
+	default_type  application/octet-stream;
+
+	log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+					  '$status $body_bytes_sent "$http_referer" '
+					  '"$http_user_agent" "$http_x_forwarded_for"';
+
+	access_log  /var/log/nginx/access.log  main;
+
+	sendfile        on;
+	#tcp_nopush     on;
+
+	keepalive_timeout  65;
+
+	#gzip  on;
+
+	server {
+		listen       8080;
+		server_name  localhost;
+
+		location / {
+			root   /usr/share/nginx/html;
+			index  index.html index.htm;
+		}
+
+		error_page   500 502 503 504  /50x.html;
+		location = /50x.html {
+			root   /usr/share/nginx/html;
+		}
+	}
+}

etc/services/core/synapse/config/synapse.127.0.0.1.nip.io.log.config

@@ -0,0 +1,36 @@
+
+version: 1
+
+formatters:
+    precise:
+        format: '%(asctime)s - %(name)s - %(lineno)d - %(levelname)s - %(request)s - %(message)s'
+
+filters:
+    context:
+        (): synapse.util.logcontext.LoggingContextFilter
+        request: ""
+
+handlers:
+    console:
+        class: logging.StreamHandler
+        formatter: precise
+        filters: [context]
+
+loggers:
+    synapse:
+        level: INFO
+
+    shared_secret_authenticator:
+        level: INFO
+
+    rest_auth_provider:
+        level: INFO
+
+    synapse.storage.SQL:
+        # beware: increasing this to DEBUG will make synapse log sensitive
+        # information such as access tokens.
+        level: INFO
+
+root:
+    level: INFO
+    handlers: [console]

etc/services/core/synapse/config/synapse.127.0.0.1.nip.io.signing.key

@@ -0,0 +1 @@
+ed25519 a_FEMe JGs8Fk83GHIrVyhBYa/VRUFbU4+Fxtf8iOsJ7CMamcM

etc/services/env.dist

@@ -0,0 +1,12 @@
+SERVICE_SYNAPSE_BIND_PORT_CLIENT_API=127.0.0.1:42020
+SERVICE_SYNAPSE_BIND_PORT_FEDERATION_API=127.0.0.1:42028
+
+SERVICE_ELEMENT_WEB_BIND_PORT_HTTP=127.0.0.1:42025
+
+SERVICE_OLLAMA_BIND_PORT_HTTP=127.0.0.1:42026
+
+# See https://localai.io/basics/container/#all-in-one-images for the list of available images
+SERVICE_LOCALAI_IMAGE_NAME=docker.io/localai/localai:latest-aio-cpu
+SERVICE_LOCALAI_BIND_PORT_HTTP=127.0.0.1:42027
+
+# Variables below are added later on, dynamically

etc/services/localai/compose.yml

@@ -0,0 +1,20 @@
+services:
+  localai:
+    image: ${SERVICE_LOCALAI_IMAGE_NAME}
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8080/readyz"]
+      interval: 1m
+      timeout: 20m
+      retries: 5
+    ports:
+      - ${SERVICE_LOCALAI_BIND_PORT_HTTP}:8080
+    environment:
+      - DEBUG=true
+    volumes:
+      - ./localai/models:/build/models:cached
+
+networks:
+  default:
+    name: ${NETWORK_NAME}
+    external: true

etc/services/ollama/compose.yml

@@ -0,0 +1,13 @@
+services:
+  ollama:
+    image: docker.io/ollama/ollama:0.3.9
+    restart: unless-stopped
+    ports:
+      - "${SERVICE_OLLAMA_BIND_PORT_HTTP}:11434"
+    volumes:
+      - ./ollama:/root/.ollama
+
+networks:
+  default:
+    name: ${NETWORK_NAME}
+    external: true