feat: add VNC stream proxy & automate certbot renewal

This commit is contained in:
hyungi
2026-01-03 19:10:52 +09:00
parent 07ba73e329
commit dc5db0d15a
4 changed files with 178 additions and 13 deletions

View File

@@ -7,8 +7,9 @@ services:
container_name: home-service-proxy-ssl
restart: unless-stopped
ports:
- "8097:80" # HTTP (Let's Encrypt 인증용)
- "80:80" # HTTP (Let's Encrypt 인증용)
- "8443:443" # HTTPS (최종 접속용)
- "5901:5901" # macOS Screen Sharing (TCP Stream)
volumes:
- ./nginx-ssl.conf:/etc/nginx/nginx.conf:ro
- ./security.conf:/etc/nginx/conf.d/security.conf:ro
@@ -18,17 +19,6 @@ services:
networks:
- home-service-proxy-net
# Certbot (Let's Encrypt)
certbot:
image: certbot/certbot
container_name: home-service-certbot
volumes:
- ./ssl-certs:/etc/letsencrypt
- ./certbot-webroot:/var/www/certbot
command: certonly --webroot --webroot-path=/var/www/certbot --email ahn@hyungi.net --agree-tos --no-eff-email --expand -d jellyfin.hyungi.net -d komga.hyungi.net -d webdav.hyungi.net
profiles:
- ssl-setup
# Fail2Ban 보안 모니터링
fail2ban:
image: crazymax/fail2ban:latest